Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/C-JxIWvITf7L5yq8BYQ9rJSLgeI.roa
File: C-JxIWvITf7L5yq8BYQ9rJSLgeI.roa (raw, json)
Hash identifier: a4S9A0dXj3hxKhjEI0awfvYi8C1fZUZat/4/8f3n1Gk=
Subject key identifier: 0B:E2:71:21:6B:C8:4D:FE:CB:E7:2A:BC:05:84:3D:AC:94:8B:81:E2
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 0186E4636FED5FE915AB1A8CF13B32E4B748
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/C-JxIWvITf7L5yq8BYQ9rJSLgeI.roa
Signing time: Wed 15 Mar 2023 08:29:27 +0000
ROA not before: Wed 15 Mar 2023 08:29:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34535
IP address blocks: 178.250.190.0/23 maxlen: 24
193.0.227.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
178.250.184.0/23 maxlen: 23
2a0f:cdc0::/32 maxlen: 32
2a0f:cdc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 30 Jul 2023 06:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:63:6f:ed:5f:e9:15:ab:1a:8c:f1:3b:32:e4:b7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Mar 15 08:29:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0be271216bc84dfecbe72abc05843dac948b81e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:0c:64:64:d5:75:f4:e4:cb:75:a3:70:7f:
e3:1e:80:e2:17:9e:d7:4d:85:49:35:bb:0a:b5:dd:
27:cf:94:63:8b:ba:81:fa:cc:1d:80:7a:f4:ab:75:
8a:50:b6:50:cb:89:c0:e6:1d:ed:ba:5a:85:89:32:
cc:21:41:01:e0:b4:95:0c:0d:1b:28:56:89:b9:eb:
f4:16:07:96:8a:08:2f:de:3a:57:c4:2f:78:79:cf:
4d:7e:ad:1e:bc:68:56:b4:88:03:f9:b3:e4:f4:08:
47:7b:64:b3:f4:d4:3d:e7:84:c2:d8:44:0c:06:6c:
bb:1b:6b:f8:5b:f5:23:02:a4:fd:19:78:8b:21:59:
17:5e:52:04:3e:59:ec:d9:06:a3:c2:19:10:e4:30:
72:54:6c:86:1e:b8:75:1a:03:0f:e6:a0:c2:0d:64:
0e:30:ad:ea:15:ce:ba:8f:cd:9d:5b:3a:55:67:ea:
65:4c:a7:f9:d5:e4:b2:5f:22:e9:c3:2b:a4:90:50:
45:2d:86:16:98:49:b6:c9:ec:30:82:72:88:5e:4f:
18:a6:21:49:b2:67:33:1d:ff:2d:8c:e6:30:57:40:
67:ee:06:49:2e:0c:da:76:bc:1c:1d:f5:16:09:1f:
24:b0:80:b2:52:56:c2:5e:46:72:9a:b5:9d:f6:37:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:71:21:6B:C8:4D:FE:CB:E7:2A:BC:05:84:3D:AC:94:8B:81:E2
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/C-JxIWvITf7L5yq8BYQ9rJSLgeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0/23
178.250.190.0/23
193.0.227.0/24
193.0.230.0/24
IPv6:
2a0f:cdc0::/31
Signature Algorithm: sha256WithRSAEncryption
72:34:9d:72:7a:92:c6:04:f7:b4:ac:3a:4b:ec:82:32:19:34:
11:22:62:8d:ad:ec:42:04:58:75:e6:71:35:ff:09:30:8b:20:
fb:3c:40:ef:42:29:53:a7:cf:e0:4f:a7:82:b1:74:4e:b6:59:
f3:39:69:f9:09:8c:ab:39:42:f9:c6:6f:ce:48:86:48:18:27:
d9:2c:3c:25:5f:ce:5a:c8:7a:8c:78:38:40:51:0c:d7:85:44:
ee:a6:89:5e:02:74:e7:d9:39:ba:d9:6f:6e:ca:47:ea:37:a2:
8f:73:3b:53:9f:e7:72:c8:3c:9b:45:11:d2:c1:02:2f:38:99:
70:43:52:86:44:07:af:95:c4:91:33:e7:76:ae:06:78:a4:a4:
cf:bf:56:e6:aa:02:5f:1f:9f:ad:07:a8:39:62:f3:57:6c:7f:
7e:2a:d3:17:fb:d3:bd:56:c5:d1:98:76:81:7f:a3:88:8c:f3:
bc:90:88:13:cd:b8:fa:a9:37:87:b9:6a:e0:de:ba:99:e6:8b:
ce:97:34:e3:74:a5:43:8e:e8:7e:a6:24:74:ef:c1:80:3b:70:
fa:93:c2:2c:92:9c:6f:59:d9:a4:ad:c0:95:fb:b3:22:bb:d9:
d7:ee:52:e5:9a:67:f3:fe:86:5d:56:c0:97:2f:1c:d0:b6:69:
48:6b:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org