Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/_G6rO6Qoi6ewvmGCfk0nt8kYMx4.roa
File: _G6rO6Qoi6ewvmGCfk0nt8kYMx4.roa (raw, json)
Hash identifier: 2NMKQzkBQ+Cr4+NQa8U8/fbUgpPE0fzBdT7vJ1VzWHw=
Subject key identifier: FC:6E:AB:3B:A4:28:8B:A7:B0:BE:61:82:7E:4D:27:B7:C9:18:33:1E
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01925458A7D0AEFFAD0A2412EF10FF89AB92
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/_G6rO6Qoi6ewvmGCfk0nt8kYMx4.roa
Signing time: Thu 03 Oct 2024 21:45:49 +0000
ROA not before: Thu 03 Oct 2024 21:45:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57827
IP address blocks: 176.108.180.0/23 maxlen: 24
176.108.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:58:a7:d0:ae:ff:ad:0a:24:12:ef:10:ff:89:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Oct 3 21:45:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc6eab3ba4288ba7b0be61827e4d27b7c918331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:28:df:a4:f4:e8:5c:5c:db:0d:39:6b:c2:
f7:d0:e1:a0:54:84:88:7f:20:4b:2e:f9:0c:41:fa:
b2:06:e5:84:18:ed:4c:e8:03:2f:c3:40:5d:4e:a1:
6d:98:56:22:ef:d7:f0:ed:4f:19:34:c7:be:fa:43:
d5:26:86:c2:b1:17:0d:48:45:bd:79:9b:32:56:fb:
02:a1:0e:72:ba:57:e4:93:7f:d7:d8:e7:db:85:4a:
ed:65:49:36:a9:73:06:b2:7a:c4:eb:32:b6:2e:7f:
5b:4b:4b:f0:20:0d:e0:cc:d9:7c:44:94:df:1a:18:
1d:86:88:05:8c:11:1d:2b:b6:45:06:72:32:28:fe:
55:3a:88:d9:32:21:69:7d:f0:f4:2c:cd:a8:58:7c:
8f:98:cc:6c:c0:6e:9a:0d:a5:43:f6:4e:00:a5:f9:
b4:a8:35:0c:84:62:fd:8b:6d:86:ca:fc:03:f9:52:
6f:c3:4d:5e:c9:0d:95:1e:21:e7:5e:3e:5d:2e:ed:
c2:2a:db:b0:fc:c9:d6:b0:4f:cc:e9:9d:af:5d:13:
e3:71:70:fe:c3:fd:6b:6e:38:a5:06:ea:d8:c8:03:
01:8e:cd:71:68:b5:6f:6d:e0:9b:6f:8b:75:dd:1e:
7d:22:2f:ba:ab:0d:88:1c:b4:f6:8c:66:28:5a:74:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:AB:3B:A4:28:8B:A7:B0:BE:61:82:7E:4D:27:B7:C9:18:33:1E
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/_G6rO6Qoi6ewvmGCfk0nt8kYMx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a6:2a:d6:f1:d0:53:59:2c:cf:67:fc:10:50:7e:3d:00:2b:
91:3e:d9:ba:c6:d2:70:cb:93:74:a9:a1:43:a0:d0:6d:e7:a1:
6e:f6:9a:d0:44:c7:76:e3:57:61:2b:94:39:ab:44:c8:4b:8a:
8d:e9:5b:ab:2b:0d:7b:46:8d:0c:08:7a:3c:9a:36:40:dc:d0:
33:e5:d0:96:65:02:07:5d:61:3e:e5:f5:f2:01:f9:40:65:34:
55:e8:e8:37:9a:1a:99:c8:bd:17:5d:6e:e0:08:ff:d7:f8:90:
05:5b:b5:70:a0:62:a2:25:62:1d:37:c0:82:74:c2:87:5e:02:
08:e5:07:83:c9:89:e7:b4:05:4c:4f:54:04:c8:e1:63:76:10:
b0:73:9b:67:bc:8a:4b:25:7f:bf:b7:1c:57:c8:93:83:fa:78:
2c:d8:38:6e:7b:ac:80:14:f0:21:1d:fd:6f:a6:8c:63:2a:ab:
89:4b:47:8f:26:6d:d6:25:7b:e2:e6:98:72:34:d7:09:e5:f5:
7a:dc:18:b6:07:7e:71:10:28:29:83:fe:30:0d:2b:a7:50:9e:
2a:be:ae:be:8a:b9:a7:43:8a:8d:c7:84:26:f7:b0:90:6c:34:
d5:d6:8d:2d:6b:ae:e5:c4:a9:1e:5d:18:20:a9:2c:91:8d:f6:
be:9b:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:09 2024 by rpki-client on console-fra.rpki-client.org