Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/OigKj7zNH0Mx68Y1ZTH1sMX2zvw.roa
File: OigKj7zNH0Mx68Y1ZTH1sMX2zvw.roa (raw, json)
Hash identifier: FwzJcjGUMfj5wXQ2tFdYwLT4EN5oGNOr6yONOIsHvfI=
Subject key identifier: 3A:28:0A:8F:BC:CD:1F:43:31:EB:C6:35:65:31:F5:B0:C5:F6:CE:FC
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 01856BB804D5FFC83A1BFE325122F5929203
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/OigKj7zNH0Mx68Y1ZTH1sMX2zvw.roa
Signing time: Sun 01 Jan 2023 05:05:00 +0000
ROA not before: Sun 01 Jan 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201299
IP address blocks: 176.52.182.0/24 maxlen: 24
176.52.183.0/24 maxlen: 24
176.52.180.0/22 maxlen: 22
176.52.181.0/24 maxlen: 24
2a07:cbc0::/29 maxlen: 42
2a07:cbc0:140::/42 maxlen: 42
2a07:cbc0:1c0::/42 maxlen: 42
2a07:cbc0:200::/42 maxlen: 42
2a07:cbc0:180::/42 maxlen: 42
2a07:cbc0:100::/42 maxlen: 42
2a07:cbc0:300::/42 maxlen: 42
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b8:04:d5:ff:c8:3a:1b:fe:32:51:22:f5:92:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Jan 1 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a280a8fbccd1f4331ebc6356531f5b0c5f6cefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:3c:48:9f:d7:19:30:ea:e9:74:9f:7e:67:
d8:b8:5c:e0:95:11:90:11:8c:e5:0b:97:d3:a2:ce:
b3:18:41:18:d2:43:ff:54:54:36:0a:7d:6e:60:5b:
bc:e0:43:f5:24:c6:00:18:79:5a:46:42:33:4a:e2:
61:dd:9b:57:82:06:bc:54:09:ee:7c:72:0e:81:4f:
cb:13:fe:b3:fa:d1:5e:8d:57:46:06:f1:00:2b:29:
3f:a0:ab:81:1c:b7:31:4a:6c:12:99:2f:a6:52:ac:
67:70:91:11:49:8c:73:e9:25:de:cf:ad:dc:9a:1d:
7a:60:b1:04:69:8a:dd:83:3c:d1:50:eb:58:92:c0:
96:67:17:23:74:34:00:df:c6:19:7b:fa:80:6e:3d:
23:42:f3:ce:99:d1:85:eb:9b:8f:3f:f8:93:3d:3c:
ce:96:3a:af:70:53:de:30:47:1c:8a:46:89:bf:c6:
e1:c4:c9:e5:38:5e:30:1d:96:a6:07:49:00:91:59:
83:89:19:4a:95:49:67:a7:e4:32:1d:56:ad:96:97:
9c:bd:4b:17:9f:6a:8f:c1:fc:cb:12:a7:9b:44:06:
d3:2c:cf:ef:3c:99:c1:96:35:ff:d8:b7:fd:46:00:
32:75:48:42:42:6f:fd:44:82:34:16:fa:32:89:ab:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:0A:8F:BC:CD:1F:43:31:EB:C6:35:65:31:F5:B0:C5:F6:CE:FC
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/OigKj7zNH0Mx68Y1ZTH1sMX2zvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.180.0/22
IPv6:
2a07:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:32:f3:b2:b4:57:cf:07:e1:61:0c:21:46:ad:a9:de:a1:7f:
94:67:10:c4:4d:d4:da:21:40:1f:a7:8b:9f:40:e5:1f:b4:37:
dd:a8:a6:3f:4c:81:48:85:f4:7e:b8:9f:82:fc:26:a2:a6:65:
7f:71:73:a6:66:bd:a5:a5:63:be:7e:fb:9c:15:07:8b:bc:f7:
02:e7:c7:b4:0e:db:ae:1d:fb:6c:e4:16:83:d2:4e:f3:63:d8:
82:45:9d:d3:10:9d:c7:b5:80:37:31:e0:01:9c:bf:84:fd:b3:
fe:ef:21:8f:f2:21:d2:af:93:86:fb:72:4f:47:28:53:a8:fd:
30:4f:9c:e1:3b:08:34:75:ef:65:04:36:f0:24:e7:51:a3:b4:
99:9c:48:79:87:94:e3:80:ef:7d:97:9c:31:37:8a:d1:57:89:
4c:47:9b:fe:81:e1:0d:39:01:c7:48:9d:0b:8b:af:25:23:11:
d8:da:9b:58:fb:25:74:5f:a7:ac:d4:1e:63:81:35:6e:44:2e:
a3:eb:0f:2c:53:23:f3:50:d0:7c:62:36:8f:be:92:1c:05:97:
d2:10:0c:ea:98:ab:62:35:4d:44:38:1b:f3:8b:eb:2d:a5:d0:
33:46:b7:cf:a2:78:77:f8:ed:49:9c:1b:74:24:6d:e4:dd:23:
7b:ff:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org