Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T4M7xLt_EJf9g87B4Al4Tq2eLoA.roa
File: T4M7xLt_EJf9g87B4Al4Tq2eLoA.roa (raw, json)
Hash identifier: qH7VqqfUeX8zQhzTCtROWvWEuvpO7cyHSKzZvaZcX3w=
Subject key identifier: 4F:83:3B:C4:BB:7F:10:97:FD:83:CE:C1:E0:09:78:4E:AD:9E:2E:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01870853D4AD9174E23919186660AA6B7A7C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T4M7xLt_EJf9g87B4Al4Tq2eLoA.roa
Signing time: Wed 22 Mar 2023 07:58:44 +0000
ROA not before: Wed 22 Mar 2023 07:58:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18097
IP address blocks: 176.125.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:53:d4:ad:91:74:e2:39:19:18:66:60:aa:6b:7a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 07:58:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f833bc4bb7f1097fd83cec1e009784ead9e2e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:e4:93:4c:98:e7:f7:18:f1:af:2e:f7:c7:
81:12:f1:6a:85:65:a3:66:87:6c:0e:44:d1:39:6d:
17:1f:9a:97:6c:cd:be:db:1e:d6:0d:a6:dc:3b:84:
a3:ca:09:43:f9:a6:1f:8a:39:d1:18:d6:6b:72:96:
1c:e0:1e:03:cd:4c:4e:de:1d:97:9a:f1:1a:e9:f4:
83:cd:26:5f:9b:f6:69:cb:1c:19:d3:53:5d:46:48:
67:bd:9d:e5:fe:95:ef:3e:9c:3f:45:db:f6:08:9b:
80:8c:ac:10:df:3c:72:f7:c0:6c:95:6f:62:e1:25:
14:16:d4:1f:69:ae:9e:90:7e:02:d1:8e:92:5c:08:
f2:ab:80:f4:3d:2b:e8:fc:d0:ee:95:e8:a7:28:45:
ff:94:33:cc:2a:a8:9d:c2:03:5d:2d:9e:df:6b:22:
ea:28:18:e9:79:42:37:7b:02:12:21:6c:be:0b:c3:
cf:b1:ba:c9:58:f8:62:ea:65:f7:9b:07:ea:a8:e1:
7b:4d:07:1a:89:bd:52:e3:a8:3b:97:f9:4b:45:7c:
2a:63:9b:b1:4f:5c:90:f4:59:56:53:e3:42:2e:d6:
8b:66:d3:17:39:dd:a7:7f:2c:ca:84:df:3a:bb:b9:
ca:bb:a6:3f:d5:72:14:06:7a:6d:ba:e4:7c:3e:06:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:83:3B:C4:BB:7F:10:97:FD:83:CE:C1:E0:09:78:4E:AD:9E:2E:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T4M7xLt_EJf9g87B4Al4Tq2eLoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:85:62:45:3d:4a:bb:55:f0:82:62:d1:08:71:83:ea:dd:ae:
4d:a6:42:60:0c:25:7d:1e:71:cc:3c:6b:52:88:80:85:57:7e:
28:0c:fa:72:ea:72:50:71:cd:1a:6c:ac:8e:b2:1e:70:8f:ec:
78:d9:7b:1a:86:32:98:1a:ff:79:6d:14:69:02:97:f5:b3:92:
f2:d8:ca:48:a9:4b:80:18:91:bd:06:af:94:5f:2a:c1:63:cc:
20:17:d7:38:0a:5b:d8:d5:ad:0f:0c:07:2f:23:ef:ff:46:2b:
8f:08:30:0c:b0:45:0c:ed:0d:96:27:69:2a:96:ea:a1:63:1b:
eb:b9:0a:7e:d4:fb:b3:9d:0d:fd:d4:13:b0:23:14:ca:b1:2c:
8c:95:40:65:b5:2a:ec:05:9f:0d:98:eb:13:b2:8f:77:70:d8:
4e:11:0e:a6:ba:7d:20:e1:14:e8:86:f7:2d:80:65:61:f7:e6:
30:81:f2:b7:b4:37:6a:a7:5f:f7:02:79:5f:18:7e:d2:06:1a:
64:b2:16:97:e8:5b:5a:dc:3a:28:d9:dc:5e:78:8a:4d:2e:f8:
95:cf:ff:cd:9b:c4:42:3e:65:1a:c4:c9:32:e5:73:9a:16:20:
5d:98:5e:eb:19:f3:4c:00:e7:63:6f:b8:a8:75:c6:66:2e:b0:
4a:81:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org