Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/EEMLsnuq954VrEIb2nZWqam0wvw.roa
File: EEMLsnuq954VrEIb2nZWqam0wvw.roa (raw, json)
Hash identifier: Cq9jUcSYoZYeCHx4ErRt7SyDGpuWAJqMbIhi+0Fp9Rs=
Subject key identifier: 10:43:0B:B2:7B:AA:F7:9E:15:AC:42:1B:DA:76:56:A9:A9:B4:C2:FC
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018570CBFC3510F557AE2D780B9317E7F863
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/EEMLsnuq954VrEIb2nZWqam0wvw.roa
Signing time: Mon 02 Jan 2023 04:44:54 +0000
ROA not before: Mon 02 Jan 2023 04:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34535
IP address blocks: 178.250.188.0/23 maxlen: 23
193.0.227.0/24 maxlen: 24
193.0.229.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
178.250.184.0/22 maxlen: 22
2a0f:cdc0::/32 maxlen: 32
2a0f:cdc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 Feb 2023 10:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:fc:35:10:f5:57:ae:2d:78:0b:93:17:e7:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 04:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10430bb27baaf79e15ac421bda7656a9a9b4c2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:05:4e:d0:d3:0d:00:7f:92:86:74:a0:30:
7c:05:1e:06:af:e8:f8:e9:d6:1d:63:63:fd:8f:1a:
84:0a:ec:f1:0a:60:a1:50:9c:31:cd:83:34:ea:cb:
85:39:23:b6:57:e8:16:97:1a:ba:f1:0c:cf:79:06:
1c:c4:c9:7d:8c:bd:a2:7e:b1:0d:42:82:25:68:9c:
3a:0c:60:74:92:3c:14:8b:00:5f:f9:90:f5:a1:17:
58:0b:f4:a9:58:55:43:31:c6:79:eb:e2:8f:ee:18:
59:16:db:ab:6a:aa:6c:1d:21:f9:fe:da:c2:ca:38:
d4:be:47:8d:96:c4:29:2e:0e:55:b2:5b:d6:d6:66:
f7:a5:91:e1:c5:14:62:55:2a:41:08:40:f9:60:8a:
a9:e6:ee:41:b0:ac:68:85:dd:86:70:16:25:fe:7c:
34:39:5b:46:3c:c1:35:0d:c5:dc:d6:79:97:71:db:
85:18:92:7b:c8:f6:0b:f2:57:83:ec:5e:e5:5a:17:
5b:7b:6a:f4:d2:42:07:d6:1d:83:05:7e:7e:15:54:
bc:13:ce:17:74:f5:ca:90:16:dc:da:59:0b:e1:b3:
00:85:ab:2b:51:28:07:77:82:a9:2a:16:e0:54:5d:
ca:d1:c8:db:7c:68:92:07:df:d0:8d:74:da:c3:74:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:0B:B2:7B:AA:F7:9E:15:AC:42:1B:DA:76:56:A9:A9:B4:C2:FC
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/EEMLsnuq954VrEIb2nZWqam0wvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0-178.250.189.255
193.0.227.0/24
193.0.229.0-193.0.230.255
IPv6:
2a0f:cdc0::/31
Signature Algorithm: sha256WithRSAEncryption
a2:cb:79:a6:b5:9f:df:93:5a:cb:a1:bb:75:aa:9c:9c:f2:ea:
0b:65:9d:b7:94:9f:3e:02:00:5d:8e:48:97:76:7e:59:7a:68:
ab:31:6b:67:9d:ca:c1:55:23:ca:3a:1e:03:1a:92:71:b8:2c:
6d:24:fb:83:c3:09:a3:65:bf:5c:e2:b3:52:4e:d9:24:70:6f:
de:7a:fe:d2:07:62:45:67:e8:0e:0c:c2:2b:e6:c7:6c:ed:60:
0e:64:63:d1:8f:64:b0:66:e6:0f:15:6a:bf:d3:14:f6:dc:a7:
52:68:cb:03:23:6c:9f:a4:e6:01:9f:40:23:ed:f6:81:ca:ec:
0c:0d:79:62:f6:70:b8:b6:9d:66:f6:16:70:19:05:e0:6b:db:
37:71:90:23:52:6b:82:92:46:37:93:92:cb:76:74:d9:d1:3f:
66:36:6d:ed:ae:82:75:e2:6e:33:ad:fb:e0:b0:97:46:fc:0a:
c5:74:47:c8:d3:80:90:58:ae:ea:a0:4d:d5:ed:2c:3b:93:0a:
f1:d5:ec:4c:6d:5e:7f:49:64:3c:af:8e:fc:f7:7a:13:87:b8:
01:41:8d:e4:20:30:57:0f:3c:56:3c:f4:9e:6e:f2:1e:cd:51:
c2:dc:d7:49:45:f4:bb:25:2a:9c:03:44:27:b1:f4:18:dd:8b:
96:d2:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org