Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/xGgUFVCeUWouzqdfkCTM3vRhz1s.roa
File: xGgUFVCeUWouzqdfkCTM3vRhz1s.roa (raw, json)
Hash identifier: CdMFvWGCz9aPXk8YmyC/9oEF+B/V/0PPtQ4lBNzA3QY=
Subject key identifier: C4:68:14:15:50:9E:51:6A:2E:CE:A7:5F:90:24:CC:DE:F4:61:CF:5B
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0185CB822B3814E67F25AD250E3DA30BDFA3
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/xGgUFVCeUWouzqdfkCTM3vRhz1s.roa
Signing time: Thu 19 Jan 2023 19:29:43 +0000
ROA not before: Thu 19 Jan 2023 19:29:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50643
IP address blocks: 176.117.80.0/20 maxlen: 20
176.117.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 08 Apr 2023 12:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:82:2b:38:14:e6:7f:25:ad:25:0e:3d:a3:0b:df:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Jan 19 19:29:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4681415509e516a2ecea75f9024ccdef461cf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:f2:86:36:59:93:d0:8f:ba:9c:64:10:bd:
58:1b:0c:58:8c:63:62:81:4c:59:d5:85:7e:30:2e:
e5:f0:b5:1a:b9:15:81:1c:42:b7:7d:f2:1b:48:44:
17:15:c9:18:d2:69:30:02:49:8b:1e:bf:e1:9e:ae:
1f:e3:fb:ef:30:ce:46:30:a3:6c:07:5d:4c:47:33:
6e:21:8e:8c:3d:92:f0:69:80:cd:c6:10:db:09:d0:
92:a8:c0:9f:94:8e:72:9e:72:bd:03:1c:39:ad:03:
5a:1e:47:7a:33:8d:9c:b0:ed:86:40:0a:2e:03:b6:
ab:3f:b6:3e:76:07:99:b5:60:d7:3e:73:22:de:e9:
93:5d:24:79:35:0c:19:c8:ff:61:0f:20:86:a4:1a:
8f:c4:7b:53:42:10:4a:51:61:d0:5b:7d:ec:75:12:
9e:44:a1:48:46:3f:ae:07:5a:f3:28:09:02:0f:7d:
e6:8c:e9:0f:33:79:f3:08:dc:f5:dd:b6:c1:81:08:
fb:80:10:71:0b:f3:be:41:53:88:fd:01:fe:c9:f4:
c5:6f:a0:49:d9:69:7c:eb:7b:27:b4:d7:6f:67:18:
ca:59:ac:49:09:20:12:e4:ce:64:fd:2e:75:87:14:
85:81:5d:38:a2:70:a5:74:c8:be:e6:16:c0:1c:bc:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:14:15:50:9E:51:6A:2E:CE:A7:5F:90:24:CC:DE:F4:61:CF:5B
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/xGgUFVCeUWouzqdfkCTM3vRhz1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.64.0/22
176.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:99:a7:b9:2a:d6:3f:a0:de:07:de:fe:fa:24:f8:58:70:b0:
5b:4e:6f:b1:b2:08:b0:89:19:77:61:33:26:52:d7:cf:55:44:
b5:57:53:25:c7:b7:8c:25:b7:5b:a9:85:3d:c8:d7:0d:cd:52:
67:51:c6:f3:c0:5d:73:e5:a0:c2:a5:e0:67:c4:65:07:62:e5:
4e:7c:24:bc:66:c7:fa:4f:71:e2:60:22:54:a4:78:52:52:dd:
bf:d3:02:a0:8d:8d:89:32:90:32:01:a1:9f:45:e4:44:8c:5d:
f5:d2:02:3f:89:10:9f:50:ae:fd:86:f4:ac:93:ad:48:e7:96:
7d:60:7a:bf:a8:e7:1c:63:73:f2:da:db:14:fa:3b:de:04:e8:
27:31:d1:51:d0:35:e5:d3:c0:b4:35:de:2f:37:85:53:51:5a:
69:1f:f8:0d:20:0c:84:62:ee:23:fe:c6:48:61:08:f8:51:45:
47:4d:f6:bf:47:64:36:e1:62:cb:50:00:f4:c0:5a:d7:c4:79:
ab:f2:6a:0b:38:1a:20:72:a5:7d:74:e0:45:45:7a:62:99:bc:
fa:c4:ed:7e:30:1f:a2:f4:d3:34:a3:f5:5a:60:00:f9:9d:15:
96:74:15:52:7d:ef:a5:4c:1e:99:27:3e:56:68:8d:65:76:9a:
a4:6b:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:06 2024 by rpki-client on console-fra.rpki-client.org