Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/iU_iJPUteYbKawNTdvT2qHJr6TU.roa
File: iU_iJPUteYbKawNTdvT2qHJr6TU.roa (raw, json)
Hash identifier: h7Bvveg2XNzU1HvIS94ee+Gi7c0EAGlKzKJpAiJzz1M=
Subject key identifier: 89:4F:E2:24:F5:2D:79:86:CA:6B:03:53:76:F4:F6:A8:72:6B:E9:35
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01931B56BF866E9EE33C97AD5E78E60FB7B5
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/iU_iJPUteYbKawNTdvT2qHJr6TU.roa
Signing time: Mon 11 Nov 2024 13:08:10 +0000
ROA not before: Mon 11 Nov 2024 13:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57827
IP address blocks: 176.108.176.0/23 maxlen: 24
176.108.178.0/23 maxlen: 24
176.108.180.0/23 maxlen: 24
176.108.182.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:56:bf:86:6e:9e:e3:3c:97:ad:5e:78:e6:0f:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Nov 11 13:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=894fe224f52d7986ca6b035376f4f6a8726be935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:da:b5:24:32:a4:0b:a3:e8:7f:81:91:fa:
2b:89:80:98:67:4b:2f:b5:d0:48:f5:26:7d:c6:f9:
d9:47:b7:03:e3:0c:23:c8:ba:78:8f:82:ef:67:c6:
ce:06:2d:40:7e:03:42:32:60:a5:44:45:c3:2a:2b:
2b:eb:f8:38:a4:38:92:95:5a:0d:2e:73:3f:0f:66:
f0:95:15:dc:02:be:d0:e8:4d:b5:90:d3:86:b5:01:
c9:3e:5f:98:5e:50:a5:94:ed:6f:f1:f7:cb:13:03:
2a:4f:a1:71:33:24:76:34:4d:2d:52:ee:bd:aa:0f:
4c:2f:43:5b:31:5b:06:00:14:5e:e3:a8:1e:9c:23:
54:f8:b2:14:55:03:8e:8e:d4:90:f3:46:86:c6:f7:
38:dc:aa:74:79:bd:b3:9d:28:2b:4f:7f:d1:4f:e5:
11:2a:32:26:9a:9f:fa:25:65:11:43:f2:cc:e9:76:
de:28:72:6c:87:fc:9f:b8:b9:f9:31:8c:72:45:4a:
87:10:8a:33:11:49:31:85:08:7b:42:74:0e:1b:63:
2f:77:a7:a5:be:6d:a8:95:90:74:34:62:f5:dd:21:
80:f7:8f:fd:ae:69:c9:c7:aa:02:0c:79:32:5a:b1:
77:ff:d6:8c:e1:f5:c9:03:e4:c6:e4:5e:3e:b2:5b:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:E2:24:F5:2D:79:86:CA:6B:03:53:76:F4:F6:A8:72:6B:E9:35
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/iU_iJPUteYbKawNTdvT2qHJr6TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0/21
Signature Algorithm: sha256WithRSAEncryption
82:03:02:63:a1:00:53:dd:f3:0e:c5:bf:51:37:61:05:66:13:
57:a9:09:20:a6:91:9e:88:c7:fa:7f:6f:41:37:99:e1:87:a2:
3b:ef:31:9a:9f:ce:0b:1d:34:fb:83:88:ea:ed:4c:24:b5:75:
04:28:98:72:7b:1c:ab:c7:67:75:d7:2c:bf:55:88:90:95:88:
57:cd:9b:26:37:8a:e8:15:03:57:c6:27:2d:3e:4a:bc:e3:5e:
bb:5c:06:11:51:2c:29:ee:ab:26:49:bb:05:41:1e:50:94:0f:
37:6e:05:d1:7a:17:aa:f3:65:e7:9d:e8:33:d0:8c:fe:1f:e8:
0b:84:9f:00:ea:58:01:fe:ae:ab:cc:81:04:05:a2:b7:03:85:
6d:07:4c:6a:22:c9:92:52:76:b9:8d:c3:d6:6d:6c:4e:e7:64:
d9:7c:cb:fb:e8:7b:61:1d:25:31:31:ae:31:1f:db:f4:47:41:
9e:65:90:a1:37:d1:99:eb:30:da:b5:56:ad:f4:4f:87:d7:ad:
05:40:fb:14:79:1b:58:97:7d:43:e8:b0:2e:ae:4a:8b:63:34:
a4:87:b9:04:fc:6b:93:d1:2c:f4:37:d9:93:d1:c3:39:55:3a:
7c:e1:cc:5b:0b:a1:d1:25:f8:df:e0:d8:0d:a6:e8:9a:1b:cf:
8d:a7:ed:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMbVr+Gbp7jPJetXnjmD7e1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjdjNDkwNDQ3ZjUwNDVjMDIzNjdkYjhkMjFiNGUwODc0
OWZhNzYwHhcNMjQxMTExMTMwODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTRmZTIyNGY1MmQ3OTg2Y2E2YjAzNTM3NmY0ZjZhODcyNmJlOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1zatSQypAuj6H+BkforiYCYZ0sv
tdBI9SZ9xvnZR7cD4wwjyLp4j4LvZ8bOBi1AfgNCMmClREXDKisr6/g4pDiSlVoN
LnM/D2bwlRXcAr7Q6E21kNOGtQHJPl+YXlCllO1v8ffLEwMqT6FxMyR2NE0tUu69
qg9ML0NbMVsGABRe46genCNU+LIUVQOOjtSQ80aGxvc43Kp0eb2znSgrT3/RT+UR
KjImmp/6JWURQ/LM6XbeKHJsh/yfuLn5MYxyRUqHEIozEUkxhQh7QnQOG2Mvd6el
vm2olZB0NGL13SGA94/9rmnJx6oCDHkyWrF3/9aM4fXJA+TG5F4+slvPpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlP4iT1LXmGymsDU3b09qhya+k1MB8GA1UdIwQY
MBaAFHNnxJBEf1BFwCNn240htOCHSfp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTIt
NWJhNzU2ZTc4ODY5LzEvaVVfaUpQVXRlWWJLYXdOVGR2VDJxSEpyNlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTItNWJhNzU2ZTc4ODY5
LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsGywMA0G
CSqGSIb3DQEBCwUAA4IBAQCCAwJjoQBT3fMOxb9RN2EFZhNXqQkgppGeiMf6f29B
N5nhh6I77zGan84LHTT7g4jq7UwktXUEKJhyexyrx2d11yy/VYiQlYhXzZsmN4ro
FQNXxictPkq84167XAYRUSwp7qsmSbsFQR5QlA83bgXReheq82Xnnegz0Iz+H+gL
hJ8A6lgB/q6rzIEEBaK3A4VtB0xqIsmSUna5jcPWbWxO52TZfMv76HthHSUxMa4x
H9v0R0GeZZChN9GZ6zDatVat9E+H160FQPsUeRtYl31D6LAurkqLYzSkh7kE/GuT
0Sz0N9mT0cM5VTp84cxbC6HRJfjf4NgNpuiaG8+Np+1Q
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:40 2025 by rpki-client