Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x_A6EomqPDFNatFXy3fgeANJ0dk.roa
File: x_A6EomqPDFNatFXy3fgeANJ0dk.roa (raw, json)
Hash identifier: FBwhSya3L90Cz093CGRcuP1+sVnOfqfWX9XTGwQqWvQ=
Subject key identifier: C7:F0:3A:12:89:AA:3C:31:4D:6A:D1:57:CB:77:E0:78:03:49:D1:D9
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A31C609341AD876456AA4C67AF107
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x_A6EomqPDFNatFXy3fgeANJ0dk.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9087
IP address blocks: 176.221.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 24 Jan 2024 22:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:c6:09:34:1a:d8:76:45:6a:a4:c6:7a:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7f03a1289aa3c314d6ad157cb77e0780349d1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:25:b2:bc:da:6e:0a:8d:37:ce:b9:cc:0d:
e5:96:0f:6f:2c:4c:67:f2:dd:5a:55:7a:e1:b2:a3:
4f:60:60:df:37:61:ce:2f:67:d9:84:ed:3d:8c:22:
a6:e1:87:30:5d:b1:8c:95:06:95:56:5d:b1:e1:98:
cf:fb:4b:06:22:f3:ba:cf:7f:51:0a:31:83:5a:23:
91:2f:f2:c1:f4:56:c7:4d:4e:32:8c:7c:0b:dd:2d:
ba:4a:d8:7c:e8:6b:c8:6a:ef:84:cb:29:cb:c4:ca:
a8:e2:13:a4:e1:a2:ca:27:01:77:3c:25:a1:1b:e3:
19:82:57:49:06:52:cb:b3:68:8f:47:aa:e7:f1:ed:
54:32:a3:52:d8:af:7e:15:82:3f:1d:fd:b9:6c:99:
9d:e2:c4:c8:21:79:9c:fe:3d:ec:8a:5c:5c:a6:f2:
34:94:70:75:67:35:33:47:a5:59:ff:53:16:8a:14:
c0:77:14:3e:6a:63:87:ca:11:49:5f:54:db:8d:d2:
9d:fb:51:2b:77:20:2f:4a:d9:d9:a9:f3:ab:41:b6:
76:e7:56:fd:48:67:1a:d5:6c:9e:ae:09:a8:f8:dd:
d5:8b:0b:5a:5a:e5:38:c5:c6:ac:d8:b0:67:ce:9e:
87:d0:ee:5b:51:eb:bf:36:1c:fd:af:51:59:a0:12:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:3A:12:89:AA:3C:31:4D:6A:D1:57:CB:77:E0:78:03:49:D1:D9
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x_A6EomqPDFNatFXy3fgeANJ0dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:21:da:24:11:2b:7c:66:c6:7f:32:ad:ff:63:5d:51:ea:fa:
a2:7c:00:d2:83:e9:f5:1d:03:70:56:5b:6e:4d:58:db:1b:df:
d1:da:2c:89:f6:75:8d:55:7b:d6:b8:12:23:5d:15:3f:14:73:
68:f8:b3:3d:51:51:b7:83:d5:f8:c0:5f:44:ae:d5:13:06:76:
bd:7e:43:fa:38:61:e8:9f:56:57:1a:86:74:c7:50:ad:a3:40:
e9:3d:40:65:e5:86:d5:02:af:55:d9:33:2b:7f:bd:84:ed:e5:
94:0b:00:ba:b4:9e:a1:45:ed:40:c3:84:2f:0f:de:f9:9b:5f:
3f:87:ba:49:c2:39:84:d6:e8:32:44:1b:e9:dd:fa:c4:c5:20:
d4:04:63:d1:4d:fd:66:37:ac:08:1e:04:8c:3b:7a:bb:33:96:
5c:ec:31:bd:cf:9c:9f:8d:14:bb:99:55:c8:49:f7:0e:ea:a1:
e1:9b:f1:b8:d1:68:93:ef:6c:4b:ad:cb:d2:72:fd:1c:91:0d:
72:35:2b:a0:1e:bb:4e:34:03:2e:dc:2c:5c:92:8f:18:7e:f5:
44:86:cd:37:da:f2:f6:8a:42:8c:b7:52:77:42:8a:f2:7c:2f:
3c:09:88:ea:69:35:fb:21:6e:a0:b8:8e:ef:2c:bc:69:5c:21:
f7:c5:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 01:47:48 2024 by rpki-client on console-fra.rpki-client.org