Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/LHiLWBMF5kpKNNOv1mTnORZmRY8.roa
File: LHiLWBMF5kpKNNOv1mTnORZmRY8.roa (raw, json)
Hash identifier: /uLIsFk+UBMW+3ypMEAQL4QeQIte6DHZGalQcT1wcoM=
Subject key identifier: 2C:78:8B:58:13:05:E6:4A:4A:34:D3:AF:D6:64:E7:39:16:66:45:8F
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC424942E4188E12675A7C218431454CB
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/LHiLWBMF5kpKNNOv1mTnORZmRY8.roa
Signing time: Mon 01 Jan 2024 08:29:40 +0000
ROA not before: Mon 01 Jan 2024 08:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207069
IP address blocks: 178.254.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:94:2e:41:88:e1:26:75:a7:c2:18:43:14:54:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c788b581305e64a4a34d3afd664e7391666458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:7d:88:10:80:43:f1:45:80:e2:97:c1:fe:
ad:b6:4c:51:5a:b6:dc:6b:e1:90:df:d2:43:bb:8d:
50:5e:e6:e7:6e:68:a6:a9:61:54:04:ee:4e:38:7e:
35:0a:da:72:c7:1b:46:c3:e5:07:e9:b4:a6:91:4d:
7b:0a:58:1d:82:5b:39:00:5d:30:6a:8b:52:ed:34:
24:c0:bb:bc:58:d6:5b:84:ce:f0:64:43:b8:bb:4c:
46:07:21:91:67:91:4c:d8:88:b4:62:70:e7:2f:96:
a2:d2:02:33:19:79:58:ce:a4:05:cd:17:c4:de:43:
02:ac:0b:7e:82:81:2c:23:48:85:5d:00:96:9d:a2:
c2:54:26:d9:7c:9c:20:de:8f:79:17:7b:16:d9:b5:
03:06:57:3c:92:78:a1:2a:1e:d4:89:a1:7d:c6:d9:
f4:1d:8f:b9:1e:19:e7:a6:44:c6:49:d3:e1:2a:fa:
16:0b:cb:62:75:e2:58:ec:24:5e:24:61:56:ea:5c:
41:2b:ee:6b:5f:bb:17:f6:5e:67:21:68:3e:1a:79:
f9:d0:a1:dd:14:e2:81:ba:7c:cd:5f:cd:5b:b1:25:
24:ee:a8:93:02:d0:71:7b:f2:e7:c9:b8:1f:99:6b:
ca:6a:01:61:fd:99:0e:d9:22:25:08:47:0e:22:6e:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:8B:58:13:05:E6:4A:4A:34:D3:AF:D6:64:E7:39:16:66:45:8F
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/LHiLWBMF5kpKNNOv1mTnORZmRY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.176.0/24
Signature Algorithm: sha256WithRSAEncryption
65:89:f9:9a:95:1e:5d:dd:34:19:a2:ec:4b:05:6b:95:29:94:
4a:4a:d2:5b:51:dd:82:1a:7f:22:4d:99:85:c2:dc:ca:da:e6:
fb:94:28:02:d2:d9:2b:01:56:0f:d8:36:9a:09:4a:c2:09:a3:
cb:8f:f4:bd:1b:ef:79:68:61:ea:9a:5b:ed:6c:52:09:ac:a5:
88:34:4c:1c:96:78:7a:28:31:15:e5:c2:8c:a8:a0:1f:00:0c:
b2:4a:5b:72:cf:43:5b:d9:66:6a:30:8d:4c:0e:e2:36:64:c0:
5c:c3:49:e2:34:ba:0f:aa:b6:49:f6:95:f6:7f:a9:02:6a:2a:
10:a5:be:ea:df:a7:a8:05:75:fe:64:b7:70:8e:25:ae:bf:7e:
9f:c0:ee:53:ab:72:bf:d8:37:f8:fb:77:ca:a8:0f:12:bc:78:
3a:ad:b9:6b:4f:dd:0f:cf:0f:ae:60:f7:6d:c6:49:c5:5d:0b:
e6:89:83:c8:a0:c4:d6:3d:57:b2:16:b6:92:2e:37:f7:d5:f7:
8a:8a:c5:60:c7:ea:d9:e9:52:3c:e4:19:25:f9:32:37:1e:fb:
37:80:5a:2c:49:6f:37:89:a7:1b:01:c1:8d:fe:2b:60:cc:4f:
c8:98:1f:8b:88:ef:9c:e0:be:9c:76:b0:c5:a2:de:ef:8f:25:
76:17:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:38 2025 by rpki-client