Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/eMCF7_wllRHYzXuCxyTANMb_otM.roa
File: eMCF7_wllRHYzXuCxyTANMb_otM.roa (raw, json)
Hash identifier: mSJvhpX/gd2LgDa1ISfDRMixta9mtnLMsmTRZhd3CfM=
Subject key identifier: 78:C0:85:EF:FC:25:95:11:D8:CD:7B:82:C7:24:C0:34:C6:FF:A2:D3
Certificate issuer: /CN=17802133d98b655a9f5411b700ec79347e1eb490
Certificate serial: 018BC84353F0A946AE0D9D290B307627A572
Authority key identifier: 17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/eMCF7_wllRHYzXuCxyTANMb_otM.roa
Signing time: Mon 13 Nov 2023 10:38:57 +0000
ROA not before: Mon 13 Nov 2023 10:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 176.97.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:43:53:f0:a9:46:ae:0d:9d:29:0b:30:76:27:a5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17802133d98b655a9f5411b700ec79347e1eb490
Validity
Not Before: Nov 13 10:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c085effc259511d8cd7b82c724c034c6ffa2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:ff:af:8f:56:e3:0a:9e:68:28:5b:8d:71:
f6:1e:7b:c9:d9:44:0d:5a:66:07:75:cc:00:ce:df:
84:3c:90:72:03:4a:14:6d:7f:9c:ac:af:59:b4:4c:
9f:cf:93:b2:f1:31:17:f7:5e:9c:bc:9c:f7:a6:fd:
03:3a:52:ba:50:04:07:77:06:a0:48:9d:be:c6:04:
55:8c:5d:8b:99:91:cf:5d:6c:e0:f7:21:32:fe:87:
ef:4c:3c:0e:40:45:f4:66:8e:fe:e6:2c:60:93:bf:
18:70:07:b9:7b:7b:a7:54:9e:9b:c2:02:bb:26:51:
b7:ef:08:86:70:f4:39:2f:50:e8:ee:64:97:37:0e:
d3:e5:aa:06:6c:3e:0f:0e:41:eb:34:53:8b:b4:b9:
38:83:82:51:1e:ad:a2:ed:1b:37:e6:3a:d3:b6:39:
08:a8:96:55:ac:10:17:6d:13:ef:92:44:9b:9c:fe:
5b:72:5e:fb:f6:d1:6d:b8:49:fb:ae:b3:95:dd:35:
e1:d1:46:b8:b9:e8:d2:ef:b5:0e:fa:f5:dd:b1:f0:
4a:a3:ca:5a:c9:a7:de:3a:97:76:b0:44:2f:2c:b4:
9f:e0:6e:f5:d9:40:f1:03:83:28:2d:61:f1:77:2d:
a2:4e:6b:47:36:16:22:da:9f:e6:5d:a9:7d:66:33:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:85:EF:FC:25:95:11:D8:CD:7B:82:C7:24:C0:34:C6:FF:A2:D3
X509v3 Authority Key Identifier:
keyid:17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/eMCF7_wllRHYzXuCxyTANMb_otM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:92:70:ce:e9:be:61:ee:19:54:0b:d6:42:a1:7f:bc:25:56:
bf:c4:0d:31:b0:dc:78:29:da:01:90:7c:b3:a9:92:8a:37:19:
49:da:27:98:8e:60:ab:67:f3:6e:51:c1:61:7c:eb:2b:9a:c7:
78:b3:da:38:d5:b5:cb:e1:b0:21:d0:4a:00:bb:a5:b6:a3:f3:
1a:46:9f:b9:eb:6b:a4:49:72:fb:7e:4c:a1:e5:19:77:a0:c3:
3a:6d:0b:55:7c:f2:be:42:83:df:fb:4c:3e:21:99:12:02:e1:
44:21:ee:b1:fd:8e:f3:b4:25:7f:9d:9b:1c:83:fb:b5:e8:35:
0e:f4:11:5e:26:9a:9f:16:f8:52:29:f6:12:97:72:09:4b:2f:
9c:b8:2d:23:14:1d:5e:cd:bd:9b:36:0f:75:01:3e:98:29:43:
97:75:74:3d:73:fe:00:ed:1b:00:e1:e5:39:ce:54:fa:df:2f:
94:91:02:71:c2:78:b1:52:32:f0:84:62:9d:87:6b:f0:a5:c3:
90:6b:e7:77:ce:df:ae:ed:a7:79:f3:f5:26:b8:5c:e8:39:4e:
3d:0f:fa:a5:c2:1b:8b:14:15:c0:96:28:37:01:d5:91:bf:e6:
ee:84:1c:5f:7d:4e:e3:fe:5e:c6:8c:86:f5:84:2e:92:81:50:
a5:eb:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 17:58:49 2023 by rpki-client on console-ams.rpki-client.org