Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iCkwNQX0S8nwL-_Xpc-RZy-wP9k.roa
File: iCkwNQX0S8nwL-_Xpc-RZy-wP9k.roa (raw, json)
Hash identifier: d6lj7sGfK5/8QwtM9Y8YJtYl+w/kKAHDI2Qr74w4SNs=
Subject key identifier: 88:29:30:35:05:F4:4B:C9:F0:2F:EF:D7:A5:CF:91:67:2F:B0:3F:D9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187818AAB5EF18BEE230A10BEF7409E37B7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iCkwNQX0S8nwL-_Xpc-RZy-wP9k.roa
Signing time: Fri 14 Apr 2023 20:52:41 +0000
ROA not before: Fri 14 Apr 2023 20:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 176.126.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 09:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:8a:ab:5e:f1:8b:ee:23:0a:10:be:f7:40:9e:37:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 14 20:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8829303505f44bc9f02fefd7a5cf91672fb03fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:2e:c7:f7:e5:ba:d0:40:1a:40:fc:1b:68:
59:27:37:6e:f5:d2:04:f7:69:bb:ef:bd:41:64:ca:
ca:77:54:c9:ff:23:19:ae:09:e3:04:e9:33:ff:ec:
1e:09:be:e7:30:a1:d2:94:a8:4e:dc:62:88:9c:29:
7c:4e:06:76:ba:04:08:0c:1d:55:d0:97:2f:0e:86:
39:f0:4e:ca:24:4a:ba:70:98:cd:de:8b:88:9c:e7:
81:9c:45:38:84:b5:97:09:be:39:6f:44:e2:df:db:
27:8d:68:bc:73:38:3e:12:0b:6d:e6:ed:84:6e:0b:
2e:01:b4:7d:41:df:a5:c7:16:a9:1c:b6:00:71:57:
ac:9e:e0:16:67:95:b8:15:73:1d:21:18:dc:78:a6:
c4:08:ef:42:c0:d1:77:b2:54:f6:a1:61:9c:2a:18:
ce:45:33:5d:67:24:f0:86:cb:a7:65:6a:4c:38:54:
c8:a0:7a:3b:8f:ef:b5:a4:59:7a:ba:32:40:2c:6b:
52:43:c8:21:72:54:4a:52:bf:26:6d:2d:df:5e:a8:
ea:86:bc:31:bb:e2:1b:fd:62:c8:c3:c5:f8:aa:bf:
88:f3:86:96:fb:41:36:81:47:94:66:04:70:b1:4d:
5d:1d:ee:28:88:9f:4e:77:9b:ab:76:2a:2b:46:77:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:30:35:05:F4:4B:C9:F0:2F:EF:D7:A5:CF:91:67:2F:B0:3F:D9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iCkwNQX0S8nwL-_Xpc-RZy-wP9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.174.0/24
Signature Algorithm: sha256WithRSAEncryption
00:26:93:6a:b8:b6:97:91:c0:7e:60:b1:13:17:23:dd:59:97:
9a:2f:0c:29:4b:17:ca:dd:66:38:6a:ca:12:69:23:4c:b4:c1:
79:c2:8d:2c:85:b2:ee:e1:7f:22:47:fe:fd:6a:17:a9:6c:01:
11:fd:af:39:d1:78:c3:2a:95:b8:03:37:33:cc:f1:10:f4:d9:
59:d2:1d:d2:92:7e:01:a3:0b:2d:67:c7:56:dc:39:f5:fa:20:
a9:f5:57:d3:8e:8b:da:5e:dd:1d:1c:3d:4c:fd:f5:3b:4c:b7:
5c:1c:e1:f9:78:4d:9a:54:b1:b6:02:9b:fe:77:42:89:40:f4:
ec:05:14:67:59:e4:2a:7e:c1:d9:68:99:b8:9b:9b:69:c9:88:
cd:c2:d9:0f:ce:e1:1e:4a:5a:f2:9f:ff:9b:42:24:86:89:4f:
65:93:3a:68:fd:3b:0a:1b:41:8b:64:f1:ec:55:b1:8f:19:c2:
8e:ba:17:b7:15:87:e8:bf:36:0a:38:ee:37:7d:06:c2:de:db:
fe:12:8d:e4:c3:b4:98:85:47:ad:4e:72:52:48:82:3b:43:67:
0a:85:29:2a:61:1d:99:9c:1b:89:ef:a8:1d:03:f3:7a:8e:63:
3d:41:c6:54:2a:74:e3:24:67:20:a1:17:8e:09:b4:df:19:a2:
13:c1:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org