Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/CqUxix3PhBzBelTu9XWG-hawSQE.roa
File: CqUxix3PhBzBelTu9XWG-hawSQE.roa (raw, json)
Hash identifier: RjRds1JM8Sro7a4uB0RRfP1AxNNei2QDhcZrOlctsUI=
Subject key identifier: 0A:A5:31:8B:1D:CF:84:1C:C1:7A:54:EE:F5:75:86:FA:16:B0:49:01
Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial: 01856C414CF1CC1AB69D8AFC0F87855C533E
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/CqUxix3PhBzBelTu9XWG-hawSQE.roa
Signing time: Sun 01 Jan 2023 07:34:56 +0000
ROA not before: Sun 01 Jan 2023 07:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59497
IP address blocks: 176.110.103.0/24 maxlen: 24
176.110.102.0/23 maxlen: 23
176.110.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:4c:f1:cc:1a:b6:9d:8a:fc:0f:87:85:5c:53:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Validity
Not Before: Jan 1 07:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa5318b1dcf841cc17a54eef57586fa16b04901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:48:20:a4:f7:db:d7:ee:ce:8c:44:79:3b:
a4:1c:eb:97:ec:31:55:9d:fe:95:e3:c9:91:af:10:
86:a6:4c:65:ef:24:31:9e:70:d2:3e:a3:dc:34:bf:
31:9c:73:df:bc:06:ec:70:1b:db:d0:73:32:60:48:
9a:c2:f4:37:cd:41:b1:45:12:5e:0c:35:96:1e:91:
1f:2f:dd:f5:31:f5:0d:67:a7:62:90:a6:d1:45:7c:
d7:1e:3c:f1:74:2e:ea:e0:7b:07:f1:4f:4a:36:3c:
3a:f9:8b:8f:55:16:d2:17:cb:00:41:a6:c9:0e:4d:
98:c8:1a:2b:dd:33:eb:23:e6:45:a1:4f:5f:72:dc:
fb:d3:96:a1:9b:a0:28:29:d8:c2:fc:22:9b:d9:65:
03:78:03:03:27:3f:b1:ce:d4:87:32:28:e3:d5:5a:
a0:29:bf:09:3d:d9:71:26:c0:df:ca:3b:59:82:45:
03:19:97:2e:15:3c:08:87:f9:0f:f1:ef:58:08:a9:
be:3d:45:64:b5:e8:60:d0:92:b9:a8:e9:a5:17:3a:
a7:ae:23:f5:56:8a:1e:68:39:40:f0:f3:c5:4d:c0:
fe:4a:48:c4:8f:10:4b:97:7c:2f:41:d6:71:46:98:
bd:ce:02:83:01:73:56:45:54:a8:a5:d1:bf:fa:6f:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A5:31:8B:1D:CF:84:1C:C1:7A:54:EE:F5:75:86:FA:16:B0:49:01
X509v3 Authority Key Identifier:
keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/CqUxix3PhBzBelTu9XWG-hawSQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.102.0/23
Signature Algorithm: sha256WithRSAEncryption
78:77:72:e5:07:b1:5f:89:2a:5c:cd:78:f1:f4:45:f4:fe:b4:
dd:2d:03:02:9e:0f:9e:59:96:0d:4a:0a:24:84:15:63:fa:40:
af:7a:9f:54:84:af:08:c8:3a:4a:5f:b9:40:ea:73:21:4e:67:
ad:48:13:5a:2d:cd:44:fb:f0:db:c4:fc:dd:da:13:31:a4:63:
19:a5:2f:07:08:bd:ee:9c:1f:8d:74:62:b6:94:68:0a:8e:f2:
65:5f:ed:54:2e:7c:73:67:ac:e2:20:a0:10:73:e9:f6:5e:62:
50:6e:f3:d9:e9:4c:29:7c:c8:9c:45:85:4f:5d:34:88:12:c3:
74:bd:c7:c4:d9:37:0c:e2:16:43:65:6d:e7:de:e8:94:e6:01:
37:aa:28:2e:d6:9e:3f:16:9a:ef:ea:45:4c:c0:e0:3d:05:b0:
bd:b2:0e:52:45:68:b2:19:71:df:11:42:f6:55:42:99:18:d2:
fa:24:de:a2:fb:62:02:23:10:cb:06:ef:07:18:90:96:4d:48:
15:ac:bb:45:c2:79:b8:7e:4e:86:27:35:7d:de:e8:78:c6:cd:
9d:03:d3:f5:80:cd:6c:c7:5c:5d:cc:73:52:77:0d:01:b6:cf:
52:5e:f5:ba:10:78:29:41:af:74:52:67:e2:18:b7:f7:43:57:
14:e0:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:20 2024 by rpki-client on console-ams.rpki-client.org