Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/t7vXZxzH4m4QwZHRNkQyzhpB4m0.roa
File: t7vXZxzH4m4QwZHRNkQyzhpB4m0.roa (raw, json)
Hash identifier: iRGpTF2y7UnulDYfBJqTRadY/7v2rzS0bKsz5DGxPd4=
Subject key identifier: B7:BB:D7:67:1C:C7:E2:6E:10:C1:91:D1:36:44:32:CE:1A:41:E2:6D
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 01856EB927F6211CEB22A00B1E0F8B6DADEC
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/t7vXZxzH4m4QwZHRNkQyzhpB4m0.roa
Signing time: Sun 01 Jan 2023 19:05:06 +0000
ROA not before: Sun 01 Jan 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210097
IP address blocks: 176.98.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:27:f6:21:1c:eb:22:a0:0b:1e:0f:8b:6d:ad:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: Jan 1 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7bbd7671cc7e26e10c191d1364432ce1a41e26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:a4:74:57:e7:2f:34:bb:c1:16:6b:ec:42:
d5:cd:13:ec:86:bb:7c:0c:25:4a:fd:b7:fd:f1:24:
a3:98:99:e2:4d:76:a8:55:56:32:18:c8:7f:1d:e3:
3d:aa:b8:4c:e6:6a:8a:37:84:61:43:1d:04:ad:9b:
35:89:56:5c:d3:3f:51:ee:d0:70:a3:52:2f:8b:25:
62:07:95:c0:f0:b2:97:83:0f:fb:e8:93:3e:f5:b3:
71:a1:81:fe:71:fb:d9:e7:f6:8a:b5:da:a3:cf:cb:
86:3d:78:d0:06:86:4b:24:9d:f8:d1:c1:f5:ab:6e:
30:9a:cd:4a:c4:07:d8:da:33:af:b7:8d:29:81:c4:
c6:81:05:ca:a5:86:0a:ff:9f:c6:f8:36:74:ed:6b:
07:16:ea:b8:46:af:da:d2:cc:4e:7c:9d:7c:ce:9a:
40:e2:1d:b6:11:c8:5f:66:a2:01:b1:c0:76:e7:f0:
d1:d9:62:b7:e7:31:59:71:b4:ae:85:a4:5e:c0:b1:
d3:78:3d:a5:33:5b:12:78:60:65:12:a4:fc:77:8a:
37:08:81:4a:34:e7:22:2a:7d:07:5b:36:ed:d5:cc:
7c:ad:af:e3:a3:eb:6d:aa:ba:f0:9f:c6:d2:2e:18:
4e:f9:a6:a3:f3:f4:cc:93:f7:f6:d7:21:d0:49:be:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:D7:67:1C:C7:E2:6E:10:C1:91:D1:36:44:32:CE:1A:41:E2:6D
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/t7vXZxzH4m4QwZHRNkQyzhpB4m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.221.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ea:58:3d:50:5b:d2:a2:db:fe:41:0f:fa:5b:1c:7a:3e:7b:
21:ec:4a:c2:7c:1a:cf:45:57:c3:4c:88:e8:db:e4:96:e0:a5:
c7:b1:af:09:e1:08:98:a7:e4:76:55:83:e8:ef:20:53:db:92:
0a:a0:37:c9:08:07:2b:29:71:01:b3:59:76:e7:3c:77:0a:d0:
72:ea:3c:1a:28:b2:42:1d:d0:56:14:ab:3d:a8:f2:99:d3:77:
7f:55:08:d4:fe:e1:22:04:ea:4b:99:b4:2a:ad:dd:74:71:69:
69:09:5a:f3:bc:96:50:5e:67:6b:7a:a9:96:eb:3e:cc:11:e9:
bd:cf:e6:e1:ef:4d:3f:60:df:82:6d:f0:9f:f3:af:c4:0c:13:
5e:63:4e:d8:69:ee:53:49:be:b2:81:e1:f3:83:f7:e9:50:35:
d9:38:0d:cc:6e:32:f4:1a:c2:46:60:87:4e:fb:10:85:84:f4:
a5:40:95:f2:8a:48:f3:a4:9e:4a:96:55:5b:bd:f5:de:eb:28:
14:45:3a:e8:80:7d:7d:f3:7f:59:7c:77:f1:11:f0:cf:50:60:
7c:e3:0d:44:7a:3c:08:2e:0a:d0:3f:69:c7:b9:91:ce:de:1c:
7a:c3:11:c7:d0:eb:e0:30:17:fb:2f:01:dc:7a:6b:9e:9c:a5:
ea:d0:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org