Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/4JTbaw21ZSUqbvBbEFyY6ApUEfE.roa
File: 4JTbaw21ZSUqbvBbEFyY6ApUEfE.roa (raw, json)
Hash identifier: 51SqtH1bU1YN5GiVDb315f+EtcfyfNH3JnCpcbTIExg=
Subject key identifier: E0:94:DB:6B:0D:B5:65:25:2A:6E:F0:5B:10:5C:98:E8:0A:54:11:F1
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018D9A6662528AC4AF8A9E85F49C5E4A4B1E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/4JTbaw21ZSUqbvBbEFyY6ApUEfE.roa
Signing time: Sun 11 Feb 2024 23:00:17 +0000
ROA not before: Sun 11 Feb 2024 23:00:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 176.221.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9a:66:62:52:8a:c4:af:8a:9e:85:f4:9c:5e:4a:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 11 23:00:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e094db6b0db565252a6ef05b105c98e80a5411f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:5b:0e:b6:26:e7:c9:67:ae:d6:08:71:2b:
be:53:fe:20:01:63:6f:4f:fb:95:a5:ef:b0:86:e6:
79:ef:cd:33:42:2f:fc:46:97:49:14:4a:2f:9a:92:
88:ec:72:63:7e:a5:af:a0:8e:8c:87:c3:cd:76:ef:
75:36:8e:c9:3e:86:fc:6a:95:40:04:33:ef:89:ec:
69:39:cf:11:1e:db:ad:7c:1c:85:eb:50:28:2d:8a:
f3:4a:9d:b4:cd:f6:25:f5:09:02:f1:80:6f:f1:a5:
2f:1d:36:4d:61:48:cb:20:fa:53:1d:ab:21:21:89:
6d:0d:0a:51:db:a3:93:1e:20:f2:5f:61:73:43:ab:
06:88:f9:d6:00:2a:63:58:37:07:e0:ea:75:6d:66:
31:76:a2:bf:32:02:b5:c9:14:49:8d:4d:21:37:f1:
38:15:7f:d1:47:87:0b:49:2d:79:c2:31:9a:97:7a:
1b:7f:4e:9d:cc:c8:bd:43:c7:a5:40:46:26:52:22:
67:26:9b:8c:01:7e:d0:a3:28:e6:0a:8f:e5:2f:64:
1c:dc:7f:4f:21:f5:33:36:43:d6:c0:98:ea:ce:82:
8f:53:1d:5a:95:75:6e:25:10:f0:60:7a:7e:48:4e:
c9:12:b2:10:cf:7d:f9:f9:7c:6b:62:59:fc:25:15:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:94:DB:6B:0D:B5:65:25:2A:6E:F0:5B:10:5C:98:E8:0A:54:11:F1
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/4JTbaw21ZSUqbvBbEFyY6ApUEfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.26.0/23
Signature Algorithm: sha256WithRSAEncryption
95:1c:14:81:e7:45:4b:a0:e7:c0:eb:dc:47:37:8e:29:ce:5d:
86:7e:9b:91:c3:4b:87:cc:4a:a3:fe:45:60:1c:07:db:21:e7:
9f:ba:ce:26:e6:7a:10:fe:21:e0:9f:ba:4d:45:fe:f1:fd:cf:
20:1f:e1:cf:07:16:63:45:56:13:7d:b7:41:3c:a6:2a:80:e7:
51:bf:b0:f4:0c:80:9b:f4:1d:0e:4a:9d:d8:48:94:39:52:d4:
82:cd:cf:98:a0:8a:1f:08:6c:da:52:05:52:cf:77:14:b7:51:
c9:b4:36:58:68:cc:fd:24:84:65:db:10:5d:b8:2c:50:dd:03:
7d:e7:f7:05:61:f3:31:0b:9a:ba:c6:c3:83:a3:31:6b:6e:9b:
93:f1:08:bb:60:0f:c4:03:3f:fb:88:e4:89:54:4d:da:7e:5c:
4f:3e:54:99:bb:75:3e:55:83:07:f4:96:e1:b9:ab:a1:a9:d2:
be:7c:02:c3:8c:9f:01:e4:a3:75:79:0c:cb:ef:24:ce:7d:6d:
12:2e:97:56:39:11:b6:2e:e1:6a:b8:18:3e:2b:39:65:17:33:
03:af:ef:64:e6:5d:41:bd:7c:03:b8:4c:37:26:6f:33:5a:4e:
6d:a9:be:54:3c:ac:0e:4c:fc:bc:16:cd:f1:f5:cb:32:67:6b:
64:4f:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:38 2025 by rpki-client