Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/0C6Zh5ujYEpSwQrsQk_V-gKZB2U.roa
File: 0C6Zh5ujYEpSwQrsQk_V-gKZB2U.roa (raw, json)
Hash identifier: fhzqS0JoVWIply/vi0QSSSymuQaHMz9809P+bazJTCo=
Subject key identifier: D0:2E:99:87:9B:A3:60:4A:52:C1:0A:EC:42:4F:D5:FA:02:99:07:65
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018697498DC2DE2049C6CB36D612440870A2
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/0C6Zh5ujYEpSwQrsQk_V-gKZB2U.roa
Signing time: Tue 28 Feb 2023 09:10:25 +0000
ROA not before: Tue 28 Feb 2023 09:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34535
IP address blocks: 193.0.227.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
178.250.184.0/23 maxlen: 23
2a0f:cdc0::/32 maxlen: 32
2a0f:cdc1::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:49:8d:c2:de:20:49:c6:cb:36:d6:12:44:08:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 28 09:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d02e99879ba3604a52c10aec424fd5fa02990765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:02:8a:0e:82:c8:89:18:78:e2:94:b3:eb:
b4:c1:d4:f1:cd:d8:91:14:b0:b1:2c:8c:3a:a6:55:
dc:58:6b:9c:32:d9:47:3e:45:e3:e3:da:8e:53:9d:
cf:3b:8f:2f:bf:f2:21:fd:ed:2a:2f:f5:fc:6a:8b:
24:a7:d1:f6:81:51:2e:58:18:7b:8f:61:e4:a9:d5:
4a:36:7e:5e:55:7f:e3:30:c4:40:a3:66:79:10:93:
dd:58:d4:e8:7f:bf:bc:19:69:fa:c1:f7:04:d7:41:
79:7e:b1:67:fa:86:d0:4d:89:e2:6a:c3:b4:37:45:
19:60:e2:f3:ba:be:fc:ee:20:d2:05:56:fe:44:31:
09:30:4c:d4:7d:50:cf:5c:38:d4:39:f4:c3:0b:c9:
8f:70:14:e2:f6:a3:16:de:18:2c:3a:7b:bf:b8:78:
a4:f6:69:3a:ea:c6:60:ac:c6:24:79:c7:a3:9c:b4:
fd:26:08:88:15:26:43:ed:80:ca:ed:42:89:5f:b4:
d6:f2:60:58:62:e6:3a:17:c6:09:eb:5b:b5:24:68:
82:f5:ae:ec:8c:9e:9a:25:29:59:8d:b0:80:8d:16:
94:7b:e2:c2:79:9e:d5:fb:99:e2:be:50:45:9b:67:
82:ec:58:eb:21:f5:d8:80:14:a1:89:c7:51:b8:6e:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:99:87:9B:A3:60:4A:52:C1:0A:EC:42:4F:D5:FA:02:99:07:65
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/0C6Zh5ujYEpSwQrsQk_V-gKZB2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0/23
193.0.227.0/24
193.0.230.0/24
IPv6:
2a0f:cdc0::/31
Signature Algorithm: sha256WithRSAEncryption
27:c2:ff:73:2f:ec:be:84:5d:59:3f:97:ce:c2:1a:3a:de:92:
ca:13:52:69:6f:a5:d4:c8:e6:f8:bb:4c:82:8d:77:26:a0:62:
31:d9:c3:3b:f3:a7:35:dc:2b:e4:9f:6b:03:83:2b:40:69:f7:
40:7f:db:1f:88:45:3b:af:17:6b:39:ae:bc:96:84:9e:f7:c7:
6b:c7:a8:38:64:dc:af:ed:32:83:d3:73:62:36:2a:23:1e:9e:
71:d3:d7:ea:45:b4:8c:38:94:c3:7e:08:fb:c9:02:3f:88:6f:
aa:b3:e8:96:3b:e1:df:f0:38:42:c6:97:6b:f4:8c:c4:45:82:
a7:8e:b6:b0:2c:47:74:67:c9:8c:eb:46:57:0b:3d:a4:2f:95:
b9:6d:a1:01:d9:fa:6c:66:b7:7a:2b:f2:dd:22:e2:61:81:32:
38:05:ed:22:30:c4:b9:b4:86:13:fb:ac:64:9a:64:88:dd:c9:
96:be:03:38:61:4f:76:d0:53:8b:19:1d:7f:23:0d:2f:c5:08:
0e:2a:73:ef:3d:2c:fe:f4:d4:f2:c0:75:92:48:0a:d7:c4:52:
5d:74:e5:6d:97:ca:db:35:32:0a:7e:27:3f:79:f4:2b:46:69:
e8:0b:7c:ff:e2:38:40:5c:1d:50:a2:86:b1:fc:b4:4e:08:da:
c2:75:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:44 2023 by rpki-client on console.sobornost.net