Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/CI1JSPG8g2q8etofmCSUDCOXJjs.roa
File: CI1JSPG8g2q8etofmCSUDCOXJjs.roa (raw, json)
Hash identifier: 4gOgHtLQz07I3ATdricSSh9qurWG1YMAjqqEDK79bI0=
Subject key identifier: 08:8D:49:48:F1:BC:83:6A:BC:7A:DA:1F:98:24:94:0C:23:97:26:3B
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 01863AE9385ABB88B1E30211D51069D75CEE
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/CI1JSPG8g2q8etofmCSUDCOXJjs.roa
Signing time: Fri 10 Feb 2023 10:40:08 +0000
ROA not before: Fri 10 Feb 2023 10:40:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34535
IP address blocks: 178.250.188.0/23 maxlen: 23
193.0.227.0/24 maxlen: 24
193.0.229.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
178.250.184.0/22 maxlen: 22
178.250.184.0/23 maxlen: 23
178.250.186.0/24 maxlen: 24
2a0f:cdc0::/32 maxlen: 32
2a0f:cdc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 Feb 2023 09:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:e9:38:5a:bb:88:b1:e3:02:11:d5:10:69:d7:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 10 10:40:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=088d4948f1bc836abc7ada1f9824940c2397263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:2b:b7:8a:93:90:a8:20:f0:ba:25:3f:96:
63:12:1a:8d:6a:a1:bb:32:03:66:9c:d8:ed:df:8d:
55:d0:b2:96:05:14:ed:39:b8:db:5e:a1:ed:9c:56:
59:31:2c:36:01:b0:43:e0:13:ac:40:e5:c2:a4:4f:
35:7a:9c:6c:fe:d4:4a:f3:2d:79:b9:35:c6:1f:4c:
64:9a:51:2e:8c:9b:84:72:28:77:e0:84:02:4f:a7:
ec:63:70:e5:6a:e4:f6:79:a0:5c:cf:e6:e9:84:ee:
c0:e9:4f:13:cc:dc:2d:55:bc:ee:88:95:32:a6:56:
f1:b7:4c:db:00:7b:fa:a9:c4:61:60:62:8f:f4:cd:
e5:fc:39:43:88:8b:81:db:6f:85:6a:8c:23:7c:c1:
45:7c:51:8d:1e:7e:55:13:db:be:23:a3:38:d1:d4:
9c:1f:c5:ec:07:1e:3b:60:54:0b:dd:08:ab:1b:c2:
22:d4:61:1c:4a:3e:6c:73:6e:52:92:84:71:a2:09:
7a:d3:de:58:50:21:1c:98:08:70:20:f0:c6:2a:b6:
9a:c3:bb:88:7d:11:a5:f8:9b:76:bf:7e:1b:97:28:
c0:89:30:ed:46:bd:aa:46:28:1e:3b:01:bf:7c:8f:
4a:af:66:88:d6:d7:a3:2f:62:29:37:13:5e:ab:fb:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:49:48:F1:BC:83:6A:BC:7A:DA:1F:98:24:94:0C:23:97:26:3B
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/CI1JSPG8g2q8etofmCSUDCOXJjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0-178.250.189.255
193.0.227.0/24
193.0.229.0-193.0.230.255
IPv6:
2a0f:cdc0::/31
Signature Algorithm: sha256WithRSAEncryption
4b:a5:51:56:ce:7b:4a:3d:51:4e:96:77:6b:4f:e1:79:38:c1:
17:a9:07:b1:cb:6b:a5:bb:4a:25:5a:d1:67:a6:52:ed:37:45:
7e:ee:04:0e:75:02:57:44:b3:0c:ba:bc:00:b5:5c:08:50:b7:
87:e9:dc:5d:10:d8:92:a9:a8:75:8f:25:25:fa:dd:8a:b6:88:
75:3f:90:af:af:d9:6f:f0:3e:7b:50:b7:b4:94:bc:94:67:3b:
fa:92:ef:6b:8a:d5:b2:b4:a3:90:d1:cb:95:3f:06:4b:05:bc:
fa:82:29:bb:c8:23:34:78:35:56:e0:a2:04:75:12:b4:f6:84:
50:49:8a:09:33:9d:56:cc:b1:f9:a1:29:f9:65:7f:fa:bc:71:
f5:34:c4:ad:a9:70:ae:dc:d0:5a:78:8c:ce:46:49:d3:8b:50:
fb:20:e8:73:73:64:65:ae:ae:41:ed:d4:6c:9c:ba:b5:d0:14:
ec:27:15:2a:6a:a6:ca:6c:06:a6:16:ba:62:c6:8b:b5:8a:91:
61:05:2a:56:97:f8:1e:50:21:26:f9:bc:20:e6:99:2b:22:d4:
60:a5:f9:bf:12:73:e9:6e:4e:e7:d7:9f:fe:8f:96:37:5d:74:
6c:51:43:bd:8c:dc:d3:87:85:9c:4c:d0:8b:3a:36:43:c2:d5:
6f:19:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org