Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Ef3S-5KEuin1WSFzjQWPxX3oec8.roa
File: Ef3S-5KEuin1WSFzjQWPxX3oec8.roa (raw, json)
Hash identifier: J7szbqADSepgyBGli9GltNMQngsscZ7bzbyGMCcrYOw=
Subject key identifier: 11:FD:D2:FB:92:84:BA:29:F5:59:21:73:8D:05:8F:C5:7D:E8:79:CF
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018570CBEA237737918011BB2B57EE78BC5E
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Ef3S-5KEuin1WSFzjQWPxX3oec8.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198343
IP address blocks: 176.103.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:ea:23:77:37:91:80:11:bb:2b:57:ee:78:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11fdd2fb9284ba29f55921738d058fc57de879cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:97:d9:f2:de:54:76:61:66:ae:59:9b:a9:
d3:82:43:e9:c9:87:9c:76:95:1b:5e:e0:43:0a:05:
81:d7:c4:55:22:15:c7:86:28:c2:72:ac:4f:05:fa:
3c:19:a0:d9:d3:0d:34:7a:d2:86:7d:8f:9b:ee:30:
91:a2:ea:62:91:b4:4f:8b:c4:ac:65:91:14:61:3f:
71:98:b2:10:85:91:42:d2:36:3d:f6:21:d9:c0:d6:
82:64:c3:08:cf:29:46:45:0c:4a:83:b4:c3:a2:37:
80:79:e8:df:51:a0:18:f5:46:95:d8:5f:6e:5e:8c:
35:04:13:11:c1:d2:5c:b2:52:61:a3:40:a9:60:69:
ef:5e:bd:4b:96:4a:e5:99:08:da:b1:22:90:9a:a4:
81:f8:5c:85:51:23:0e:bc:74:b5:e1:5c:ac:17:d4:
b4:c3:1b:ae:8a:79:1a:7f:aa:b6:b6:e4:a3:ff:fe:
c7:2d:e9:72:de:bd:f9:7c:b2:e6:ce:58:29:ca:57:
f8:d8:dc:24:64:49:a4:00:a5:aa:0a:fe:4f:c1:6e:
d5:53:ea:a5:d7:29:57:c8:bd:a3:93:f4:6d:38:46:
b8:ec:33:c0:05:79:ad:44:3f:6b:2c:7e:52:75:98:
83:40:ae:12:2a:ec:1b:8d:b2:8f:29:fe:15:80:b8:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:D2:FB:92:84:BA:29:F5:59:21:73:8D:05:8F:C5:7D:E8:79:CF
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Ef3S-5KEuin1WSFzjQWPxX3oec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.186.0/24
Signature Algorithm: sha256WithRSAEncryption
30:56:8b:43:95:33:ed:11:c6:68:41:3d:7f:a5:5d:23:41:6a:
4b:5a:c5:1a:23:a3:44:ec:93:2f:75:91:a5:3c:4a:c5:eb:a9:
50:2d:4d:11:d8:74:01:51:0c:42:83:12:7c:b6:18:e0:eb:bf:
be:52:66:6d:4d:dd:a7:b8:f1:d7:fa:30:1b:8b:a9:5a:9f:84:
31:f6:20:9e:38:71:a9:86:65:fc:e3:d3:aa:de:38:f3:ba:2b:
a2:b0:6d:4e:bd:e8:77:3c:5a:5a:4e:a6:4d:e1:eb:75:bf:c2:
33:42:e3:ae:72:dc:3d:b9:a7:9b:0a:a0:71:d4:02:4e:99:b8:
60:ea:8e:4a:f2:81:47:ad:d7:22:e5:47:47:1a:44:1f:bc:9a:
10:e1:06:7b:e4:ab:79:40:ff:64:56:a9:76:7a:45:c5:d8:84:
60:d7:84:28:c8:7b:da:2a:9e:cb:f7:91:d7:80:b7:62:2b:ba:
7c:2e:9b:b4:d7:01:5c:ec:d6:a1:1b:0a:dc:c0:87:03:a4:3b:
52:a7:43:88:04:05:4b:6b:a4:40:68:55:31:70:f7:82:50:10:
12:56:1d:d6:cb:65:b6:6c:db:c2:8c:09:0c:43:22:5d:b8:5d:
a8:c4:65:29:2e:f2:ae:70:3f:14:50:22:1e:a7:f9:77:f8:a9:
14:8e:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:06 2024 by rpki-client on console-ams.rpki-client.org