Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/3JqMZlyDMexkJWeOv7ch_Svr8wc.roa
File: 3JqMZlyDMexkJWeOv7ch_Svr8wc.roa (raw, json)
Hash identifier: yMzZkIimPhJo8Mjpl+BmrC7S9Vu+8C/8ZRmv0IJFbDA=
Subject key identifier: DC:9A:8C:66:5C:83:31:EC:64:25:67:8E:BF:B7:21:FD:2B:EB:F3:07
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 01856E142F29ABF9DD1D2ABECDE63D6A0AD0
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/3JqMZlyDMexkJWeOv7ch_Svr8wc.roa
Signing time: Sun 01 Jan 2023 16:04:54 +0000
ROA not before: Sun 01 Jan 2023 16:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210808
IP address blocks: 176.100.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:2f:29:ab:f9:dd:1d:2a:be:cd:e6:3d:6a:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jan 1 16:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc9a8c665c8331ec6425678ebfb721fd2bebf307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:75:59:28:41:d9:24:ac:09:67:ce:8a:89:
d9:2e:55:e6:8e:aa:d2:77:63:fe:2c:4c:3a:dd:53:
31:cf:4e:d0:a4:3a:b5:06:0c:48:7a:8c:97:1a:99:
d8:3d:eb:fb:29:8a:de:3d:5f:5a:0b:aa:55:ab:52:
f7:74:6a:a6:fb:b5:9c:ea:e7:69:79:03:b8:1e:47:
73:37:c2:f9:51:37:69:cc:a0:d0:2a:1c:3b:84:d0:
5a:1c:7e:4e:ed:0c:20:8c:24:47:86:11:a5:4e:c2:
31:80:b3:32:f5:0d:cb:cb:8d:f3:6d:2d:ab:6e:19:
5f:51:fb:cf:f4:c4:97:73:d1:1d:ab:00:0f:f3:b6:
87:44:c7:39:ff:13:d7:77:52:79:0c:77:79:a7:da:
08:28:36:94:d9:42:35:e5:4d:ee:88:2d:52:62:f0:
29:40:90:a1:ea:58:01:1a:8d:1d:a9:67:4a:bf:f7:
7b:d6:dc:7e:13:bc:6e:64:44:ea:3c:ff:fe:b8:2d:
e0:5c:d6:5c:a6:80:20:3f:1b:23:6b:72:f2:52:5b:
d3:e6:63:4b:d1:a8:06:d0:b6:0b:02:ad:5c:4b:86:
ea:10:15:6c:b2:d0:d3:8d:b3:cd:1f:8b:0f:88:1c:
a0:1a:3e:73:48:d0:16:ad:50:cb:8f:e2:d9:dc:2f:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:8C:66:5C:83:31:EC:64:25:67:8E:BF:B7:21:FD:2B:EB:F3:07
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/3JqMZlyDMexkJWeOv7ch_Svr8wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:79:35:2c:f6:40:e1:99:fd:b4:ef:83:ba:b6:17:52:3d:eb:
1e:54:ef:07:8a:d5:86:bb:e4:3a:51:9f:0d:02:6e:4a:48:6c:
9a:96:10:44:aa:ca:7a:12:10:0e:b2:a0:e6:c7:52:09:4a:b8:
1e:30:98:ba:e3:52:76:77:ea:2d:03:8d:09:be:23:cc:b8:fd:
e3:1e:03:df:c4:e4:0b:6b:68:0a:b7:3d:37:b8:be:c6:86:6b:
57:b4:76:b1:1c:0c:ef:6e:b9:db:b0:be:c2:d0:1b:48:0b:a7:
5f:79:1f:10:c3:d4:17:61:3e:2c:f7:8d:db:0f:16:f7:8d:81:
0d:33:a4:54:bc:f1:5d:51:34:17:0e:42:26:33:57:0b:d5:35:
01:77:63:cc:ff:40:01:4e:04:b6:d5:ec:51:80:de:96:e9:f5:
0e:6f:83:6f:0a:66:60:33:6d:f6:50:f5:42:fd:f1:11:d0:e9:
33:89:4d:cf:af:4d:da:bf:10:b0:ce:45:58:93:00:67:62:91:
09:e1:f6:70:4b:f1:ba:8d:9c:3e:bf:cf:25:fe:19:15:6c:0d:
e7:9e:f8:f6:f2:c1:fe:07:c4:e7:59:37:b7:72:23:71:52:a3:
e0:99:f5:94:9a:ca:0a:5c:e4:b9:c6:19:7b:ac:48:9a:9d:81:
9b:8e:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:40 2024 by rpki-client on console-ams.rpki-client.org