Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/fpDqmIT1IzBsIsDgDje7pZC4Plo.roa
File: fpDqmIT1IzBsIsDgDje7pZC4Plo.roa (raw, json)
Hash identifier: 2BzE+TxUdU9WScs01FD3ixPBw0pwzQNhT05u2Ip2iCE=
Subject key identifier: 7E:90:EA:98:84:F5:23:30:6C:22:C0:E0:0E:37:BB:A5:90:B8:3E:5A
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018655D1B7722A0EAD7A518BD1A95FA7F3A3
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/fpDqmIT1IzBsIsDgDje7pZC4Plo.roa
Signing time: Wed 15 Feb 2023 16:04:12 +0000
ROA not before: Wed 15 Feb 2023 16:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 178.250.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:d1:b7:72:2a:0e:ad:7a:51:8b:d1:a9:5f:a7:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 15 16:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e90ea9884f523306c22c0e00e37bba590b83e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:5f:1a:6d:db:64:93:3f:14:cb:e8:fe:a6:
55:59:ed:65:a7:41:fb:8a:9a:2e:f3:2d:a9:a4:77:
c6:2a:36:db:95:55:12:5b:1f:29:5d:fd:c8:6d:ae:
79:2c:66:a7:3b:53:4d:9e:59:68:d5:29:14:19:4c:
ad:85:17:64:44:d1:c8:2c:3c:95:16:81:5f:59:76:
c6:ca:44:7e:4e:b2:d6:97:4f:f6:e2:6f:49:1c:e1:
63:2e:85:34:e6:73:33:a3:73:2e:fc:53:bb:cf:3e:
bd:8e:c6:e3:57:b9:9b:97:3f:9d:e5:40:19:b7:49:
8b:0a:42:fb:86:89:a8:05:c6:5a:4b:6d:93:1b:c8:
f6:1a:98:44:63:c2:9e:b9:5e:53:31:08:e2:96:77:
99:77:80:54:d0:aa:e5:d9:35:9b:bf:6b:02:8f:6d:
00:cb:d1:ea:83:bb:30:ef:fd:bb:d9:a9:7c:6f:de:
56:66:3b:9d:26:45:1b:39:c0:c8:73:28:d6:2d:3f:
c6:15:82:0e:67:44:13:8c:dd:8a:34:42:ba:3b:86:
3c:81:37:39:7c:14:e5:6d:a9:44:47:ec:95:7f:2f:
0b:22:63:5e:97:d9:c5:35:9d:b8:d6:1f:c6:f2:17:
a0:08:d8:31:85:54:e0:82:56:81:36:39:87:97:39:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:EA:98:84:F5:23:30:6C:22:C0:E0:0E:37:BB:A5:90:B8:3E:5A
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/fpDqmIT1IzBsIsDgDje7pZC4Plo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.186.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0a:67:8f:90:a7:dd:79:81:7e:e9:d9:a4:c3:62:78:8c:e7:
57:5f:c9:5b:ce:ae:64:b5:d9:c5:cb:61:39:92:c2:b7:0a:55:
56:9f:ff:31:61:07:7c:ce:27:cc:6e:75:62:d9:23:20:87:af:
c9:55:67:0a:f3:fb:26:f5:9f:cc:c3:78:ca:36:69:2b:95:34:
de:7e:b0:78:48:bb:9c:7d:b1:c0:d2:b0:fe:1b:8d:9b:0e:89:
bb:23:30:19:a1:2b:7b:d4:7d:17:72:2b:be:01:a5:50:e0:44:
ac:89:4e:52:e3:96:a2:da:62:b2:04:a2:6a:8b:71:d0:47:9d:
21:67:91:9b:ff:d7:b8:f5:79:74:17:12:35:4e:3a:f0:13:f2:
33:89:21:99:56:eb:ea:32:03:14:c5:27:a0:11:e2:01:98:6d:
fc:08:39:8f:04:f3:d4:8d:10:a9:fb:05:6c:79:19:ba:75:5c:
14:93:51:1b:34:77:c2:b1:d5:91:60:67:fd:e8:d4:36:ed:f0:
52:88:81:2e:7f:c3:b6:45:3a:e8:2d:64:83:10:7c:bd:fb:c0:
2a:95:8a:7e:0a:3f:0f:5c:bb:97:8d:e4:60:cb:47:48:f2:4a:
cf:bc:6e:ed:9b:a9:67:0d:80:19:4f:ec:00:36:e5:17:87:db:
34:b8:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net