Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/HdJ2HIqLmqlNOrPpXRnvwhyvZj0.roa
File: HdJ2HIqLmqlNOrPpXRnvwhyvZj0.roa (raw, json)
Hash identifier: i0jFdgaTRsuKDOb3pewJWQUi74OyeS87az0klzMADpo=
Subject key identifier: 1D:D2:76:1C:8A:8B:9A:A9:4D:3A:B3:E9:5D:19:EF:C2:1C:AF:66:3D
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 018572558542969B1ADDF5C854F458FE52EC
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/HdJ2HIqLmqlNOrPpXRnvwhyvZj0.roa
Signing time: Mon 02 Jan 2023 11:54:45 +0000
ROA not before: Mon 02 Jan 2023 11:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21219
IP address blocks: 176.105.168.0/21 maxlen: 21
176.105.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:85:42:96:9b:1a:dd:f5:c8:54:f4:58:fe:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 2 11:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd2761c8a8b9aa94d3ab3e95d19efc21caf663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:3b:dc:19:b3:ac:63:b5:46:97:64:7e:31:
d0:c3:73:a8:92:c0:2e:77:78:a8:24:f6:df:42:8c:
01:6c:a5:cc:29:d2:ce:d9:46:0a:04:f1:ba:56:d1:
fa:33:3a:01:96:5c:3e:2e:b9:7c:eb:e1:9c:b2:50:
83:1f:32:a4:e4:87:31:ad:a1:af:47:54:fc:ab:c8:
da:4e:83:d5:92:67:f8:33:9f:0b:a4:8c:9b:88:12:
da:de:e5:bf:a2:e4:c3:42:a3:f8:3f:e3:67:2b:a2:
86:84:f7:d7:d1:db:4f:46:ef:4c:a6:c5:b2:01:39:
9e:67:93:80:af:92:18:15:9c:4e:b1:da:16:7d:fa:
18:cc:aa:ba:d5:aa:39:67:3e:e3:fb:c4:ff:12:2e:
11:9f:b5:9a:7e:da:cb:ce:59:0f:aa:12:dd:4d:1d:
5d:67:83:82:f8:06:ad:a6:cd:10:ac:68:63:d8:8a:
fa:63:6d:bb:80:38:74:2d:ee:ef:34:f4:88:59:f3:
e1:30:ac:a5:df:fc:72:79:58:3c:16:c7:74:85:8f:
cb:b8:d1:83:d8:41:2f:82:c2:da:ef:0c:cb:2b:96:
88:b0:6d:80:94:df:97:51:9a:e6:28:c7:fd:26:97:
aa:d7:0b:10:50:48:fe:c6:29:f1:76:97:a9:9e:6f:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:76:1C:8A:8B:9A:A9:4D:3A:B3:E9:5D:19:EF:C2:1C:AF:66:3D
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/HdJ2HIqLmqlNOrPpXRnvwhyvZj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.168.0-176.105.183.255
Signature Algorithm: sha256WithRSAEncryption
75:28:6c:2d:6e:d0:08:a6:d4:67:a6:66:b2:14:4f:c6:74:20:
72:dd:13:35:61:7a:71:c6:64:71:ff:3e:ff:cc:98:fa:da:5e:
7c:f8:ed:99:05:ff:f3:ca:b8:81:ed:61:c8:3a:da:53:a1:44:
ef:dd:c8:90:ea:21:4e:21:90:1e:80:11:18:4a:d3:9c:6a:0b:
72:01:04:67:19:44:f7:f2:95:03:32:2a:44:c3:63:03:ae:bf:
34:b7:c0:a4:0c:2a:6e:62:a1:a1:40:86:f0:61:56:b0:9e:40:
63:6c:ff:06:30:1c:25:74:6c:37:f5:3b:8a:74:8d:f5:22:81:
85:e6:a0:15:52:dc:68:53:32:bc:07:a5:30:5b:d2:ba:e3:62:
75:d2:f1:42:12:c3:76:7b:c0:ca:f3:e8:32:75:80:f8:f8:a8:
7a:3a:ec:a7:3d:50:c5:07:06:57:3d:c9:4b:66:34:26:38:92:
04:9f:26:95:69:6d:71:34:28:70:52:22:14:13:cc:44:a2:be:
59:95:6b:6b:d6:23:96:93:fe:2c:0e:33:db:73:86:18:b8:e6:
85:88:50:3d:77:49:23:99:20:79:4c:9c:a5:1a:74:35:79:e3:
0a:38:66:15:e0:d4:54:d6:d0:41:89:da:63:56:18:ce:f5:bd:
70:e8:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:28 2024 by rpki-client on console-ams.rpki-client.org