Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/Z8Fab52tw6q9zC2dpqeBFjPA1Jk.roa
File: Z8Fab52tw6q9zC2dpqeBFjPA1Jk.roa (raw, json)
Hash identifier: q9nzhfEk84DoPVnxZQGiw4+mWTmgCjBKy/lynivfiNY=
Subject key identifier: 67:C1:5A:6F:9D:AD:C3:AA:BD:CC:2D:9D:A6:A7:81:16:33:C0:D4:99
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 018BDB2D01B72C5D61DF1D33A6B8985D63F8
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/Z8Fab52tw6q9zC2dpqeBFjPA1Jk.roa
Signing time: Fri 17 Nov 2023 02:47:21 +0000
ROA not before: Fri 17 Nov 2023 02:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201179
IP address blocks: 176.110.124.0/24 maxlen: 24
176.110.125.0/24 maxlen: 24
176.110.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:db:2d:01:b7:2c:5d:61:df:1d:33:a6:b8:98:5d:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Nov 17 02:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67c15a6f9dadc3aabdcc2d9da6a7811633c0d499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:5d:08:e0:41:e9:a5:0d:df:a6:70:c6:b9:
4d:ea:64:3f:a4:e8:c1:bf:0f:69:c4:8c:a4:3c:47:
4e:cd:b5:35:e5:9f:c1:c1:6a:6e:71:ed:f4:b1:52:
f0:a9:ad:c5:c4:9a:88:33:5f:42:33:d7:66:53:c0:
11:6c:1e:9a:2e:1e:d4:b3:de:6c:be:3f:ad:f7:63:
b0:b5:85:60:11:d8:6c:46:f4:12:fe:7d:e3:ca:f1:
1d:70:38:30:5f:35:f1:b3:b8:66:72:10:03:43:50:
ad:92:1e:f5:d9:f9:60:46:80:3f:96:ca:28:8a:97:
aa:fe:09:79:9f:53:b5:61:f9:af:b7:4e:f1:c6:1a:
7c:f2:61:37:49:5a:13:86:78:a4:df:0b:cb:8e:88:
4a:80:aa:71:91:e7:e1:a9:ef:a7:76:d0:49:d7:eb:
dd:c4:82:95:1e:30:f8:de:a6:6b:dc:d7:9b:85:f3:
d7:e3:31:91:70:25:1f:5e:0e:0b:c0:ed:23:9f:1e:
b3:53:f8:14:63:21:d0:fc:c4:c7:83:4e:0d:1a:41:
b6:29:9b:8f:c8:99:58:4c:6b:3a:30:11:81:42:84:
f9:d7:c3:d9:ba:f3:dc:ef:96:9a:31:cf:17:1e:e3:
10:86:eb:a7:f8:d8:71:84:33:33:46:44:a8:63:cb:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:5A:6F:9D:AD:C3:AA:BD:CC:2D:9D:A6:A7:81:16:33:C0:D4:99
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/Z8Fab52tw6q9zC2dpqeBFjPA1Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.124.0-176.110.126.255
Signature Algorithm: sha256WithRSAEncryption
4c:7d:d7:74:04:6e:b2:33:3c:20:70:84:c0:46:83:09:cf:4a:
d1:23:ff:be:dc:f8:84:7d:7f:2f:90:b4:83:07:40:ae:e2:19:
94:1a:a4:2a:86:f4:1c:ce:4e:94:77:35:34:11:e4:97:b3:b0:
ed:3a:93:56:cb:bd:26:90:ec:b0:24:be:47:9a:63:aa:ec:85:
86:f6:a0:10:5d:bd:57:59:de:5e:63:d7:8c:30:47:7b:bb:64:
83:d3:39:d5:cb:68:b2:d5:45:3b:d7:cf:4e:08:73:a7:6c:df:
8e:a4:2a:80:17:3f:5f:cf:2c:76:70:7a:0d:c1:55:95:ea:01:
59:1b:c1:03:c3:e0:6b:17:86:1a:12:f3:40:58:ef:00:92:0d:
ad:f6:a8:f7:07:68:3d:17:d7:24:b3:f4:fe:c6:a9:c4:4a:36:
33:51:ea:e9:b9:3f:63:05:7d:ba:ff:2b:d0:37:d5:c1:7a:a1:
e1:7e:81:1c:e0:48:44:16:e4:ab:57:8b:d5:61:ee:55:08:35:
03:33:be:2f:96:e4:e4:f7:2f:24:0a:08:1c:18:e5:df:e2:1e:
c8:df:9f:f9:15:e6:2d:54:44:f2:03:e5:11:fb:2e:fc:ce:3f:
38:29:22:1c:c2:79:e2:f4:33:06:50:9f:3b:f2:1e:af:77:51:
b5:59:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:52 2024 by rpki-client on console-fra.rpki-client.org