Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/vQqwXzzLxjAFrWcyp2C8qQnhFOs.roa
File: vQqwXzzLxjAFrWcyp2C8qQnhFOs.roa (raw, json)
Hash identifier: IBsTeOlat8i0D3bKFJVhOkM+JVkLUTMiVeOsizPrG88=
Subject key identifier: BD:0A:B0:5F:3C:CB:C6:30:05:AD:67:32:A7:60:BC:A9:09:E1:14:EB
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 01856CAF4ECBFC93911417316E845B59EC17
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/vQqwXzzLxjAFrWcyp2C8qQnhFOs.roa
Signing time: Sun 01 Jan 2023 09:35:06 +0000
ROA not before: Sun 01 Jan 2023 09:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24577
IP address blocks: 176.120.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:4e:cb:fc:93:91:14:17:31:6e:84:5b:59:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jan 1 09:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd0ab05f3ccbc63005ad6732a760bca909e114eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:5a:19:41:a2:a8:2a:f9:a8:77:38:5e:47:
4d:3e:69:85:f9:9f:78:2c:f1:cb:0f:1b:1c:24:e2:
dd:91:38:3d:6f:18:07:35:b8:7d:79:f1:1b:e6:9f:
29:41:63:10:58:48:42:bb:6d:c4:84:e5:a5:87:51:
0b:0e:26:92:f5:29:9c:01:7b:a0:1d:16:3e:fd:57:
79:7b:22:bf:79:1a:50:5b:b6:b4:d3:7c:93:22:7f:
40:e2:d2:ec:b2:e2:40:a0:7c:7a:2e:05:10:67:4c:
4a:02:c7:e2:26:68:d1:72:96:d6:1e:25:b6:71:fc:
19:37:05:4a:f9:4d:58:c3:ea:8e:8c:1a:c6:89:5c:
2d:37:e5:31:d4:0b:4a:15:1e:5f:34:08:0c:4c:56:
dc:fd:00:a5:8d:88:a4:2d:35:ac:83:fe:62:68:f7:
13:b5:46:33:23:6d:2f:5f:a5:c0:09:e9:ba:3d:b6:
3a:b3:ce:19:d0:76:8a:60:98:50:17:77:1d:5d:ff:
53:26:d5:6a:93:48:e5:f7:ab:44:17:fb:97:8f:45:
6a:d0:4f:14:7b:06:ed:27:20:90:7c:0e:ea:c2:7b:
ed:d0:24:0f:9f:fa:0a:89:69:af:49:a8:0b:5d:c5:
da:55:0f:39:e7:73:60:9c:7f:7e:a0:6c:3e:d4:4b:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:B0:5F:3C:CB:C6:30:05:AD:67:32:A7:60:BC:A9:09:E1:14:EB
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/vQqwXzzLxjAFrWcyp2C8qQnhFOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:ec:dc:39:75:69:22:20:7c:7d:1c:9f:b9:35:be:f2:4d:81:
76:c4:8d:3e:0f:75:0a:90:ed:e4:4a:0e:72:86:e8:9f:09:01:
66:a3:5a:63:9e:61:c7:01:a2:cd:12:f7:8f:24:3f:5e:e8:e8:
38:e2:cf:0a:71:6a:68:d3:51:da:f6:69:bb:66:30:57:95:bb:
fb:17:47:dd:a9:61:e8:df:49:0d:31:0b:7f:e4:e9:df:3f:37:
46:71:44:93:73:73:42:c4:71:45:3f:e3:c0:dd:8e:d6:ee:17:
3f:68:11:96:8d:b9:12:5b:2b:8e:c9:08:ec:97:30:14:f2:2a:
a3:14:57:75:ea:fa:be:38:55:3f:25:de:a9:c1:0e:69:f2:c3:
e9:f0:75:9d:c1:84:c8:a5:07:c1:ea:10:99:6e:ba:c6:74:e2:
16:af:67:26:69:76:e1:b3:6a:b5:95:49:4e:e7:bf:7d:ac:fc:
8f:8b:06:02:a9:9c:49:e1:be:d6:b5:da:e5:2f:90:fc:f6:9b:
55:ff:05:44:92:f1:b4:31:c5:2c:34:5f:0a:0a:2e:0b:c6:b4:
88:ac:b8:ec:70:6e:58:6d:b2:59:27:d5:95:bf:9b:88:53:51:
ca:0c:26:f5:42:f7:8b:16:9e:4a:f5:fe:9e:1e:61:6b:62:dc:
57:24:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:27 2024 by rpki-client on console-ams.rpki-client.org