Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/eZJUZXCJBMYAhS04JzFtrdMAwgI.roa
File: eZJUZXCJBMYAhS04JzFtrdMAwgI.roa (raw, json)
Hash identifier: q6xcE9rNkNtdYtUti86l6Zt8lLzPNno57tiu+J1Ja1s=
Subject key identifier: 79:92:54:65:70:89:04:C6:00:85:2D:38:27:31:6D:AD:D3:00:C2:02
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 019139484A8E2688DB8B1DE7C3A850868E1F
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/eZJUZXCJBMYAhS04JzFtrdMAwgI.roa
Signing time: Fri 09 Aug 2024 22:35:24 +0000
ROA not before: Fri 09 Aug 2024 22:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.84.0/22 maxlen: 22
176.117.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:39:48:4a:8e:26:88:db:8b:1d:e7:c3:a8:50:86:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Aug 9 22:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79925465708904c600852d3827316dadd300c202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:a4:9d:aa:4e:94:f0:0b:94:26:ce:36:19:
6f:3e:d6:f6:af:94:b7:a2:6c:97:26:63:c6:b1:24:
48:f9:95:9e:77:f7:c6:18:81:69:2f:02:bc:d3:f8:
20:3c:89:58:42:dd:25:3e:7f:7d:e9:0f:4f:56:38:
08:1b:52:c8:34:4f:bd:23:e7:a7:02:9e:85:b7:88:
4f:d1:fa:6e:ee:cd:0e:b5:d2:66:6a:04:b6:1d:69:
bf:58:85:b5:d5:c9:07:bc:05:66:62:1d:c4:74:2f:
48:39:d2:b0:40:fc:ac:bd:59:e9:db:ed:01:29:64:
7c:99:88:10:2e:61:6c:6b:0f:ce:ce:f2:a2:e0:8e:
41:43:44:4a:b3:0b:b8:72:14:07:8e:c9:1c:24:7d:
af:d7:f7:15:41:d4:6f:d7:c3:94:03:d0:de:2f:61:
15:37:1f:81:39:b2:90:66:2d:bd:1b:d0:d8:42:02:
bc:24:34:49:88:e1:2c:89:6a:85:8e:b3:83:58:63:
c0:3a:2a:d1:6c:26:b3:3e:d0:24:08:4b:a1:f8:12:
53:00:0a:17:41:69:12:92:0b:f4:48:d6:80:e0:0b:
dc:60:3c:76:1d:b2:b9:a6:25:2c:da:8d:77:dc:3c:
19:0f:e1:f4:8e:7b:40:16:5a:41:4d:e3:cb:de:0d:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:54:65:70:89:04:C6:00:85:2D:38:27:31:6D:AD:D3:00:C2:02
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/eZJUZXCJBMYAhS04JzFtrdMAwgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.84.0-176.117.95.255
Signature Algorithm: sha256WithRSAEncryption
26:95:21:e7:fb:51:1a:59:ed:fb:23:c1:2d:fd:f7:54:50:65:
f2:86:ae:d6:fc:c5:63:9d:08:3f:9c:3a:d6:e1:e4:16:69:9a:
4c:86:a4:d9:b7:4c:b7:94:72:69:94:6c:2f:be:36:07:14:20:
a3:48:97:93:26:c1:8c:fe:9a:ee:d4:24:ee:17:a3:df:fd:05:
54:0f:5f:6c:a9:9b:88:79:52:d3:15:fd:7d:8f:ec:83:02:06:
0a:d9:d9:4f:70:56:ca:3c:4c:47:56:99:ed:a6:93:a1:ea:a9:
01:66:d1:98:61:dc:5d:68:1a:5f:ee:16:9a:bd:6e:70:2d:3c:
81:8e:f5:0b:ba:d8:20:a1:5f:34:7b:61:4c:1b:b6:6b:79:78:
72:1b:65:73:a3:c9:2f:81:59:88:45:95:a2:92:ee:72:db:0b:
17:b2:d9:b7:7f:06:f4:73:f0:bc:bf:4b:db:b0:c9:cc:a9:ab:
24:ae:de:29:ff:34:c3:3e:f5:65:08:19:3e:0d:db:9c:65:0c:
2b:52:41:c1:02:5e:49:03:36:c0:ae:a0:2c:b0:89:35:9b:08:
58:4a:92:50:4c:51:40:7c:04:ad:6a:77:12:93:c8:36:b3:f3:
a4:19:ca:43:26:cf:2b:f6:aa:9b:1a:b6:eb:41:89:e3:cf:6f:
4d:e2:e1:44
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZE5SEqOJojbix3nw6hQho4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjk5Y2YxMmIzOGZmMTJkOTVmZmMwZDEzYWMxMmM2OWZl
MmMxY2EwHhcNMjQwODA5MjIzNTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTkyNTQ2NTcwODkwNGM2MDA4NTJkMzgyNzMxNmRhZGQzMDBjMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62mknapOlPALlCbONhlvPtb2r5S3
omyXJmPGsSRI+ZWed/fGGIFpLwK80/ggPIlYQt0lPn996Q9PVjgIG1LINE+9I+en
Ap6Ft4hP0fpu7s0OtdJmagS2HWm/WIW11ckHvAVmYh3EdC9IOdKwQPysvVnp2+0B
KWR8mYgQLmFsaw/OzvKi4I5BQ0RKswu4chQHjskcJH2v1/cVQdRv18OUA9DeL2EV
Nx+BObKQZi29G9DYQgK8JDRJiOEsiWqFjrODWGPAOirRbCazPtAkCEuh+BJTAAoX
QWkSkgv0SNaA4AvcYDx2HbK5piUs2o133DwZD+H0jntAFlpBTePL3g1dzQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHmSVGVwiQTGAIUtOCcxba3TAMICMB8GA1UdIwQY
MBaAFNApnPErOP8S2V/8DROsEsaf4sHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTIt
ZTY0MWU3MTNkMWZhLzEvZVpKVVpYQ0pCTVlBaFMwNEp6RnRyZE1Bd2dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNTgyYzQtMzZlMy00YTU3LTg3NTItZTY0MWU3MTNkMWZh
LzEvMENtYzhTczRfeExaWF93TkU2d1N4cF9pd2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKwdVQD
BAWwdUAwDQYJKoZIhvcNAQELBQADggEBACaVIef7URpZ7fsjwS3991RQZfKGrtb8
xWOdCD+cOtbh5BZpmkyGpNm3TLeUcmmUbC++NgcUIKNIl5MmwYz+mu7UJO4Xo9/9
BVQPX2ypm4h5UtMV/X2P7IMCBgrZ2U9wVso8TEdWme2mk6HqqQFm0Zhh3F1oGl/u
Fpq9bnAtPIGO9Qu62CChXzR7YUwbtmt5eHIbZXOjyS+BWYhFlaKS7nLbCxey2bd/
BvRz8Ly/S9uwycypqySu3in/NMM+9WUIGT4N25xlDCtSQcECXkkDNsCuoCywiTWb
CFhKklBMUUB8BK1qdxKTyDaz86QZykMmzyv2qpsatutBiePPb03i4UQ=
-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:39 2024 by rpki-client on console-fra.rpki-client.org