Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/G9XwpvfigcviptnekcZgfEN3mOU.roa
File: G9XwpvfigcviptnekcZgfEN3mOU.roa (raw, json)
Hash identifier: aGlRyapzKDKmTyV8YytMCllzUPjDtFqFEoye9ULEZZI=
Subject key identifier: 1B:D5:F0:A6:F7:E2:81:CB:E2:A6:D9:DE:91:C6:60:7C:43:77:98:E5
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 018CC5DC52938B85662AFF54BD0914F4F566
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/G9XwpvfigcviptnekcZgfEN3mOU.roa
Signing time: Mon 01 Jan 2024 16:29:59 +0000
ROA not before: Mon 01 Jan 2024 16:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199472
IP address blocks: 176.121.16.0/24 maxlen: 24
176.121.16.0/22 maxlen: 24
176.121.17.0/24 maxlen: 24
176.121.19.0/24 maxlen: 24
176.121.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:52:93:8b:85:66:2a:ff:54:bd:09:14:f4:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Jan 1 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bd5f0a6f7e281cbe2a6d9de91c6607c437798e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:7f:86:3e:86:9b:fa:84:11:e7:80:92:48:
23:f3:ef:f9:5e:f3:6a:10:c0:ce:98:75:1f:c6:43:
d7:a9:b0:06:3e:a5:66:1f:57:2c:fe:7c:fe:3b:9f:
74:fe:f4:7f:3e:3d:52:ec:fc:fe:9a:7f:ad:8c:6a:
ab:a5:4e:65:0a:c3:82:c9:d6:32:19:9b:7f:8e:aa:
04:f5:96:08:ee:de:ae:43:6f:59:f4:13:5b:ff:cc:
42:f8:9e:8c:6f:d5:41:4e:35:e6:92:2c:0e:ed:b7:
f2:1d:cb:0d:3f:02:33:cb:5b:aa:80:2e:36:e9:21:
4c:4f:f2:ad:fd:a1:ed:bd:98:45:0c:29:7c:cf:d5:
bd:df:ae:bb:bd:53:13:71:a9:c7:fa:04:25:5b:13:
2c:cd:50:59:d1:89:ff:7f:cc:f0:69:c8:86:54:90:
26:0b:c0:4b:e5:ca:dc:4f:1b:b0:da:be:b4:19:f8:
fd:65:c6:00:26:67:77:97:d6:1a:2a:b6:89:d8:6a:
2b:62:cc:66:3a:dd:6a:41:25:3d:99:cd:6c:e1:16:
bb:53:2b:b2:1f:80:d6:4b:0b:f4:81:f0:78:1b:af:
68:08:fb:62:1b:45:65:5b:91:63:14:52:cd:4f:78:
30:a9:0c:3d:40:ca:22:4f:5f:a6:58:ac:f4:5b:ad:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:F0:A6:F7:E2:81:CB:E2:A6:D9:DE:91:C6:60:7C:43:77:98:E5
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/G9XwpvfigcviptnekcZgfEN3mOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
11:35:3e:b4:65:18:f8:e5:f4:a3:6b:2b:95:87:96:51:a7:61:
39:58:72:9d:72:1a:6f:f3:0d:68:1c:a1:e0:4b:22:4b:48:43:
17:45:f4:08:38:fc:4d:6e:23:20:fe:b6:ae:92:a5:bb:a1:73:
fa:3a:94:de:97:31:77:03:1e:a5:56:9c:0c:0e:a5:b3:49:51:
b9:1b:78:74:b7:e9:e8:d6:20:07:62:1c:96:ab:4e:e6:c9:c4:
87:de:f2:df:c2:a0:11:fb:97:99:b9:2d:c8:ee:40:09:83:80:
df:5b:34:a1:50:11:fc:bb:fe:31:cd:6a:bb:30:3d:ef:55:26:
30:88:17:45:30:da:7d:d6:95:69:54:9f:72:eb:2e:1d:7b:4d:
76:95:59:2b:b4:0c:ce:7a:81:12:2e:16:9e:4a:3a:b0:fb:22:
ef:f4:1b:b4:b7:45:b0:c9:d8:a6:03:c3:4f:ac:30:6a:2f:f6:
f4:eb:25:5e:18:83:a8:0e:33:0c:b5:78:96:52:4c:d4:f5:32:
05:2d:ba:15:f8:bf:cb:3d:8f:2b:5a:0b:93:73:f9:53:b4:4a:
03:7c:14:54:b4:27:8d:4e:fa:88:b5:a5:73:1f:a0:18:d9:74:
8b:5e:d2:ee:7b:11:0a:22:57:08:e1:b3:66:61:ef:6b:54:4d:
fe:4b:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:11 2025 by rpki-client