Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/tTxzP_TOd4NumrR4ksB7vsSqxTE.roa
File: tTxzP_TOd4NumrR4ksB7vsSqxTE.roa (raw, json)
Hash identifier: jopGfp4qG1CUpei5M94RScSGrEKCBZ0dJttebvf02n0=
Subject key identifier: B5:3C:73:3F:F4:CE:77:83:6E:9A:B4:78:92:C0:7B:BE:C4:AA:C5:31
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0187129B1CCD9FD00B346788545784EEBB95
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/tTxzP_TOd4NumrR4ksB7vsSqxTE.roa
Signing time: Fri 24 Mar 2023 07:52:47 +0000
ROA not before: Fri 24 Mar 2023 07:52:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7046
IP address blocks: 176.117.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 25 Mar 2023 10:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:9b:1c:cd:9f:d0:0b:34:67:88:54:57:84:ee:bb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Mar 24 07:52:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b53c733ff4ce77836e9ab47892c07bbec4aac531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:6e:64:60:dc:c1:1e:d8:08:8f:63:f8:10:
6e:28:4e:a9:53:50:13:f5:3d:df:59:25:a6:bf:b2:
2b:a5:2b:b7:2c:71:77:a1:33:5e:6f:c3:3d:17:1e:
ce:42:e9:c0:69:da:86:b5:67:53:0d:b7:c8:61:be:
a5:e7:97:f7:bf:47:fa:4d:98:96:9b:4e:eb:7d:d0:
46:97:04:fe:98:ee:73:cf:d7:8f:24:1e:34:d2:04:
03:cd:51:0f:9a:15:14:14:49:41:1c:86:31:d8:87:
8c:1b:c6:7e:d0:cc:82:3b:c1:57:76:d9:27:e8:0f:
c7:9c:1e:eb:78:a2:d3:84:e6:be:d6:26:c0:d7:fe:
65:81:00:31:55:cb:f2:20:04:6a:18:2c:c5:5f:0a:
8e:0e:ed:9f:17:99:6b:9e:9a:fb:6c:41:8f:c4:9d:
f9:59:d9:0f:96:2c:e5:76:1f:a8:c7:95:90:dd:9a:
50:f6:f4:ee:00:98:db:28:2a:a1:f6:eb:07:bc:f0:
aa:b7:c8:46:46:22:c6:76:b5:4b:bc:60:f6:17:7e:
fc:65:1f:de:ce:41:24:99:6c:c1:79:be:cb:d9:9a:
10:05:a8:00:1c:0f:44:15:9f:10:16:52:71:ae:9d:
c6:a9:aa:49:14:dd:13:b6:c5:36:2e:fd:98:ab:c1:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:73:3F:F4:CE:77:83:6E:9A:B4:78:92:C0:7B:BE:C4:AA:C5:31
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/tTxzP_TOd4NumrR4ksB7vsSqxTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
66:70:7a:dd:26:b1:5e:db:5a:ed:3d:70:07:44:d5:1b:1e:24:
6c:b1:5d:f6:12:10:46:1f:0a:eb:62:10:47:85:65:74:93:f7:
48:89:fe:67:bb:f9:f9:cc:e0:32:44:c7:97:28:23:a8:81:8d:
2f:ba:f9:73:94:ba:25:18:ee:ae:f4:5d:39:60:00:c9:2d:c8:
76:d0:b7:cb:7e:70:11:b6:76:d8:59:73:65:ed:c8:91:be:3a:
9c:1d:3c:d3:d2:79:f1:55:b3:7d:c7:6d:bb:39:1f:74:b6:69:
81:59:06:94:eb:9a:ad:6c:0f:c4:d9:23:00:57:51:24:e1:49:
77:79:76:19:82:50:59:72:e7:4d:67:34:dc:cf:0f:7e:15:af:
2d:13:8c:a6:cb:91:3d:fb:99:6c:99:3d:6b:c9:93:e0:be:5d:
e2:93:1d:84:2b:c4:96:1c:63:70:f6:f0:aa:84:d3:f6:f6:fa:
ed:cb:05:14:28:e2:4b:72:13:29:63:54:8c:3e:d1:bb:a0:b3:
e4:15:ed:f7:50:87:f9:2b:23:a0:ac:7b:c2:ab:e0:15:7f:18:
23:80:c9:89:83:89:a6:83:66:4b:17:0b:96:5a:68:0f:a2:89:
37:e8:9b:38:e2:b0:e8:5d:e5:57:30:9f:59:17:12:1b:71:78:
f1:c9:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:06 2024 by rpki-client on console-fra.rpki-client.org