Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/DHwdS2xqlz3kiyncdjy0lk1Npxw.roa
File: DHwdS2xqlz3kiyncdjy0lk1Npxw.roa (raw, json)
Hash identifier: caJTcx2xCYmo+lDmxIadENvVj1RAsOqaHmv/hUTLayY=
Subject key identifier: 0C:7C:1D:4B:6C:6A:97:3D:E4:8B:29:DC:76:3C:B4:96:4D:4D:A7:1C
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DCF0CD0CEAFF19BBB556929A991C3
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/DHwdS2xqlz3kiyncdjy0lk1Npxw.roa
Signing time: Sun 01 Jan 2023 23:14:51 +0000
ROA not before: Sun 01 Jan 2023 23:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204348
IP address blocks: 176.236.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:cf:0c:d0:ce:af:f1:9b:bb:55:69:29:a9:91:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7c1d4b6c6a973de48b29dc763cb4964d4da71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:c3:3e:b4:ba:03:4e:3b:82:d5:66:de:b1:
77:71:43:8e:4a:f3:8f:00:85:4d:04:ec:fd:7b:a5:
9e:eb:bf:3f:f9:de:6c:c0:98:f1:28:28:34:e2:59:
42:9b:4a:f8:ab:d6:81:14:1c:05:a0:40:e2:73:38:
c5:1e:91:91:9f:79:76:7c:d2:35:59:79:9d:d8:dc:
a9:f0:ba:d4:da:09:46:16:3c:95:e5:97:2e:db:48:
a2:20:42:09:15:68:53:fa:7a:de:4a:fd:05:91:ce:
79:f9:ec:18:7e:cd:68:5b:ec:06:33:02:fc:58:1a:
77:8e:d3:73:46:e6:7a:5b:21:6f:4f:2e:bd:74:d5:
e1:30:8c:02:e8:cd:91:62:7c:e6:f9:d0:d8:bf:61:
be:ff:dd:8d:7f:5c:f9:28:1f:37:dd:96:f4:43:61:
ed:7d:3e:1f:6a:c6:5a:ee:89:bb:fb:a4:58:6c:dd:
a6:f0:ea:f3:9c:0a:cc:1c:54:cc:f2:ed:f2:e3:cc:
7a:fb:23:cb:a8:da:12:f5:ce:d0:31:f7:f5:b3:b8:
fc:aa:b5:ce:0b:e6:d2:18:7c:8d:9d:eb:34:a1:f4:
93:b6:97:b8:24:27:df:fa:b8:88:28:be:16:71:77:
67:d4:31:37:d7:63:70:a0:6c:c6:d6:59:cc:e4:4b:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7C:1D:4B:6C:6A:97:3D:E4:8B:29:DC:76:3C:B4:96:4D:4D:A7:1C
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/DHwdS2xqlz3kiyncdjy0lk1Npxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.236.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6b:c2:bf:63:94:98:d6:76:74:69:90:64:12:2b:71:8e:c5:
f9:19:47:18:6a:04:77:5b:67:b2:d9:b1:26:c6:01:58:af:78:
79:7c:7d:03:4c:90:34:40:36:ba:42:05:5c:ac:2f:62:59:6a:
ea:ce:40:91:40:5c:9c:d5:be:62:10:8b:7c:21:74:e8:64:c1:
0b:1b:8d:05:79:00:cc:b1:1c:07:cd:aa:3c:6a:0a:b8:5b:b3:
26:5e:d1:37:0f:a3:e0:a6:6c:f4:64:d0:c4:9d:63:7f:7e:a0:
db:9d:23:36:7c:1f:bc:a7:03:73:9e:b5:a5:09:2c:6e:a3:28:
19:2c:fe:a5:73:1d:02:63:86:e0:e0:59:43:dd:bd:9b:1d:1c:
78:14:2c:2c:55:1d:68:13:ed:88:b1:00:27:6f:67:d2:97:d0:
da:51:3a:e9:69:28:4b:6a:ca:52:de:23:cc:45:16:ff:4f:8b:
67:3c:b3:42:66:ea:96:b4:29:50:49:39:88:fc:ea:e2:a5:11:
02:ec:66:5c:be:42:4b:e4:d8:80:f3:82:6c:88:cd:9b:e0:28:
bf:86:e5:83:0b:6f:33:e0:a1:27:ee:ee:1e:2c:35:9e:89:6a:
a4:d0:0d:4f:d1:1e:f1:9c:4a:56:4c:a6:83:60:17:74:52:46:
1a:0a:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org