Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/O2ujmrLOYQhAZwTpfP4q2raCpuo.roa
File: O2ujmrLOYQhAZwTpfP4q2raCpuo.roa (raw, json)
Hash identifier: yIz46B9t7ZdPuCLVyvtj5tBMywZW6D37d3ar0zPXzEc=
Subject key identifier: 3B:6B:A3:9A:B2:CE:61:08:40:67:04:E9:7C:FE:2A:DA:B6:82:A6:EA
Certificate issuer: /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial: 018570707411858C8D39D0889D08B8574DEC
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/O2ujmrLOYQhAZwTpfP4q2raCpuo.roa
Signing time: Mon 02 Jan 2023 03:04:55 +0000
ROA not before: Mon 02 Jan 2023 03:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:74:11:85:8c:8d:39:d0:88:9d:08:b8:57:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Validity
Not Before: Jan 2 03:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6ba39ab2ce6108406704e97cfe2adab682a6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:07:96:6c:f3:da:26:e0:9e:b0:63:46:4b:
6a:c9:3c:ea:30:64:99:5c:38:85:5e:88:94:2e:c2:
7b:f8:a0:1a:3b:88:b5:95:e8:0a:4d:11:1f:27:95:
d1:9f:86:aa:f3:7a:85:3e:f2:a3:dc:3d:d9:2a:dd:
b3:c8:cb:11:e4:74:b8:6d:47:fd:d4:97:90:a6:23:
79:ef:f7:51:f6:ac:b2:86:c7:3c:a0:c4:f5:9e:d2:
20:ae:7b:36:41:30:de:1a:26:4c:6a:43:a8:64:17:
a7:07:73:a6:31:11:a0:20:2b:2f:7a:23:03:fc:37:
44:d4:0d:e5:6d:c4:a3:b0:c8:3b:09:5e:a5:6e:17:
42:0f:eb:be:22:fe:e3:dc:5b:51:c3:46:a8:4e:09:
e5:a9:31:45:f9:8f:af:2c:01:37:1b:d4:f9:bc:40:
e2:ee:4b:3e:53:4b:12:71:d6:11:70:f3:dd:d6:39:
6a:aa:8a:e9:f3:a8:d2:d4:3e:7b:6e:8d:43:62:76:
37:cc:4a:1f:27:95:c3:c0:0b:3a:1f:b3:6e:92:8f:
1a:c5:f6:0b:45:00:bc:ca:31:2b:22:9a:33:40:68:
e8:af:98:cf:4c:7c:c3:c8:61:d5:77:cf:c9:15:1d:
ff:0b:09:19:4b:7b:bd:c3:28:6a:75:27:81:2e:e1:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6B:A3:9A:B2:CE:61:08:40:67:04:E9:7C:FE:2A:DA:B6:82:A6:EA
X509v3 Authority Key Identifier:
keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/O2ujmrLOYQhAZwTpfP4q2raCpuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5a:b0:99:8f:e4:94:61:00:22:e1:f9:52:58:0a:5d:01:62:
70:d7:76:6b:24:8e:63:c2:08:b5:40:1c:47:34:74:82:a7:58:
e2:0f:e8:b8:5f:5c:88:7c:96:aa:48:f6:f7:30:e0:85:13:ae:
1b:32:7f:42:f1:44:59:dc:e2:d4:50:69:db:72:a5:f3:57:2c:
a8:e6:1e:85:15:7b:d9:4b:99:08:5f:b7:36:89:14:0b:ef:f3:
b5:68:1e:9c:93:f4:bc:ed:c1:ba:4b:8a:a9:ef:ed:15:40:71:
42:2e:f0:06:6a:d2:9f:b0:30:9a:72:13:ff:37:fe:97:ad:0c:
49:9a:d5:22:72:3c:1f:05:ab:db:54:be:96:07:20:f3:b5:86:
87:9a:d3:7f:80:29:d5:14:37:e0:ca:de:31:8e:51:3f:7d:ed:
a8:70:cd:ad:eb:4e:8c:57:14:6d:f1:cb:5f:bf:5f:be:9b:71:
ae:ab:ff:ea:fb:e0:80:58:4d:01:62:49:e2:68:f0:51:ee:7f:
9e:b5:d6:8f:f9:6a:a4:6d:ba:80:65:d3:1a:c4:e9:13:12:c1:
17:6d:1f:ba:88:f0:60:ef:69:f3:4a:b2:46:f5:88:18:67:8e:
5a:3f:4e:54:18:18:10:dc:44:97:67:2e:97:ea:c2:62:c1:84:
d2:e0:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 10:53:29 2023 by rpki-client on console-fra.rpki-client.org