Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1DCmdt4TVhFJxH_8FL-OEHENV-Y.roa
File: 1DCmdt4TVhFJxH_8FL-OEHENV-Y.roa (raw, json)
Hash identifier: zedkthkF8vrYmC9tzF9pYSZUsBv/s8Z8SANJJpYX9QQ=
Subject key identifier: D4:30:A6:76:DE:13:56:11:49:C4:7F:FC:14:BF:8E:10:71:0D:57:E6
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E7903FD55AB303A7A5317C5CBDF0696
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1DCmdt4TVhFJxH_8FL-OEHENV-Y.roa
Signing time: Sun 01 Jan 2023 17:55:02 +0000
ROA not before: Sun 01 Jan 2023 17:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12129
IP address blocks: 176.111.221.0/24 maxlen: 24
147.189.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:03:fd:55:ab:30:3a:7a:53:17:c5:cb:df:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d430a676de13561149c47ffc14bf8e10710d57e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:19:18:e7:15:4a:98:50:de:05:5e:f3:16:f6:
8c:5b:b0:03:11:78:35:fa:bc:a1:24:73:fb:7f:8c:
b7:4a:dd:a8:66:41:11:1c:a4:12:8d:40:f9:9b:cb:
69:42:40:c0:0e:91:55:7b:bb:91:7b:cc:29:ea:6e:
1a:03:25:e0:4b:41:a4:8f:b2:3d:71:53:67:69:20:
33:25:93:2a:0d:10:ec:50:66:58:e7:8e:16:ea:01:
bb:00:b5:53:8e:ea:fc:39:37:cf:f1:14:bc:24:74:
38:12:62:3a:12:e4:90:0a:07:7c:fa:b3:18:72:3f:
db:98:b6:f6:73:ca:63:a5:01:33:f1:3b:63:41:28:
8b:d3:88:0a:c1:1c:69:5d:04:78:17:68:85:0e:f5:
ce:3e:1b:37:28:00:de:07:f1:d7:bc:72:6c:87:9a:
f0:e7:82:db:fe:04:36:78:61:e7:7f:d9:8a:fd:9c:
0d:9f:3a:9d:63:39:31:82:49:d1:1b:99:cc:ab:23:
f2:3f:0e:8f:14:07:55:3a:fe:28:4f:32:9d:cd:21:
07:c2:a2:16:5e:67:30:d5:0e:61:9e:d7:90:e8:47:
c0:2a:9f:6b:4b:1d:30:97:f4:77:13:8e:58:35:ea:
4f:34:df:82:25:8e:91:43:ee:63:53:a6:06:d2:41:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:A6:76:DE:13:56:11:49:C4:7F:FC:14:BF:8E:10:71:0D:57:E6
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1DCmdt4TVhFJxH_8FL-OEHENV-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.140.0/24
176.111.221.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d5:89:9a:d4:dd:97:50:c4:d3:3a:96:01:d1:af:5f:80:a1:
07:be:8d:65:f4:97:ad:e4:5c:80:70:d8:16:b8:b0:8b:ae:9c:
4f:9f:1d:43:36:69:6c:0f:0f:e9:cb:4b:41:06:62:65:b0:78:
e4:56:bf:36:ae:89:18:44:a5:af:cd:9b:b5:13:77:7b:d2:d8:
e1:6f:f4:5b:8e:1c:8d:8b:17:9e:de:15:94:8b:d3:07:02:4f:
08:78:90:4d:f1:e7:06:a1:8c:89:ee:32:24:d0:6b:33:a2:92:
bf:f6:9b:43:e0:e0:17:a8:2e:7d:65:07:c0:54:3d:d0:02:06:
1f:ae:9f:59:c5:80:e9:bb:62:89:aa:65:40:ac:d5:f1:50:24:
87:78:b3:b2:ba:b5:26:d0:b6:2c:41:58:91:db:74:45:07:96:
26:25:1d:3e:00:e4:bd:af:99:c5:aa:22:5a:57:b8:eb:27:8a:
f7:37:08:54:86:c8:65:e1:bf:da:6d:2c:5a:06:e9:fe:48:bc:
34:7e:8a:6d:20:2e:a3:70:9f:18:ce:22:0d:f7:d8:9c:e3:57:
95:95:c2:f8:3c:34:1a:c5:e6:dc:eb:06:79:77:cd:97:2b:e2:
8a:27:c5:e2:ea:c9:57:37:b9:84:79:bd:a5:bf:f7:48:82:cc:
f6:0c:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:26 2024 by rpki-client on console-fra.rpki-client.org