Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/fDMkQ1P8dkrtM3WnTmRC-28nB9c.roa
File: fDMkQ1P8dkrtM3WnTmRC-28nB9c.roa (raw, json)
Hash identifier: jqX0qx2Vqx7MTD+WPrNYN7zCDJWBiTOxUJ1CqMw1dIg=
Subject key identifier: 7C:33:24:43:53:FC:76:4A:ED:33:75:A7:4E:64:42:FB:6F:27:07:D7
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018CC802220DD070CEEAA8BF6DB66EED0B4D
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/fDMkQ1P8dkrtM3WnTmRC-28nB9c.roa
Signing time: Tue 02 Jan 2024 02:30:32 +0000
ROA not before: Tue 02 Jan 2024 02:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 178.250.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 18:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:22:0d:d0:70:ce:ea:a8:bf:6d:b6:6e:ed:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 02:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c33244353fc764aed3375a74e6442fb6f2707d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:58:8b:44:d0:14:7e:b6:dc:e3:1f:82:ea:
0a:e8:8f:10:3f:c0:3d:fb:b5:4a:6c:ac:30:cf:ce:
c4:a3:48:22:b4:a8:cf:9e:6e:09:3d:fc:0f:0f:77:
ca:e1:a3:55:48:e7:9b:bb:8e:9e:b0:14:a0:45:86:
52:81:5c:49:01:92:39:ea:01:f3:c4:9f:23:53:ae:
d7:9c:2a:bd:1b:eb:66:54:6b:3f:75:34:f5:87:35:
c4:78:fc:73:78:9b:61:1a:43:27:13:ac:37:28:98:
f3:e5:f4:8f:58:e6:05:cd:2e:1d:dc:2a:55:79:f9:
9b:2b:0e:ef:30:9d:41:13:92:a3:3c:d5:e3:4b:3e:
12:ad:4f:7b:57:40:58:53:25:24:0a:0d:b9:27:86:
55:9b:a8:20:3a:2c:24:03:7a:df:44:13:ef:0f:c9:
28:de:5e:5c:57:a3:68:2c:84:69:ef:48:f8:14:b9:
7c:86:48:9c:f7:76:f6:33:3e:ff:63:49:25:18:c5:
1e:f9:36:0e:d3:98:65:1d:52:4f:2b:0d:e4:27:76:
50:d7:4b:9f:78:75:46:0c:d7:46:2c:2a:e0:05:f8:
5e:7c:2f:7e:c9:fd:7d:70:14:e3:cd:f9:6f:4a:b8:
d6:d9:fe:54:c5:b7:f1:bb:d8:7e:ea:6f:34:ae:9b:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:24:43:53:FC:76:4A:ED:33:75:A7:4E:64:42:FB:6F:27:07:D7
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/fDMkQ1P8dkrtM3WnTmRC-28nB9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:45:ab:33:56:e6:68:4e:59:83:c2:85:41:93:ce:cb:8d:e0:
e7:9b:22:97:c5:a6:52:1a:d3:60:50:25:ad:6c:78:1d:82:b0:
43:58:64:34:67:3c:44:25:e7:3a:01:8a:0c:a9:f6:df:bb:77:
ec:bb:9f:a1:e5:a2:b3:d6:7e:b4:59:56:b8:69:e9:a1:8f:b6:
0c:6f:45:2e:15:87:5e:ab:ed:92:d4:07:e3:08:c4:05:91:d3:
9f:06:db:29:85:66:2f:83:4d:80:5d:8f:60:5a:14:09:ce:ff:
5b:45:a1:20:02:6b:32:68:b1:05:e0:44:8c:79:f9:2d:f7:f1:
fe:5f:70:bd:dd:bb:fc:cd:bc:82:69:84:24:c1:0c:ae:c0:8c:
28:cc:2e:b3:88:53:10:22:a1:0e:6e:13:31:1b:ff:e9:ab:3f:
07:3d:16:a6:79:d8:f4:6d:54:80:e7:26:b6:8a:d1:0a:e3:81:
69:fd:33:f0:af:04:3d:7e:d7:bc:45:2d:59:05:02:a1:58:14:
7a:9d:6c:48:6b:80:8c:db:95:fb:e2:1f:52:eb:d8:eb:97:cd:
1a:c5:6a:32:8c:56:8f:f2:f4:b0:4f:74:70:cb:7b:92:a1:42:
3a:a3:2f:82:63:69:36:42:c6:e5:52:5a:ea:27:6a:f1:8c:cf:
3c:28:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-fra.rpki-client.org