Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/7mUQMghgWIImYYJ7gKjkHl-Ev3M.roa
File: 7mUQMghgWIImYYJ7gKjkHl-Ev3M.roa (raw, json)
Hash identifier: k+wXqnTKZTwEzqT3URoYspx/U9Eat5YgrfClpbpdIeU=
Subject key identifier: EE:65:10:32:08:60:58:82:26:61:82:7B:80:A8:E4:1E:5F:84:BF:73
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01925458A6C52A79EF4DEB301166C8EF7097
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/7mUQMghgWIImYYJ7gKjkHl-Ev3M.roa
Signing time: Thu 03 Oct 2024 21:45:48 +0000
ROA not before: Thu 03 Oct 2024 21:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24837
IP address blocks: 176.108.176.0/23 maxlen: 24
176.108.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:58:a6:c5:2a:79:ef:4d:eb:30:11:66:c8:ef:70:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Oct 3 21:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee651032086058822661827b80a8e41e5f84bf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:60:3b:0a:9b:4f:0a:2e:6b:d0:3b:d9:d5:
a5:0a:8c:91:4d:ff:e1:75:55:76:70:a1:d7:63:95:
74:da:a9:80:06:72:9f:20:e0:7a:a6:dd:74:97:55:
a3:69:06:a6:4d:d1:0b:58:70:f9:af:54:48:75:1c:
17:28:f6:0f:10:4c:fc:cb:ef:45:97:3e:3b:27:67:
bb:90:0d:80:1f:af:9b:8e:d6:db:06:9f:07:a6:27:
4f:9b:45:89:3b:84:41:18:26:6e:b5:25:0c:da:dc:
57:6c:ed:d7:9f:27:4c:14:db:04:33:44:fc:fd:fb:
cf:58:d2:6f:d4:2b:e6:8f:ae:1e:61:3a:84:93:a9:
3b:f2:cc:23:3f:a8:7c:1b:df:6c:d9:c2:00:b5:b8:
3c:74:7e:a7:b4:4e:24:4c:ea:1a:67:b3:dc:3f:89:
17:8a:d3:76:b6:cd:27:bc:82:52:17:15:c6:ad:1c:
95:9e:43:c5:34:9f:29:ca:97:80:cd:f9:43:6c:af:
a1:5d:30:26:6f:d9:83:e4:69:b5:42:aa:f2:5c:0a:
85:27:9a:49:f4:44:59:ec:d8:b6:63:b4:08:90:c9:
cf:17:4a:97:2f:cc:41:50:52:61:2b:d1:19:eb:1a:
72:fa:27:40:d0:6b:16:80:e8:35:3a:36:94:cc:b5:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:10:32:08:60:58:82:26:61:82:7B:80:A8:E4:1E:5F:84:BF:73
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/7mUQMghgWIImYYJ7gKjkHl-Ev3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ed:aa:af:a2:8c:c9:a2:e9:35:96:c6:70:17:f3:2b:1e:1c:
e9:98:6c:3b:b7:01:46:58:7d:44:44:8a:5e:dd:7b:6f:f1:5d:
af:40:68:de:a5:26:6c:ac:05:e9:dd:9b:7f:ef:33:b6:40:4b:
2f:f2:d5:be:de:74:62:06:7e:89:e2:9a:fe:bd:10:75:70:a1:
54:c4:46:dd:fa:3c:b4:e5:04:06:a1:8f:28:4f:cb:d0:73:56:
9d:e0:5a:d5:75:49:33:7c:20:7f:d7:80:f3:a9:8a:a2:0f:87:
a3:a2:43:dc:fe:c9:00:0c:8b:54:d0:0d:0c:4b:a1:39:5b:9e:
42:dd:5f:95:75:a4:34:f4:09:0c:a4:d2:0f:bc:15:88:39:df:
b9:29:7d:56:18:82:ee:a7:89:2f:99:9b:ee:ab:f6:e1:be:39:
79:50:6b:8b:79:6a:c4:e5:ee:1a:8f:a6:7e:26:e6:66:ab:3a:
32:42:51:c2:06:fe:8e:ae:3a:a9:c6:3e:8b:46:f8:9f:23:d7:
db:61:3e:71:cc:02:53:70:a5:a6:54:92:a0:7e:d4:f4:37:6d:
9d:33:72:58:f6:b6:9d:d1:a3:ab:6e:56:a3:9e:6d:ea:e9:29:
c7:ad:a2:f7:4c:1d:62:03:ca:71:8b:4c:44:09:1c:78:fb:94:
d6:30:72:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJUWKbFKnnvTeswEWbI73CXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjdjNDkwNDQ3ZjUwNDVjMDIzNjdkYjhkMjFiNGUwODc0
OWZhNzYwHhcNMjQxMDAzMjE0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTY1MTAzMjA4NjA1ODgyMjY2MTgyN2I4MGE4ZTQxZTVmODRiZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdNgOwqbTwoua9A72dWlCoyRTf/h
dVV2cKHXY5V02qmABnKfIOB6pt10l1WjaQamTdELWHD5r1RIdRwXKPYPEEz8y+9F
lz47J2e7kA2AH6+bjtbbBp8HpidPm0WJO4RBGCZutSUM2txXbO3XnydMFNsEM0T8
/fvPWNJv1Cvmj64eYTqEk6k78swjP6h8G99s2cIAtbg8dH6ntE4kTOoaZ7PcP4kX
itN2ts0nvIJSFxXGrRyVnkPFNJ8pypeAzflDbK+hXTAmb9mD5Gm1QqryXAqFJ5pJ
9ERZ7Ni2Y7QIkMnPF0qXL8xBUFJhK9EZ6xpy+idA0GsWgOg1OjaUzLWtFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5lEDIIYFiCJmGCe4Co5B5fhL9zMB8GA1UdIwQY
MBaAFHNnxJBEf1BFwCNn240htOCHSfp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTIt
NWJhNzU2ZTc4ODY5LzEvN21VUU1naGdXSUltWVlKN2dLamtIbC1FdjNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTItNWJhNzU2ZTc4ODY5
LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsGywMA0G
CSqGSIb3DQEBCwUAA4IBAQCC7aqvoozJouk1lsZwF/MrHhzpmGw7twFGWH1ERIpe
3Xtv8V2vQGjepSZsrAXp3Zt/7zO2QEsv8tW+3nRiBn6J4pr+vRB1cKFUxEbd+jy0
5QQGoY8oT8vQc1ad4FrVdUkzfCB/14DzqYqiD4ejokPc/skADItU0A0MS6E5W55C
3V+VdaQ09AkMpNIPvBWIOd+5KX1WGILup4kvmZvuq/bhvjl5UGuLeWrE5e4aj6Z+
JuZmqzoyQlHCBv6Orjqpxj6LRvifI9fbYT5xzAJTcKWmVJKgftT0N22dM3JY9rad
0aOrblajnm3q6SnHraL3TB1iA8pxi0xECRx4+5TWMHK9
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:17 2025 by rpki-client