Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/HiWj09JGqpwO2yo31qi-0419_98.roa
File: HiWj09JGqpwO2yo31qi-0419_98.roa (raw, json)
Hash identifier: L4fICr32TwxTepMOXNcDfJlJhjkof+S/01I0lp0g2DQ=
Subject key identifier: 1E:25:A3:D3:D2:46:AA:9C:0E:DB:2A:37:D6:A8:BE:D3:8D:7D:FF:DF
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 01863AE938FE023CEBEA7265924E27322D99
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/HiWj09JGqpwO2yo31qi-0419_98.roa
Signing time: Fri 10 Feb 2023 10:40:08 +0000
ROA not before: Fri 10 Feb 2023 10:40:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41609
IP address blocks: 178.250.190.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
2a00:4080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Feb 2023 09:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:e9:38:fe:02:3c:eb:ea:72:65:92:4e:27:32:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 10 10:40:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e25a3d3d246aa9c0edb2a37d6a8bed38d7dffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:59:5c:70:df:a1:23:b2:01:d5:65:1a:39:fd:
49:b6:0d:30:b2:a2:b4:73:e2:98:6b:dd:16:2b:98:
8c:2d:63:d1:cd:f1:1e:35:43:bc:4d:98:48:cf:c8:
52:ed:83:27:70:67:11:a3:b3:9f:44:d3:63:50:99:
88:2a:8f:3f:8a:81:e8:8a:6e:a7:bf:0e:a1:f1:f4:
af:44:07:05:12:c8:d6:bb:57:bf:f2:f6:eb:5e:68:
5d:ff:22:8f:e5:bb:d6:9d:3f:7f:ae:1c:cd:23:f2:
92:14:6e:53:65:c5:25:aa:42:85:b2:40:5a:98:7d:
54:a1:7d:0a:60:ed:47:39:28:1d:81:39:66:79:1b:
8b:cd:4e:32:b8:59:16:a7:6b:0e:05:62:96:e2:93:
a8:d8:e1:79:f7:63:57:ff:86:ba:a5:19:2f:55:c1:
06:52:b6:64:73:4c:3d:5c:0a:5c:db:78:5b:26:8a:
ea:3f:8d:27:4e:24:7c:37:59:55:b2:59:5f:1f:df:
a9:1e:0a:5a:b7:7d:69:30:d5:11:eb:56:19:96:f0:
a0:1b:af:f6:e2:5d:2d:48:64:30:e0:17:7c:d0:dc:
78:e9:f8:e6:d6:a1:f5:be:92:c1:d7:32:c4:7e:19:
02:aa:40:b2:86:70:51:e4:1f:40:bf:f5:9e:22:0d:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:25:A3:D3:D2:46:AA:9C:0E:DB:2A:37:D6:A8:BE:D3:8D:7D:FF:DF
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/HiWj09JGqpwO2yo31qi-0419_98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.190.0/23
IPv6:
2a00:4080::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f3:4d:a7:72:c4:c2:b5:6f:7a:b6:c8:3c:fe:38:9f:da:4f:
cf:1c:c1:fd:92:50:a4:0a:1d:d5:fb:15:60:8a:40:2f:59:4c:
4d:36:b0:ef:fb:df:02:a3:c1:17:17:c6:23:b0:f7:97:08:7f:
c5:bb:cf:73:6d:de:9d:6f:e4:94:4e:fa:42:ed:5f:cc:6a:73:
d8:f6:71:24:0e:75:7a:36:f1:a9:e1:fe:2f:0e:92:30:81:6f:
a1:d9:84:4f:a8:b1:91:42:60:45:54:63:0c:7d:fa:50:8d:ce:
b9:f7:1b:eb:bb:d2:14:51:8e:7f:b3:31:4e:0a:e4:cb:f3:aa:
0d:bb:17:f8:37:4f:0b:7b:06:fd:d5:3b:ab:db:97:ad:9e:ae:
93:f7:9d:4d:6d:5f:48:32:e4:cd:c7:20:c5:80:dd:86:df:a7:
7e:03:ec:98:75:ac:b7:1d:95:21:f0:54:b5:c7:9c:b5:3b:10:
f8:36:9a:ad:fe:9e:9b:33:89:73:7f:43:24:63:c8:47:76:ec:
99:1a:0d:4f:d4:e8:fa:cd:42:21:e0:ab:46:68:ce:a2:90:d7:
63:e2:ba:55:9e:d9:9e:f0:f7:7d:e4:36:fe:5c:9d:53:9f:6c:
4a:63:e7:51:a6:bb:09:e3:f1:f7:d4:e1:a2:08:56:ee:64:6e:
1f:67:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org