Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/c9IDLqUeFlShjZPZZJDVimJfZG0.roa
File: c9IDLqUeFlShjZPZZJDVimJfZG0.roa (raw, json)
Hash identifier: h5Pm9MaxglDovDAF3TzuSBhp9NCKVJVhnRLJ8F6Al7A=
Subject key identifier: 73:D2:03:2E:A5:1E:16:54:A1:8D:93:D9:64:90:D5:8A:62:5F:64:6D
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA26FDFFBCBB2335B0FB778D73FAC763
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/c9IDLqUeFlShjZPZZJDVimJfZG0.roa
Signing time: Fri 10 Nov 2023 16:53:19 +0000
ROA not before: Fri 10 Nov 2023 16:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 16:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:26:fd:ff:bc:bb:23:35:b0:fb:77:8d:73:fa:c7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d2032ea51e1654a18d93d96490d58a625f646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:47:5e:fe:d1:f8:49:7c:db:c1:4a:08:9b:
ed:30:5f:0b:52:60:15:4a:c2:82:06:da:b9:e4:1e:
ea:1b:19:64:b1:ad:02:61:03:86:61:c2:0c:05:8f:
e9:c4:73:31:61:ff:f3:88:64:7b:8a:8e:9d:15:41:
50:44:78:db:85:35:d8:cb:02:c5:d9:2d:3c:82:b7:
11:3e:7a:91:ad:99:50:ca:a0:ad:b6:7d:c2:9e:34:
48:00:c1:a5:66:02:0d:bb:32:72:06:65:b8:c7:73:
83:f1:78:a2:b0:72:ba:b4:ab:26:3a:ac:66:ab:ee:
bd:99:33:70:fc:34:b6:09:fd:b3:c5:6a:a3:97:e5:
8c:72:2a:cf:68:e8:a9:f9:64:55:cd:a6:5d:96:0c:
c5:44:3e:62:40:64:a2:9d:08:4c:ff:21:cf:17:93:
41:c7:26:f9:14:c0:91:8c:53:6a:cd:9b:b6:28:0b:
bf:a8:e1:28:16:7f:a2:bd:ce:d4:b4:3a:76:05:a6:
b6:d8:49:51:d6:f4:27:39:2b:80:a2:05:2c:9b:e8:
d2:31:df:50:a5:73:90:cb:0e:7c:1b:69:5d:0c:e3:
1b:30:4b:d8:af:8a:18:b5:2f:02:75:9a:23:2b:b8:
27:d7:b6:0a:36:36:6d:f0:77:4d:a4:e6:f9:17:be:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:03:2E:A5:1E:16:54:A1:8D:93:D9:64:90:D5:8A:62:5F:64:6D
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/c9IDLqUeFlShjZPZZJDVimJfZG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ac:ea:45:10:5c:d8:dc:71:83:4c:88:ce:8d:bc:96:05:41:
a1:fa:c1:bc:8c:63:0a:8d:3e:33:06:f1:29:50:73:9a:db:56:
3e:17:51:f6:77:42:52:da:78:0a:a0:da:01:0b:0d:3d:20:ac:
30:11:88:36:e8:56:9d:94:3a:77:64:91:3b:ae:84:c7:aa:2c:
b5:a6:f1:94:0f:4c:15:b0:d6:ba:d6:c1:f7:72:a4:84:38:c9:
14:09:4e:d7:b4:48:11:18:2d:6a:3b:f4:88:8b:28:6e:d1:df:
ac:4a:d4:fa:76:9f:4e:ca:f2:f1:9b:93:01:a8:3a:1a:ae:61:
c3:d3:58:06:d3:69:3a:3c:26:10:43:0a:35:e4:9b:d8:ac:fc:
3d:11:07:3d:32:08:dc:96:db:ad:7c:65:f3:73:e0:b3:1f:30:
96:ae:f8:aa:28:b2:ba:1e:fa:1b:8c:7d:df:f3:da:0c:9a:b8:
5d:c2:05:43:b8:9c:18:4c:a3:de:ee:7e:58:dd:11:c2:b2:cc:
91:8b:a5:80:19:cc:63:9d:d5:70:81:89:0e:18:ef:a3:e0:30:
64:06:e0:a1:c9:1a:3d:2e:8e:fc:d6:c4:b1:a7:44:4f:77:c6:
e5:31:06:bb:fa:59:d1:4f:a3:7b:fc:63:8e:45:c9:c7:63:1e:
a5:06:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org