Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xiAV7nEpT-THZYJj8v_KQFCFMok.roa
File: xiAV7nEpT-THZYJj8v_KQFCFMok.roa (raw, json)
Hash identifier: Kxkq8bf0VfVawHNOt1xAk78yhPMphfBRo13E5SX5xXA=
Subject key identifier: C6:20:15:EE:71:29:4F:E4:C7:65:82:63:F2:FF:CA:40:50:85:32:89
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188959D4ADA92C33E44CA99C45710F782F9
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xiAV7nEpT-THZYJj8v_KQFCFMok.roa
Signing time: Wed 07 Jun 2023 11:28:13 +0000
ROA not before: Wed 07 Jun 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207069
IP address blocks: 178.254.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:9d:4a:da:92:c3:3e:44:ca:99:c4:57:10:f7:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 7 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c62015ee71294fe4c7658263f2ffca4050853289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:0a:65:b4:94:3a:ea:3a:55:f4:fa:0b:54:
ff:c3:5f:01:f7:54:d2:5b:b1:d5:0d:c1:87:62:71:
19:79:d7:1b:3b:38:47:34:fc:1c:37:3e:62:68:95:
09:95:29:92:22:99:ff:e5:49:32:92:80:20:d6:12:
40:24:20:9c:34:12:4a:80:9f:f5:52:58:a3:7b:85:
ee:ee:b2:ca:32:bb:91:af:42:61:57:ef:ae:00:db:
22:d9:66:60:6a:53:20:9e:5b:0c:24:8b:83:a9:45:
ee:9d:5a:68:27:82:b9:64:c9:bf:1a:1e:26:24:8c:
f6:1e:be:cd:34:dc:a7:00:ca:b9:0c:c3:89:59:7c:
e4:15:15:5e:d4:33:d9:7c:b7:92:75:76:dd:9a:fd:
73:28:09:bc:38:35:77:4b:a2:31:56:33:62:8a:6f:
a0:18:98:82:ca:eb:80:a2:e8:f7:4d:8a:46:7d:77:
91:d1:3f:75:79:37:c7:d9:5c:5e:97:b6:11:15:25:
3e:5b:8a:5d:8f:a5:7a:c6:e4:48:88:1e:67:41:78:
88:0b:c8:4f:7b:9e:27:c3:d5:95:61:54:ab:e8:3d:
ba:f0:4d:0c:63:c5:99:db:67:af:a7:ca:b1:d5:71:
fb:8e:0b:96:f4:3f:0d:f5:2e:0a:fb:43:4f:7a:cc:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:20:15:EE:71:29:4F:E4:C7:65:82:63:F2:FF:CA:40:50:85:32:89
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xiAV7nEpT-THZYJj8v_KQFCFMok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.176.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fc:25:bb:8b:66:ef:58:90:04:6d:2d:fd:1a:e0:5f:f8:54:
a1:67:3f:7d:28:e9:68:e7:60:0f:f6:13:03:06:cf:24:88:fd:
3b:f3:c3:44:27:ef:73:dc:fb:86:d9:25:af:12:32:6e:cb:f6:
c4:b8:9e:a2:17:ae:32:05:c2:32:4b:0f:b3:bb:8a:a8:98:51:
68:84:98:e1:61:ec:5c:a3:63:c0:1c:e1:9c:65:77:3d:25:31:
b9:a2:70:83:45:7d:c6:f9:90:19:18:8a:3a:e1:92:57:7a:53:
61:01:67:bf:11:fa:5c:0c:00:01:78:f7:48:96:78:ac:a9:30:
4a:1c:b6:4b:bc:1e:8e:76:24:6d:e1:7f:07:27:d6:f5:81:59:
0f:51:fb:03:24:07:3c:ef:8b:17:dc:b7:ab:94:89:03:9d:4d:
5a:59:48:06:1a:5c:4f:a5:a3:d3:6a:07:42:e2:1f:76:d6:4c:
9d:13:f0:b1:5c:9b:e3:35:33:c2:4c:1d:01:18:0f:14:1a:19:
95:5c:b3:76:68:c3:f3:e5:81:e4:f4:24:85:9a:4f:31:93:24:
31:f1:d1:b8:67:d5:e2:95:d3:e4:d8:02:ec:ec:7e:fc:6c:91:
cd:5c:3a:4a:c8:9b:80:01:fe:fb:f9:c7:74:fe:1d:4c:52:30:
11:49:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:38 2024 by rpki-client on console-ams.rpki-client.org