Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/YkvaKj0ShSsOPG3GH2mIJKXMlMU.roa
File: YkvaKj0ShSsOPG3GH2mIJKXMlMU.roa (raw, json)
Hash identifier: +hmJkeerCIjEvWepqcBiqG1p5lu3b3F6TyLY2KYXnHk=
Subject key identifier: 62:4B:DA:2A:3D:12:85:2B:0E:3C:6D:C6:1F:69:88:24:A5:CC:94:C5
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0189F2EE1F12F8CD3C27E8606D3D472DF4AD
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/YkvaKj0ShSsOPG3GH2mIJKXMlMU.roa
Signing time: Mon 14 Aug 2023 07:23:58 +0000
ROA not before: Mon 14 Aug 2023 07:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 20:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:ee:1f:12:f8:cd:3c:27:e8:60:6d:3d:47:2d:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Aug 14 07:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=624bda2a3d12852b0e3c6dc61f698824a5cc94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:68:61:f7:d6:35:fc:36:18:f1:67:52:ac:
4c:e6:1b:1b:91:27:1b:02:33:07:10:60:f8:10:d3:
74:06:9d:7f:e1:77:52:72:c9:0a:48:05:07:2f:fc:
5a:7e:40:2a:11:56:a0:bf:8b:ca:02:18:ea:2b:4c:
cf:49:09:13:a0:de:bc:41:97:25:4d:39:43:3d:d7:
bc:8b:0f:a9:e1:d9:26:8e:45:6a:f4:db:2d:4e:1d:
bb:79:56:22:57:f4:37:cb:53:d5:78:6e:47:96:ea:
d5:47:5f:d1:6a:2c:aa:e3:80:d7:c4:12:58:be:ac:
91:13:72:d2:64:b7:20:d1:af:e2:9b:61:ab:2e:75:
cf:eb:77:c0:49:d6:a4:54:56:29:43:cf:d3:45:f4:
c9:94:17:a8:e5:58:7c:76:33:87:fe:dc:3c:ad:47:
11:9c:b7:c3:99:36:d4:d2:32:eb:99:e5:3b:5a:63:
94:21:39:0f:a4:9b:75:3e:ea:8e:a2:f7:f6:56:6a:
68:db:42:b2:58:77:fc:28:22:43:17:6b:35:4f:6f:
33:f3:c2:d0:b6:90:f8:09:6d:ff:35:eb:e2:f8:64:
f1:1b:cf:61:4e:7c:5c:fd:cf:bd:b3:ef:a0:4e:42:
8f:b7:7a:c5:59:81:40:c6:91:0a:87:ac:43:76:1e:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:DA:2A:3D:12:85:2B:0E:3C:6D:C6:1F:69:88:24:A5:CC:94:C5
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/YkvaKj0ShSsOPG3GH2mIJKXMlMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
60:31:76:cf:f1:48:22:6f:f8:ca:b9:25:5c:f4:34:4a:7e:cd:
f4:29:0e:a1:a1:90:c5:63:30:3d:42:88:42:9d:5e:87:78:d1:
15:5b:6e:c2:75:a1:82:be:15:7f:51:3f:91:a3:2a:32:91:9d:
57:a1:69:ed:a6:95:42:33:32:79:ba:44:5d:d3:10:f0:33:ad:
9a:2b:ad:d5:f0:17:25:57:80:eb:31:1f:1c:a1:37:88:b1:d3:
22:3e:60:8a:80:ae:4a:d0:d6:d2:84:0d:06:0c:0d:ff:57:91:
d4:96:6a:da:2d:cb:ee:09:ea:1d:36:c4:68:1c:00:53:fb:05:
48:b5:cc:eb:ea:71:50:01:71:c5:57:33:ec:50:1c:57:e0:d8:
03:4e:d5:8f:84:51:a6:ff:37:74:f6:f9:6c:69:f6:ae:ae:aa:
a9:cc:be:66:34:03:20:35:e7:39:2c:f9:bc:56:ce:9b:96:38:
ef:16:58:8f:5a:67:59:85:10:f9:fe:82:56:b0:48:2c:64:64:
35:2c:d3:a8:29:30:9b:bc:06:33:be:6e:6c:6a:ed:37:03:3a:
85:a8:0e:ca:7d:c5:b5:cb:ec:85:25:f4:1d:e3:05:f6:9c:38:
95:3e:41:83:8d:86:5f:b2:50:30:4b:58:52:f2:c2:3e:cf:88:
7c:a9:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org