Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/1MlYjyuenprzbvwMx6fZS-j6T5o.roa
File: 1MlYjyuenprzbvwMx6fZS-j6T5o.roa (raw, json)
Hash identifier: RwVQ2XtDMk4Tj2xoerXNrqHNFfdrnfzV+FWpDfl484Q=
Subject key identifier: D4:C9:58:8F:2B:9E:9E:9A:F3:6E:FC:0C:C7:A7:D9:4B:E8:FA:4F:9A
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01924C83A49FBA1E3F47CA3B73C1CAF051E5
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/1MlYjyuenprzbvwMx6fZS-j6T5o.roa
Signing time: Wed 02 Oct 2024 09:15:48 +0000
ROA not before: Wed 02 Oct 2024 09:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24837
IP address blocks: 176.108.176.0/23 maxlen: 24
176.108.178.0/23 maxlen: 24
176.108.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 21:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:83:a4:9f:ba:1e:3f:47:ca:3b:73:c1:ca:f0:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Oct 2 09:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c9588f2b9e9e9af36efc0cc7a7d94be8fa4f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:52:ed:0c:ea:89:77:6a:f5:8b:73:65:81:
b8:5a:47:9b:de:14:59:c8:35:8f:c9:8c:77:45:6a:
7a:f6:24:a9:e0:93:76:f9:57:6e:90:da:59:6a:db:
70:a1:5c:c1:9d:a2:bd:79:81:9b:79:13:6f:3f:19:
67:a0:26:73:39:bd:31:87:50:0f:a6:79:91:53:c0:
de:5c:9f:13:15:13:a7:06:ce:13:42:ef:b8:90:e3:
46:df:55:e8:63:99:83:12:67:25:b7:5e:b5:20:f0:
be:14:5a:2b:bc:95:b2:3d:83:81:4e:ad:1d:a6:37:
6f:25:37:eb:86:3c:28:5d:6e:72:44:7e:ed:10:df:
3b:aa:d1:2d:12:c6:e9:9a:6f:e8:ec:f6:78:8a:ba:
23:71:26:63:05:2a:49:eb:ad:99:1a:ec:c4:a7:07:
e2:69:e8:2d:08:e1:fd:6c:58:e2:be:15:48:6a:6c:
d2:c7:c0:cf:7c:06:5d:45:31:32:31:e4:24:70:06:
3c:0d:78:b7:5a:50:79:cf:94:97:e9:87:10:8d:6f:
c6:31:32:12:7b:3f:11:ef:43:72:02:ff:a0:53:76:
5b:ea:d6:d0:de:86:f7:04:49:be:49:a6:37:e0:ea:
a8:3a:12:45:fa:69:6c:0e:97:50:11:62:0d:19:07:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:58:8F:2B:9E:9E:9A:F3:6E:FC:0C:C7:A7:D9:4B:E8:FA:4F:9A
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/1MlYjyuenprzbvwMx6fZS-j6T5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0-176.108.181.255
Signature Algorithm: sha256WithRSAEncryption
7a:0b:57:ef:cf:24:95:c4:82:d9:01:40:ee:22:13:d1:be:58:
10:a1:e6:3b:ce:17:46:a2:3a:cb:01:bb:92:e5:2e:2e:69:56:
41:37:9d:aa:c7:d8:f4:24:b5:a9:a9:7e:3d:58:4c:d7:7e:92:
9a:53:a2:11:86:1b:e6:2a:da:c4:36:7a:34:9b:1c:7c:8f:f3:
f4:06:d4:a2:87:a1:42:77:50:dd:53:ee:26:82:2a:aa:e8:45:
bb:c7:ce:3d:50:fb:8e:5c:62:2d:36:3e:0f:47:bd:af:cc:1e:
18:18:29:3f:d2:92:1e:af:65:eb:3e:25:7e:73:27:85:12:1f:
7f:ef:c9:44:9a:1f:e5:e5:8e:04:5b:66:8b:77:d4:0e:c8:71:
b4:c4:68:de:e7:65:3e:21:a7:a7:21:b3:a2:1e:e0:78:96:4e:
c5:67:c3:14:91:97:53:cb:57:1b:a8:be:9b:a0:b4:b4:fc:1b:
da:92:1c:da:b8:95:9c:64:36:9c:47:64:a5:87:c5:38:df:59:
1c:7b:6f:31:90:3f:88:5d:9b:5a:48:fd:27:fe:09:de:cd:3e:
17:d3:87:ff:66:28:69:2e:84:74:83:1b:3e:3d:f8:e4:3d:cf:
3a:3a:ea:46:8f:e3:1f:fd:d0:75:05:11:7e:f7:96:e3:86:28:
c1:a5:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:36:10 2024 by rpki-client on console-fra.rpki-client.org