Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/0wgxGZDtoVwoqBx9nuPgLUO3mn0.roa
File: 0wgxGZDtoVwoqBx9nuPgLUO3mn0.roa (raw, json)
Hash identifier: +kKBnSwVMv4fl4e/YOMoCt97CY2pCMa9UJg2X4JC+jE=
Subject key identifier: D3:08:31:19:90:ED:A1:5C:28:A8:1C:7D:9E:E3:E0:2D:43:B7:9A:7D
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 01857169A601D9B9D78FF9DB964D4B46A27C
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/0wgxGZDtoVwoqBx9nuPgLUO3mn0.roa
Signing time: Mon 02 Jan 2023 07:37:07 +0000
ROA not before: Mon 02 Jan 2023 07:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57422
IP address blocks: 176.100.4.0/23 maxlen: 23
176.100.0.0/23 maxlen: 23
176.100.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a6:01:d9:b9:d7:8f:f9:db:96:4d:4b:46:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jan 2 07:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d308311990eda15c28a81c7d9ee3e02d43b79a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:98:3a:2b:3c:c0:72:74:c0:73:dd:51:a0:ab:
21:ab:5e:ed:be:4d:2b:f4:f5:28:c4:3d:4e:9a:38:
aa:a7:f6:a0:2e:3e:56:37:51:b2:b8:5d:6d:8c:5a:
5e:ff:9d:0f:54:a6:b4:91:81:c6:f7:25:2b:31:ea:
5b:93:e5:6d:ad:fb:10:7b:a3:e3:62:de:5e:79:16:
2d:56:17:d3:06:f5:83:f8:e3:20:83:80:41:60:43:
f2:11:93:b2:26:65:e3:41:ed:fb:b2:4b:2c:2b:17:
a2:8d:17:a2:89:9f:d0:fd:4e:2a:2f:e2:2f:e7:d6:
a5:4f:f1:27:7e:36:0f:d1:3e:96:ed:1d:52:5f:7c:
d1:dc:d7:e2:b4:d2:d6:de:1a:3a:34:07:d5:43:83:
38:61:71:40:2a:61:11:8b:95:60:59:ed:fa:8d:eb:
46:ca:19:a3:13:bd:b3:99:19:aa:dd:88:a2:76:44:
f5:db:9e:a7:e0:a7:b3:11:50:a4:95:21:8f:9f:94:
ba:2b:f5:ee:b3:c0:6b:49:b2:3a:eb:78:c4:f2:64:
fa:3d:a5:62:35:b2:2d:93:bd:20:d5:01:ca:0e:89:
4a:e0:59:a4:1f:4e:bb:0c:83:29:05:bf:53:1f:24:
17:58:3a:46:f0:b9:24:4d:10:73:8d:5d:99:bc:1f:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:08:31:19:90:ED:A1:5C:28:A8:1C:7D:9E:E3:E0:2D:43:B7:9A:7D
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/0wgxGZDtoVwoqBx9nuPgLUO3mn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.0.0/23
176.100.4.0/23
176.100.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b6:01:db:28:5e:28:e7:df:78:04:b5:77:74:04:52:ac:20:
07:54:68:7a:b4:75:0b:1a:e3:d5:0c:75:f9:a4:1b:6e:d4:2b:
7a:fd:38:49:95:26:63:19:31:f4:76:5a:f7:80:c9:c0:21:b6:
f2:89:b4:5a:de:4f:dc:af:59:01:e7:f7:99:62:5d:4f:7f:dc:
18:f1:1d:a9:1b:f4:0b:f5:20:9c:d6:4e:ae:7d:8c:e5:5e:79:
8c:bd:e8:50:6e:71:d3:ef:58:22:6f:71:12:9b:32:21:06:2a:
4a:3c:98:71:6d:e5:7b:e7:14:24:d9:b8:fa:58:ad:79:c0:79:
7a:2f:8f:0d:41:44:05:93:35:cb:75:41:10:0e:50:a6:8a:db:
7d:8c:6b:95:4e:4a:da:32:65:3f:01:b7:90:98:b3:3a:24:d9:
ee:a2:c2:31:a5:ee:78:20:bb:4e:6b:2a:9c:31:e3:c2:79:fc:
aa:df:a0:bd:54:bc:16:ee:67:cf:03:09:98:fe:9a:58:cd:9b:
10:0e:bf:97:8e:8c:f1:49:45:86:79:1e:c1:6d:22:cb:6a:a3:
76:1d:18:0b:f4:e9:8a:7a:a5:94:c2:75:2c:bc:1d:53:79:da:
29:5d:64:16:a7:8c:0e:80:c3:c1:a4:0e:ec:ca:6d:80:b1:ba:
a9:09:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:20 2024 by rpki-client on console-fra.rpki-client.org