Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/qwjXMmpuaP6LqDBV7cCRuL0HOsA.roa
File: qwjXMmpuaP6LqDBV7cCRuL0HOsA.roa (raw, json)
Hash identifier: 2LPsNVwN1uKzyzpX5VqR1iDT8aw2G2JMTJKz2fXlMY0=
Subject key identifier: AB:08:D7:32:6A:6E:68:FE:8B:A8:30:55:ED:C0:91:B8:BD:07:3A:C0
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 01856F94983C565C5E8B8B76C9903EA29D3F
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/qwjXMmpuaP6LqDBV7cCRuL0HOsA.roa
Signing time: Sun 01 Jan 2023 23:04:47 +0000
ROA not before: Sun 01 Jan 2023 23:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57395
IP address blocks: 176.124.36.0/24 maxlen: 24
176.124.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:98:3c:56:5c:5e:8b:8b:76:c9:90:3e:a2:9d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Jan 1 23:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab08d7326a6e68fe8ba83055edc091b8bd073ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:19:d7:84:15:c2:94:d5:b2:7d:49:ca:3c:
fe:64:ab:6c:19:aa:2c:82:ef:e3:8f:c5:1c:e8:68:
49:b7:1d:22:ec:75:1e:60:59:37:90:e6:82:aa:6f:
48:45:06:48:61:f9:7a:4d:4a:3f:af:ee:83:b4:32:
a9:49:31:4b:bd:54:b8:8f:bb:47:a7:b4:46:8b:44:
b0:5b:9b:5f:56:7c:ff:c5:25:e0:f6:d0:fc:ac:c7:
19:4c:34:f2:b2:5c:92:87:25:39:47:74:97:51:50:
6a:e1:7d:74:54:4f:c8:1a:a9:9a:7d:b5:17:7d:27:
60:ee:99:6e:05:dc:cf:a7:6e:11:8c:c7:2e:c7:dd:
2b:35:88:c9:36:25:87:48:26:a4:42:4a:4f:62:4d:
93:81:07:a7:d9:4e:9d:8f:e3:59:32:ac:48:e9:68:
89:73:40:65:47:0f:ef:4f:53:21:0f:b6:13:b6:ae:
21:b9:9c:1d:4c:99:ee:40:56:ac:eb:82:e5:52:1e:
6c:4f:ac:46:90:c5:95:16:16:c8:3a:15:0d:87:e8:
98:cc:f9:9c:14:54:15:ff:95:8e:3f:f7:e0:aa:fb:
db:5c:b2:ee:08:11:47:74:bd:ab:2d:71:0d:2d:d8:
af:3a:a6:56:fb:a5:5a:30:5f:44:8d:69:62:4e:bd:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:D7:32:6A:6E:68:FE:8B:A8:30:55:ED:C0:91:B8:BD:07:3A:C0
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/qwjXMmpuaP6LqDBV7cCRuL0HOsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.36.0/23
Signature Algorithm: sha256WithRSAEncryption
00:c9:5f:5b:1f:28:f1:29:b6:f4:5c:e1:4c:54:29:09:83:40:
a6:f6:a5:cc:e0:26:f4:be:79:e4:49:75:a4:b8:38:47:1c:c1:
e9:e1:cc:a5:66:45:66:01:30:7e:12:75:cf:2d:a8:12:4e:ef:
9a:20:cf:db:fc:c9:42:74:ef:75:47:05:da:f1:e7:51:06:08:
5b:80:58:65:2d:9a:b2:3f:e5:b9:44:f9:7c:c4:6c:4e:f3:7a:
6c:a5:26:01:c9:30:a3:d8:ae:1d:29:35:69:bf:85:cf:3b:1a:
c5:7f:2d:33:40:5b:4d:a6:2c:0a:b6:a2:84:ed:a2:fb:16:79:
e3:89:43:95:31:41:1a:95:49:5f:ba:69:0e:27:b9:ab:44:bf:
f1:b7:b3:29:41:89:ba:bb:f2:ea:67:e6:c3:33:27:d7:62:31:
d8:d5:ae:f7:79:b2:da:4f:30:53:d2:3e:a0:96:6f:70:46:7a:
4a:8d:fd:f3:f0:91:ec:70:ab:fb:f5:c7:86:c6:68:d3:e6:dd:
44:d4:f2:fc:4a:f9:04:cc:cb:c8:73:a9:b2:f7:5c:b4:e4:82:
f2:58:25:a4:ce:1e:2e:6f:fe:51:20:88:f3:f0:d0:50:38:5f:
6c:31:26:b5:5c:15:1c:71:a1:ab:c4:fd:28:4d:11:ca:79:67:
80:35:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:27 2024 by rpki-client on console-fra.rpki-client.org