Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/adbQw_P9toB6HPI_bwvYk1pklug.roa
File: adbQw_P9toB6HPI_bwvYk1pklug.roa (raw, json)
Hash identifier: 8sNVvvIbiLS2ua4zcgfQtyRSxwV+nioJCd574waVu70=
Subject key identifier: 69:D6:D0:C3:F3:FD:B6:80:7A:1C:F2:3F:6F:0B:D8:93:5A:64:96:E8
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 018BB38B1CE068CE0D3BB8631F1A33F78644
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/adbQw_P9toB6HPI_bwvYk1pklug.roa
Signing time: Thu 09 Nov 2023 10:05:20 +0000
ROA not before: Thu 09 Nov 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/21 maxlen: 21
176.116.160.0/20 maxlen: 20
176.116.168.0/21 maxlen: 21
176.116.177.0/24 maxlen: 24
176.116.178.0/23 maxlen: 23
176.116.182.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:8b:1c:e0:68:ce:0d:3b:b8:63:1f:1a:33:f7:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Nov 9 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d6d0c3f3fdb6807a1cf23f6f0bd8935a6496e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:ff:b0:f0:45:17:20:96:92:80:60:55:2d:
ad:ba:bc:a0:93:aa:a3:96:d4:3f:5c:24:2d:b0:9b:
9d:9b:a1:f9:10:d9:26:f7:71:be:9a:b9:1f:e9:b8:
05:12:d2:82:65:b0:1c:06:17:96:32:0c:5e:92:46:
ea:c5:37:fd:a6:91:0d:9f:91:92:09:6d:16:e5:7a:
c8:bd:50:b4:42:a4:9c:0e:f2:6d:03:b2:35:20:19:
2c:50:82:7b:5a:63:8f:da:16:08:6a:61:30:d3:51:
d9:68:2f:39:0c:69:9d:30:dc:62:90:28:96:4c:62:
8f:80:63:95:e7:32:bf:69:54:d2:00:3d:7b:40:82:
8d:31:47:59:19:a6:cb:6b:b6:2d:e9:9a:f2:e5:6d:
74:1d:85:0c:b5:e3:a9:b6:eb:af:6b:14:e4:64:5f:
c4:21:d0:fa:5a:13:94:98:9e:f9:e7:d3:f5:18:18:
38:01:ad:3e:b2:ca:60:29:1d:ab:59:5b:82:1c:a8:
8b:af:15:ad:05:e8:ee:6d:b7:28:66:c9:91:46:50:
4e:15:28:42:02:05:7e:e7:de:bf:f2:82:6e:2e:e4:
7a:68:31:18:c1:a3:2d:05:ca:6b:b4:37:ab:13:2e:
a4:1a:9a:44:56:38:02:8b:5e:3f:82:6d:54:81:2d:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:D0:C3:F3:FD:B6:80:7A:1C:F2:3F:6F:0B:D8:93:5A:64:96:E8
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/adbQw_P9toB6HPI_bwvYk1pklug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.177.0-176.116.183.255
Signature Algorithm: sha256WithRSAEncryption
95:cb:ea:33:e6:0d:41:02:6c:46:34:4f:f7:13:f9:d4:a4:88:
f6:f7:b8:17:68:a8:3a:97:64:73:80:f3:50:15:87:bc:13:3a:
98:ac:11:f6:d7:39:02:d6:11:1a:d6:95:d4:13:51:2f:09:28:
a8:4c:9a:31:df:08:32:63:a1:36:00:83:3d:4f:9a:99:30:63:
80:55:b9:10:20:a4:86:c9:38:27:19:ed:d2:2f:6c:93:6d:90:
a9:db:2f:ee:bd:fb:3f:31:67:28:d2:4c:7d:79:b7:a5:d3:ee:
38:7f:da:e7:40:49:db:1a:7f:4f:ff:70:47:1a:65:7c:24:f5:
46:d4:16:d5:7b:cc:df:18:7a:af:78:ed:bc:c8:c7:91:ab:af:
a9:81:a9:90:96:35:c8:dc:42:78:98:6a:33:f5:d5:57:6b:b2:
a5:3e:13:7d:35:12:21:93:4d:5c:69:6c:e9:8b:b5:f2:f2:8b:
b7:72:13:35:c9:34:2b:16:f3:ed:3d:0e:7f:02:ba:3a:74:e4:
08:e7:11:8f:70:20:75:f9:c3:e7:55:0a:85:4d:b4:64:47:35:
30:16:bd:5e:74:76:a2:2c:3b:c3:a0:6a:c6:0f:d7:ea:05:3e:
b3:d4:f6:ab:60:6e:eb:f7:f0:a1:2a:79:d9:09:53:37:4c:c2:
9d:08:f7:ae
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYuzixzgaM4NO7hjHxoz94ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjE4ZGYwMDZkNTQ4ZDFkODdlZDY0MTk1NTA2NjJkYjZm
YzA2MDYwHhcNMjMxMTA5MTAwNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWQ2ZDBjM2YzZmRiNjgwN2ExY2YyM2Y2ZjBiZDg5MzVhNjQ5NmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7b/sPBFFyCWkoBgVS2turygk6qj
ltQ/XCQtsJudm6H5ENkm93G+mrkf6bgFEtKCZbAcBheWMgxekkbqxTf9ppENn5GS
CW0W5XrIvVC0QqScDvJtA7I1IBksUIJ7WmOP2hYIamEw01HZaC85DGmdMNxikCiW
TGKPgGOV5zK/aVTSAD17QIKNMUdZGabLa7Yt6Zry5W10HYUMteOptuuvaxTkZF/E
IdD6WhOUmJ7559P1GBg4Aa0+sspgKR2rWVuCHKiLrxWtBejubbcoZsmRRlBOFShC
AgV+596/8oJuLuR6aDEYwaMtBcprtDerEy6kGppEVjgCi14/gm1UgS1w4wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGnW0MPz/baAehzyP28L2JNaZJboMB8GA1UdIwQY
MBaAFFFhjfAG1UjR2H7WQZVQZi22/AYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEt
MzE3YzJmYjBhMzViLzEvYWRiUXdfUDl0b0I2SFBJX2J3dllrMXBrbHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEtMzE3YzJmYjBhMzVi
LzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEsHSgMAwD
BACwdLEDBAOwdLAwDQYJKoZIhvcNAQELBQADggEBAJXL6jPmDUECbEY0T/cT+dSk
iPb3uBdoqDqXZHOA81AVh7wTOpisEfbXOQLWERrWldQTUS8JKKhMmjHfCDJjoTYA
gz1PmpkwY4BVuRAgpIbJOCcZ7dIvbJNtkKnbL+69+z8xZyjSTH15t6XT7jh/2udA
Sdsaf0//cEcaZXwk9UbUFtV7zN8Yeq947bzIx5Grr6mBqZCWNcjcQniYajP11Vdr
sqU+E301EiGTTVxpbOmLtfLyi7dyEzXJNCsW8+09Dn8Cujp05AjnEY9wIHX5w+dV
CoVNtGRHNTAWvV50dqIsO8OgasYP1+oFPrPU9qtgbuv38KEqedkJUzdMwp0I964=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org