Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/awmgnexKJhl-P5uwKu1EA3KdKAM.roa
File: awmgnexKJhl-P5uwKu1EA3KdKAM.roa (raw, json)
Hash identifier: qjSZLPxFfv1sWF4DU7HIcNQ3+tmFUZuNRWqIR97E48c=
Subject key identifier: 6B:09:A0:9D:EC:4A:26:19:7E:3F:9B:B0:2A:ED:44:03:72:9D:28:03
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 018708D98898482D84BE1DD79A4C8712259C
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/awmgnexKJhl-P5uwKu1EA3KdKAM.roa
Signing time: Wed 22 Mar 2023 10:24:46 +0000
ROA not before: Wed 22 Mar 2023 10:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57000
IP address blocks: 176.241.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:d9:88:98:48:2d:84:be:1d:d7:9a:4c:87:12:25:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Mar 22 10:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b09a09dec4a26197e3f9bb02aed4403729d2803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:10:a5:1c:9d:a8:9e:3f:df:9f:04:fd:2f:
79:5f:76:a9:ab:4f:74:81:67:24:5a:21:ea:21:dc:
aa:9a:f4:26:92:70:22:14:50:bb:d6:78:80:04:71:
5a:11:33:a4:55:84:97:1e:b8:4b:19:f7:36:91:5d:
e0:a9:3f:25:f1:e5:bd:a4:79:43:0a:7c:97:3a:ce:
45:56:af:04:1a:84:f6:df:24:e9:b1:41:80:3c:0b:
89:e0:10:14:53:c9:cd:c8:b9:e5:62:1b:65:fa:10:
1c:99:37:c2:7d:e0:cd:bf:b1:a9:4a:14:5f:7a:5d:
e3:c2:0d:93:65:f0:ea:3d:39:77:7c:8a:81:b3:e6:
a1:47:f9:cf:4a:86:06:54:bc:3d:e8:23:aa:03:2c:
a1:91:32:20:b3:7f:f1:44:14:d2:83:83:c5:74:37:
0d:e7:13:35:e7:5e:e2:42:43:66:66:12:2f:ee:40:
40:a8:5f:a6:13:a0:4e:67:25:6c:8d:a5:c3:01:53:
e7:65:3d:47:4d:18:c4:92:a8:30:cc:1e:e2:c3:70:
50:35:f4:5b:d6:4d:a6:42:cb:07:46:5f:68:b0:4f:
55:66:35:54:0d:76:c2:c4:ae:c5:18:a9:c0:e8:bf:
12:3d:9e:c8:58:e7:be:33:19:7c:2a:42:12:5d:73:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:A0:9D:EC:4A:26:19:7E:3F:9B:B0:2A:ED:44:03:72:9D:28:03
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/awmgnexKJhl-P5uwKu1EA3KdKAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
75:71:7d:eb:de:47:86:be:3f:75:2d:d9:e3:b2:15:c9:d3:18:
92:f0:0c:94:be:b2:22:d7:06:a5:22:e8:30:91:c7:29:f0:60:
e5:8a:87:b2:ae:08:c7:70:a3:2f:b0:8c:36:5f:2c:c8:b4:01:
12:96:1d:23:35:ca:89:95:0e:6e:5c:b2:c6:e3:fb:9e:5f:9e:
ee:b2:53:f8:c3:8e:9c:eb:d4:18:a7:6d:c5:f6:09:86:75:00:
05:88:0a:6d:e2:59:78:59:57:29:7a:fd:1d:5c:35:c7:9d:7b:
48:5a:cd:73:73:df:8a:ac:a2:b3:b7:70:aa:6a:ca:00:be:83:
05:fd:21:69:77:bb:26:12:67:7a:22:a9:89:39:9d:4b:7d:4c:
b4:0a:31:54:47:2a:7e:19:f5:cc:7a:ec:13:df:07:f5:7f:68:
8b:de:25:40:22:68:1c:2f:51:11:e1:7e:b4:83:39:f4:f4:1f:
1a:b3:54:71:d7:ea:7a:7c:6d:9e:ec:3e:8b:25:24:e8:8d:f9:
ce:4d:e3:0c:33:49:02:81:c5:98:83:2f:34:59:22:c6:51:09:
68:3b:95:cf:42:8d:b3:b7:06:4d:9f:0b:ed:91:a5:38:14:b6:
88:77:1f:e9:3c:f1:6f:0a:5f:99:6b:fa:d6:90:d2:68:58:3f:
a1:17:2c:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcI2YiYSC2Evh3XmkyHEiWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0
Y2FiN2QwHhcNMjMwMzIyMTAyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjA5YTA5ZGVjNGEyNjE5N2UzZjliYjAyYWVkNDQwMzcyOWQyODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg4QpRydqJ4/358E/S95X3apq090
gWckWiHqIdyqmvQmknAiFFC71niABHFaETOkVYSXHrhLGfc2kV3gqT8l8eW9pHlD
CnyXOs5FVq8EGoT23yTpsUGAPAuJ4BAUU8nNyLnlYhtl+hAcmTfCfeDNv7GpShRf
el3jwg2TZfDqPTl3fIqBs+ahR/nPSoYGVLw96COqAyyhkTIgs3/xRBTSg4PFdDcN
5xM1517iQkNmZhIv7kBAqF+mE6BOZyVsjaXDAVPnZT1HTRjEkqgwzB7iw3BQNfRb
1k2mQssHRl9osE9VZjVUDXbCxK7FGKnA6L8SPZ7IWOe+Mxl8KkISXXNC/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsJoJ3sSiYZfj+bsCrtRANynSgDMB8GA1UdIwQY
MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct
ZjY1NzUxOWQwMjMzLzEvYXdtZ25leEtKaGwtUDV1d0t1MUVBM0tkS0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz
LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsPFVMA0G
CSqGSIb3DQEBCwUAA4IBAQB1cX3r3keGvj91LdnjshXJ0xiS8AyUvrIi1walIugw
kccp8GDlioeyrgjHcKMvsIw2XyzItAESlh0jNcqJlQ5uXLLG4/ueX57uslP4w46c
69QYp23F9gmGdQAFiApt4ll4WVcpev0dXDXHnXtIWs1zc9+KrKKzt3CqasoAvoMF
/SFpd7smEmd6IqmJOZ1LfUy0CjFURyp+GfXMeuwT3wf1f2iL3iVAImgcL1ER4X60
gzn09B8as1Rx1+p6fG2e7D6LJSTojfnOTeMMM0kCgcWYgy80WSLGUQloO5XPQo2z
twZNnwvtkaU4FLaIdx/pPPFvCl+Za/rWkNJoWD+hFyzi
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:43 2024 by rpki-client on console-fra.rpki-client.org