Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Ec5HGXOW-nXvPArtY9tuwl7vCiM.roa
File: Ec5HGXOW-nXvPArtY9tuwl7vCiM.roa (raw, json)
Hash identifier: 8G9QJrA7VUy93ArXXzXDg+Pf9exI/2me9s2XAcNV8BE=
Subject key identifier: 11:CE:47:19:73:96:FA:75:EF:3C:0A:ED:63:DB:6E:C2:5E:EF:0A:23
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 018570E756788E0B78B38BE6F2A4A206FF9D
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Ec5HGXOW-nXvPArtY9tuwl7vCiM.roa
Signing time: Mon 02 Jan 2023 05:14:47 +0000
ROA not before: Mon 02 Jan 2023 05:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:56:78:8e:0b:78:b3:8b:e6:f2:a4:a2:06:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jan 2 05:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ce47197396fa75ef3c0aed63db6ec25eef0a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:73:59:e5:0a:ee:fb:f5:17:d5:33:71:e9:
09:c6:ec:2b:2e:1c:43:5d:c4:fd:25:69:fe:08:34:
c9:22:53:90:cf:d5:66:d3:c4:e2:18:32:ba:de:93:
ad:4b:2c:ea:61:05:09:c5:49:f0:3e:0e:6b:03:cc:
25:42:6e:e8:44:de:6f:ab:78:c1:52:17:a6:08:87:
4d:d6:29:88:2f:7c:61:2b:e2:44:06:de:ca:0a:38:
c7:3f:92:81:01:2e:fc:31:ae:29:7e:b7:92:fd:4b:
d2:d5:18:d0:46:39:fd:3b:4c:e8:a2:d6:ea:1b:9e:
d0:cd:2d:56:9a:bf:dd:30:ad:07:b9:c1:0d:29:7a:
88:92:88:35:72:36:da:9b:a7:96:6a:24:3f:3f:75:
fc:e6:67:87:4d:06:e4:a1:02:ab:43:8f:e7:0d:08:
a8:2f:cb:27:6b:7f:9b:e3:29:ca:a1:e1:18:38:07:
84:fa:75:8d:55:6b:64:83:04:78:51:ca:d5:c9:c4:
17:1f:4e:62:53:31:13:c9:58:75:d8:ec:c4:73:79:
6f:70:d2:28:4b:9a:40:20:39:a0:61:a6:8d:db:a3:
47:14:88:1a:f3:9c:b7:d9:d1:98:38:11:17:3a:2b:
cd:38:a0:4d:b8:7c:fd:1d:b5:30:a8:52:a6:35:15:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:47:19:73:96:FA:75:EF:3C:0A:ED:63:DB:6E:C2:5E:EF:0A:23
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Ec5HGXOW-nXvPArtY9tuwl7vCiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8f:a4:c3:e7:01:b4:e2:53:04:4a:dc:8c:03:6a:1f:db:47:
bf:bd:ad:72:98:0a:ac:68:84:51:12:27:ed:80:b7:59:e0:40:
43:38:1e:41:da:f8:5f:f8:c3:72:f5:3a:8c:39:58:8d:8d:55:
6a:89:3f:55:bd:6c:27:b9:67:78:4c:fb:0f:7a:4e:a1:d2:b6:
3a:03:f1:5c:8b:3e:71:33:88:99:db:a0:fa:cd:49:78:6c:e0:
23:18:99:90:bf:ba:32:a3:a6:1a:fa:9c:76:6a:ca:9f:96:7a:
e1:81:29:63:ee:69:a0:9f:97:7a:1d:ae:57:22:5c:7c:c9:32:
d8:51:1b:f3:9b:eb:5b:9e:5c:02:f1:a0:f7:45:80:d2:ea:b2:
4b:13:5a:b0:03:c4:7f:57:90:79:90:34:27:cc:70:c1:de:1a:
c1:00:d6:2e:48:58:88:0b:5f:0e:bc:43:47:81:cf:c9:55:4a:
cc:a7:af:1d:a0:83:48:af:6f:1e:2e:a1:6e:b3:f2:06:cb:b0:
af:5b:06:7b:fb:e9:41:97:79:d8:d2:11:fe:e0:7a:02:71:b0:
59:fa:82:a3:04:e6:cf:94:a4:e2:5d:3e:66:e9:d4:fd:95:91:
41:51:38:53:4c:bc:7d:1f:3d:c1:a9:41:da:27:11:cb:86:ff:
ea:f4:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-ams.rpki-client.org