Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/sDr1-NNvRCurJRrrwMAv2-AcDP4.roa
File: sDr1-NNvRCurJRrrwMAv2-AcDP4.roa (raw, json)
Hash identifier: skiulaHAd2mO2jPgl3D65WrXrY+ooSYIptPqpevJQoM=
Subject key identifier: B0:3A:F5:F8:D3:6F:44:2B:AB:25:1A:EB:C0:C0:2F:DB:E0:1C:0C:FE
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 018975EA74763FE391825A76BF75C3EC5995
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/sDr1-NNvRCurJRrrwMAv2-AcDP4.roa
Signing time: Fri 21 Jul 2023 00:47:26 +0000
ROA not before: Fri 21 Jul 2023 00:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24837
IP address blocks: 176.108.178.0/23 maxlen: 24
176.108.176.0/23 maxlen: 24
176.108.182.0/23 maxlen: 24
176.108.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:ea:74:76:3f:e3:91:82:5a:76:bf:75:c3:ec:59:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Jul 21 00:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b03af5f8d36f442bab251aebc0c02fdbe01c0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:cb:2b:35:b7:a5:95:c7:5c:4e:8d:83:48:
e2:0c:64:74:6b:98:63:9b:5d:5c:d3:f9:9b:b7:10:
94:c4:c4:19:f9:20:12:10:d4:c3:a7:1e:45:be:71:
a5:43:ee:fd:0f:d2:5e:9d:90:9c:0e:76:44:56:4b:
b9:e3:5c:63:08:46:f9:4c:c0:6d:5b:85:59:73:e5:
54:cd:51:b9:9b:ff:a9:1b:93:56:6e:c5:84:24:f5:
d5:65:59:7d:d7:e3:0c:e7:3c:21:c5:f8:72:f1:b8:
42:ac:a5:ad:5f:13:9b:60:03:32:e7:48:c5:c9:a4:
11:b9:56:ff:d2:be:60:d8:25:9a:51:87:2d:69:38:
47:c9:4b:6b:51:83:ab:e9:de:68:15:20:8d:33:60:
12:af:55:09:36:8f:d0:ad:44:02:c7:e5:c8:7d:b3:
66:b6:56:47:4c:50:e2:3d:08:88:67:c6:5e:22:47:
20:28:b3:60:2c:2c:24:d3:b3:bd:77:8f:ab:e8:01:
4f:61:9f:c1:49:0d:b8:80:a5:27:5c:09:b3:c8:25:
c5:4e:f8:d9:99:17:57:ed:56:6a:00:c5:4a:0c:50:
90:fa:93:c2:6b:2d:af:0b:82:47:94:3a:3b:f0:85:
64:6a:e0:b4:0b:2a:89:d0:13:a9:a7:e9:6f:7e:45:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:F5:F8:D3:6F:44:2B:AB:25:1A:EB:C0:C0:2F:DB:E0:1C:0C:FE
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/sDr1-NNvRCurJRrrwMAv2-AcDP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0/21
Signature Algorithm: sha256WithRSAEncryption
50:91:31:04:46:4b:79:e9:25:1e:09:2c:ea:f5:89:58:5a:b1:
cb:af:c2:e7:a0:e1:c1:68:c3:a7:1d:80:54:17:7e:7e:bf:ed:
35:16:7f:35:23:b1:bf:0c:d6:e9:0c:ee:ad:e3:a6:0d:f0:18:
2e:2c:de:a4:a9:6c:cc:9f:45:10:72:94:8d:df:4b:81:ed:83:
96:1c:e3:0c:8f:9a:4c:a4:4e:fb:dc:30:4c:76:84:27:44:6a:
56:1f:75:e3:30:00:71:13:78:06:c7:e0:b6:42:8e:eb:b9:9e:
b2:1f:6d:02:fc:2d:12:73:1f:be:72:89:b1:d6:09:9d:a1:ab:
7d:cf:bc:65:ca:40:e4:fc:14:01:27:17:ec:15:de:a7:e3:5a:
f6:ea:e1:8c:0b:81:fb:9d:fe:18:0d:47:0b:79:e0:55:1a:bb:
dc:c0:df:1b:2a:43:60:da:21:00:c3:29:a3:b8:51:e1:a1:f2:
e5:21:a5:57:70:2e:7f:7b:8c:43:70:36:40:37:e2:58:12:89:
13:b7:e5:2d:6e:f5:66:c5:b8:ae:ff:5d:fe:7a:a3:f6:fe:4b:
e4:99:d0:80:d2:c3:d6:5d:63:3c:38:74:db:7e:22:0a:b1:87:
e2:32:b1:7d:9f:ee:46:15:d1:a6:24:18:b2:95:b0:1a:7d:25:
78:62:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org