Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vhMIH5CDGS0fPQbUEKwLiYsFNo4.roa
File: vhMIH5CDGS0fPQbUEKwLiYsFNo4.roa (raw, json)
Hash identifier: uNtZp70CJd6gzYqZVpD1ML82XegyX2PPxObyHzmQ/gg=
Subject key identifier: BE:13:08:1F:90:83:19:2D:1F:3D:06:D4:10:AC:0B:89:8B:05:36:8E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188E906CAA5C740452B5A513EF4C0A950D5
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vhMIH5CDGS0fPQbUEKwLiYsFNo4.roa
Signing time: Fri 23 Jun 2023 16:11:56 +0000
ROA not before: Fri 23 Jun 2023 16:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e9:06:ca:a5:c7:40:45:2b:5a:51:3e:f4:c0:a9:50:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 23 16:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be13081f9083192d1f3d06d410ac0b898b05368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:7f:9f:df:b1:bd:6c:73:26:67:49:22:1d:
ef:c0:5c:4f:61:3d:a6:b3:3f:2c:9b:d8:0f:22:81:
b8:6c:02:80:17:28:6a:46:9b:6b:82:8b:fd:1a:a5:
68:f1:ad:d0:e7:9f:52:25:31:00:d9:d0:52:05:aa:
4c:53:55:4b:ac:a8:3c:96:83:7b:a7:27:b1:39:f3:
08:99:56:72:f5:6d:49:4c:8f:88:8b:4d:92:a6:40:
97:91:4f:74:31:aa:5c:22:f1:f7:20:99:8b:27:a6:
19:d3:b1:ce:12:9b:e8:b0:8a:96:d5:22:23:0a:5a:
49:19:df:32:ad:4a:a9:f8:9c:ac:14:b1:81:b7:1f:
51:e7:51:9a:35:6b:e9:45:10:11:59:9d:aa:d9:f3:
37:b3:e3:ed:b6:66:0b:36:89:22:02:b0:58:c9:39:
e3:a0:aa:d1:f8:12:5e:e8:36:91:ab:77:f6:1b:4b:
a0:3c:27:28:f6:0d:e8:eb:e5:1c:a4:e0:b3:cb:73:
a8:35:62:bd:5c:61:c2:81:d9:52:5a:f1:7c:f2:c6:
69:89:11:b3:6d:2d:16:9d:b7:56:ad:d9:7c:94:80:
23:bd:71:31:f8:ce:cd:f7:32:c8:47:55:91:48:0a:
1e:f6:42:de:85:f2:1b:ed:bf:eb:1e:99:5d:bc:4e:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:08:1F:90:83:19:2D:1F:3D:06:D4:10:AC:0B:89:8B:05:36:8E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vhMIH5CDGS0fPQbUEKwLiYsFNo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5e:92:26:d8:5f:40:25:28:99:3b:a0:bc:9a:f4:76:3b:d5:
68:ae:88:d9:f3:5d:51:25:42:a4:d3:6a:cc:4f:0f:d4:e8:af:
16:a6:17:fb:68:93:a5:e2:09:53:90:d5:d8:54:b4:47:6c:7c:
96:7a:1a:4b:32:d3:c5:91:ad:93:75:d0:f1:9e:68:78:50:ca:
ce:be:74:a9:25:18:05:16:af:78:4f:49:9d:c3:4d:db:4d:8b:
c0:55:bd:ad:d3:21:ac:84:23:0b:e4:a6:23:52:0f:88:03:61:
7c:4e:43:b0:1b:2c:c2:63:f5:b7:74:08:a2:df:5a:ef:4a:cb:
d2:91:f4:64:a1:f1:72:48:fe:d8:0f:ce:b0:5c:0a:af:75:83:
03:73:29:51:35:da:59:86:02:ca:8d:46:c1:77:80:44:f1:9c:
1b:03:a4:f1:d1:d9:5e:74:42:9d:73:8a:99:26:a0:b0:72:20:
1f:be:61:ff:6c:9e:af:f3:53:e7:b5:b4:48:ce:0b:f0:f4:9d:
41:f1:5b:f8:9b:1a:ac:e5:71:6f:d4:28:29:f2:1b:30:50:54:
ea:76:1a:1e:85:cd:fa:a6:2b:94:fd:ef:7f:2e:9d:f6:d9:c0:
a9:2c:0b:7c:dd:20:9d:82:62:59:6a:8d:aa:bd:d5:03:1c:ef:
fe:b5:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:09:01 2023 by rpki-client on console-ams.rpki-client.org