Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/0e3BRou_pOebJxWhFDvYer9fiaM.roa
File: 0e3BRou_pOebJxWhFDvYer9fiaM.roa (raw, json)
Hash identifier: rHvEDf1FyZp1sqjfPFQ1TIbrpFoStjAE7uLt2Vk3JNQ=
Subject key identifier: D1:ED:C1:46:8B:BF:A4:E7:9B:27:15:A1:14:3B:D8:7A:BF:5F:89:A3
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188959D498A75C8E96DBDF48773675BE2D3
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/0e3BRou_pOebJxWhFDvYer9fiaM.roa
Signing time: Wed 07 Jun 2023 11:28:13 +0000
ROA not before: Wed 07 Jun 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202749
IP address blocks: 178.254.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:9d:49:8a:75:c8:e9:6d:bd:f4:87:73:67:5b:e2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 7 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1edc1468bbfa4e79b2715a1143bd87abf5f89a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:dc:e5:ad:c2:d5:2c:3d:f6:a2:b4:e4:14:
9f:cc:8f:24:48:d0:65:32:76:25:2f:8f:55:a6:21:
54:8e:5a:10:43:b4:18:1b:a0:7c:91:f8:57:3e:18:
da:f2:31:bc:67:32:9c:64:31:c4:d8:6c:b9:40:b4:
cf:5d:07:70:56:8b:a9:21:63:ee:fe:30:25:76:35:
7e:a9:65:23:53:5f:50:3c:a5:04:e6:01:f0:82:b6:
4f:68:72:d7:a3:d8:e6:fa:07:64:7d:12:8f:ac:4f:
f5:22:e4:5e:bf:66:8e:2e:87:e5:e5:4e:e6:e0:25:
0c:59:66:d6:13:9c:2e:96:18:0c:fb:92:51:04:b3:
2a:f9:8f:1e:0d:8f:ae:d5:88:ef:50:2b:55:eb:08:
31:fc:5f:58:dd:f9:d5:16:0a:ef:25:88:88:92:c4:
13:52:8c:db:2d:49:f7:7f:c6:01:72:09:36:98:a2:
1b:35:e0:61:93:a7:c4:a4:4d:2d:10:e7:40:7f:15:
2c:51:f0:53:e8:19:33:6e:3f:b0:42:9f:ff:dc:7b:
76:21:1f:46:e2:8f:71:36:1a:af:04:ae:11:e3:ff:
91:e5:77:ee:05:00:60:22:f9:d2:e9:0f:bf:14:ee:
72:98:8a:6c:bb:fe:80:83:a4:92:6a:e9:33:9b:8b:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:C1:46:8B:BF:A4:E7:9B:27:15:A1:14:3B:D8:7A:BF:5F:89:A3
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/0e3BRou_pOebJxWhFDvYer9fiaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.147.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d9:8c:a0:c1:aa:2d:8f:82:90:aa:81:f9:ba:f8:b5:29:ee:
0f:9d:06:63:db:4d:bc:51:17:55:c5:ce:33:1e:9e:c3:eb:09:
66:da:a6:72:d8:f6:17:5a:2c:b5:06:a8:90:7e:1e:01:c3:a3:
05:f2:75:81:de:a4:a3:c2:e9:51:1e:39:5e:1f:9a:d3:f5:a4:
0f:79:5c:3b:3f:5f:1b:95:a7:10:bc:d5:88:ad:04:b8:3e:99:
80:ac:43:c5:04:67:39:b1:b7:32:fc:ca:16:cd:10:e6:3f:a0:
90:58:ad:02:ad:eb:af:d2:0e:23:d5:b9:af:00:e0:24:8a:3e:
59:33:00:e1:0d:60:b1:6a:9f:f5:88:72:2e:43:ef:c4:74:8b:
a2:47:43:29:c7:2e:4b:13:ec:96:52:97:e5:19:0f:28:ff:f8:
87:8d:19:50:a0:8f:9e:27:f9:91:1d:ac:e5:63:09:56:c6:12:
b5:af:aa:21:de:eb:6a:92:73:21:7c:c7:c0:7c:52:ca:49:44:
56:83:4c:fb:4d:03:bc:2d:5d:d0:87:a9:6b:91:65:47:88:ab:
29:0e:c6:a6:a6:3a:63:29:83:49:19:41:e9:d9:c8:4b:13:ed:
27:e4:61:e3:f8:be:85:db:3a:7c:ce:41:ca:b4:72:bd:a1:f2:
f8:cc:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org