Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/q2tTXvsq3uSORy-cYFzh4O4PgxU.roa
File: q2tTXvsq3uSORy-cYFzh4O4PgxU.roa (raw, json)
Hash identifier: xYg7eTkBGTeZpWVgldgcarnTVe6+4xRqKPN8mxhUY1Q=
Subject key identifier: AB:6B:53:5E:FB:2A:DE:E4:8E:47:2F:9C:60:5C:E1:E0:EE:0F:83:15
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 018632873844146C85F6532CD93D5A75A607
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/q2tTXvsq3uSORy-cYFzh4O4PgxU.roa
Signing time: Wed 08 Feb 2023 19:36:07 +0000
ROA not before: Wed 08 Feb 2023 19:36:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208905
IP address blocks: 176.106.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:87:38:44:14:6c:85:f6:53:2c:d9:3d:5a:75:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Feb 8 19:36:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab6b535efb2adee48e472f9c605ce1e0ee0f8315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:1f:e8:43:37:c2:7f:7f:e8:ab:a4:ff:d0:
22:b0:64:4d:7b:68:19:31:fa:6e:ed:dd:46:d0:85:
b4:aa:81:24:b5:ac:55:8c:f1:10:23:ae:0c:6e:4b:
08:e5:d2:6c:cc:0c:f5:45:bf:ab:77:4d:74:41:57:
9c:12:27:01:af:28:b7:d1:9a:09:3d:30:ab:cf:73:
96:e0:30:90:10:65:49:46:45:6b:0c:43:e8:b4:03:
af:16:78:e2:9f:4d:c4:55:71:c2:a5:a7:ef:89:64:
6b:67:85:55:c1:0c:3c:2b:41:05:6f:4d:50:01:a9:
1b:12:c7:e1:8e:38:64:5b:d3:90:aa:8d:2c:13:1a:
a3:f5:af:ae:cb:ab:36:9c:e1:83:04:11:6f:93:1f:
c2:b9:0e:4a:11:fc:01:8f:5b:d6:4d:1e:b6:47:e5:
c3:8d:f9:4c:62:c4:8b:94:2d:76:ff:02:f1:98:34:
ac:ac:14:31:ec:87:6d:57:e6:49:0c:04:16:9e:34:
05:f1:f6:b1:06:44:7e:9b:06:d4:20:12:46:3f:96:
08:a4:ec:3b:d1:01:1b:32:dc:29:58:e9:07:93:4c:
ed:bb:4d:dd:39:71:78:e5:18:66:98:84:8d:53:2c:
d3:42:81:48:9d:a1:d9:61:af:55:4f:18:e7:b6:fd:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6B:53:5E:FB:2A:DE:E4:8E:47:2F:9C:60:5C:E1:E0:EE:0F:83:15
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/q2tTXvsq3uSORy-cYFzh4O4PgxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f3:8a:63:01:8e:bf:91:57:50:79:e5:58:28:f0:0c:12:c8:
2d:9f:e2:f8:f8:4f:9c:58:fc:08:a9:70:76:52:2b:80:ab:74:
7a:ae:36:c4:e6:37:b2:dd:ed:7a:c5:49:52:6c:f3:9c:86:b4:
30:71:db:1d:1f:29:b6:58:e1:93:25:de:d2:bf:d3:ab:25:02:
47:0e:50:23:bb:f0:63:62:c6:2b:0b:30:29:7f:d5:53:84:29:
9d:c4:21:ec:53:c6:5d:36:52:a8:55:98:15:44:dd:86:40:c1:
8e:7d:84:90:83:99:02:7d:99:07:ba:46:10:83:69:15:e7:92:
87:d7:8a:ce:5b:a5:cf:29:88:8b:da:2b:c4:bd:c4:a7:d3:76:
fe:f0:5e:7b:7b:e5:26:0f:15:62:e4:4b:31:5b:be:10:68:6a:
da:f1:fc:00:23:df:91:88:01:23:30:fe:d5:38:7f:73:5f:23:
ed:3b:e3:e7:a7:aa:a4:e5:ce:63:10:15:6c:c8:52:f9:40:8f:
b5:ff:18:31:7a:80:0b:5f:48:28:4a:12:70:78:06:ce:71:2a:
a6:c7:61:53:9d:c5:d2:f2:ac:21:9d:84:55:31:aa:ee:24:a7:
42:02:f0:ed:d1:d5:8a:e1:d9:c2:27:0e:04:db:2e:56:cb:01:
3b:28:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:21 2024 by rpki-client on console-ams.rpki-client.org