Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/o_6FFwFoCN3c6qQT0uzYh2dsNaM.roa
File: o_6FFwFoCN3c6qQT0uzYh2dsNaM.roa (raw, json)
Hash identifier: OKMcRm4TzCSeRR6q/P3meGTtpXFwuZoxEehinKPUsHk=
Subject key identifier: A3:FE:85:17:01:68:08:DD:DC:EA:A4:13:D2:EC:D8:87:67:6C:35:A3
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018627B5CB4EC3736C6C3AB69D37888AA7C7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/o_6FFwFoCN3c6qQT0uzYh2dsNaM.roa
Signing time: Mon 06 Feb 2023 17:11:10 +0000
ROA not before: Mon 06 Feb 2023 17:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.186.194.0/23 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 May 2023 18:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:b5:cb:4e:c3:73:6c:6c:3a:b6:9d:37:88:8a:a7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 6 17:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3fe8517016808dddceaa413d2ecd887676c35a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:53:76:3a:cd:fd:fc:7e:e1:ae:4f:5e:a4:
fb:26:38:8c:aa:cf:51:f5:8e:ce:3b:99:7a:a8:1b:
d9:4f:7e:ee:4d:ca:50:1f:da:e7:be:0e:34:fe:a9:
7a:a3:71:0d:de:3b:50:39:f7:59:d2:62:ff:7f:65:
ec:e8:4e:33:7b:55:95:02:ca:f9:34:1c:db:cf:be:
6d:c8:0b:ee:76:1d:42:2b:bd:3b:94:5d:c7:bc:65:
cb:bf:78:b7:b6:85:de:37:08:44:db:d5:af:5f:4d:
9f:69:7c:88:a3:8a:e0:db:c6:b5:a2:74:1c:59:29:
d7:f2:25:95:dd:35:15:2e:48:80:42:e0:e5:bf:e7:
47:72:43:db:15:44:7b:85:c2:3c:5b:81:c1:10:13:
52:f8:4d:d9:2e:4f:21:38:1e:15:9e:cb:42:6c:95:
7d:9f:4f:a2:68:04:38:6c:1f:49:93:a6:95:ee:95:
95:07:56:8d:38:68:47:59:b3:9a:51:aa:6e:8e:cc:
87:ff:34:2f:f4:84:10:1a:6c:33:b6:26:c4:86:ef:
6f:ff:fb:f1:bb:b0:1a:1d:e0:10:4d:66:85:18:de:
50:3c:56:72:e7:d4:ac:75:1c:46:82:62:03:65:b2:
65:bb:4d:36:54:25:76:a1:f5:e6:b7:f8:73:2f:7c:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:85:17:01:68:08:DD:DC:EA:A4:13:D2:EC:D8:87:67:6C:35:A3
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/o_6FFwFoCN3c6qQT0uzYh2dsNaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
178.253.22.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6c:99:64:6f:ea:0a:e6:6d:dd:6a:b5:df:0b:4f:d8:fa:ba:
fa:4a:1d:1f:75:df:0a:40:ce:7a:18:5e:f8:24:b7:0e:f9:cf:
89:ee:57:9a:7c:21:0b:fd:3d:df:5e:7e:11:6e:a7:19:ea:c9:
cb:b3:7e:fa:9f:a5:36:cb:cf:6f:8a:3f:e4:38:e6:2f:84:52:
85:95:74:25:97:ad:eb:2e:fd:7b:0b:ca:27:f6:bc:6e:e1:58:
3c:c6:a0:25:da:b8:87:8a:43:21:0e:68:6e:4a:a7:37:a3:a4:
95:a6:db:95:98:1a:4e:d4:00:96:db:49:62:a9:12:84:0f:3d:
ea:7f:b3:52:53:8d:69:6f:21:e6:3c:d0:3f:10:f3:41:9d:f2:
76:8b:6f:e9:48:46:c2:47:fb:4d:08:34:54:10:1e:3b:80:41:
d8:81:54:a6:19:d3:e5:45:d7:ca:7b:90:66:4f:6b:a9:35:74:
c0:8b:39:36:37:4f:d0:67:77:35:86:8a:e0:f7:8d:f6:45:cd:
23:4a:cc:e7:69:63:a3:c8:eb:0a:8e:82:85:fb:b3:9b:ec:e9:
97:a3:ea:46:42:fc:f5:3c:10:0d:65:ad:65:4b:a3:92:70:65:
b6:ec:0d:b2:52:fc:ca:d1:d3:2d:fc:da:87:c7:11:ea:95:05:
83:91:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org