Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2_wJRF9M4h8h6OGpGhGO2aWbpKU.roa
File: 2_wJRF9M4h8h6OGpGhGO2aWbpKU.roa (raw, json)
Hash identifier: D0joVLoN++lzF7RzbbOLFygUqLjdvljeB1l90gxcam4=
Subject key identifier: DB:FC:09:44:5F:4C:E2:1F:21:E8:E1:A9:1A:11:8E:D9:A5:9B:A4:A5
Certificate issuer: /CN=da828487183840993c01acf9d4005239484c42a0
Certificate serial: 01856F42C451EA5FFFAF130FA349311FAF2D
Authority key identifier: DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2_wJRF9M4h8h6OGpGhGO2aWbpKU.roa
Signing time: Sun 01 Jan 2023 21:35:24 +0000
ROA not before: Sun 01 Jan 2023 21:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47950
IP address blocks: 176.105.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c4:51:ea:5f:ff:af:13:0f:a3:49:31:1f:af:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da828487183840993c01acf9d4005239484c42a0
Validity
Not Before: Jan 1 21:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbfc09445f4ce21f21e8e1a91a118ed9a59ba4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:42:f5:77:b4:92:af:01:0e:b4:e0:c9:9f:
80:46:33:ad:0b:5f:3c:a1:e7:e8:b1:55:3b:f7:48:
b7:66:ef:0b:9d:4b:9a:0a:77:b7:e9:14:1d:eb:01:
59:53:43:9c:25:5b:8c:31:7b:e1:53:ba:00:9f:0f:
57:e5:bd:80:0e:80:71:16:a7:e4:e1:92:9d:9c:9b:
67:93:0d:b4:d3:1f:ec:b7:2b:b0:f0:33:bd:2b:4f:
ef:c1:10:8a:49:e8:3d:b5:29:66:63:a4:fe:4e:56:
4a:48:ef:36:09:b3:48:7d:f0:d8:9c:03:bd:d9:4a:
73:5a:ff:ce:b4:b0:34:53:6a:4d:7a:e0:16:94:d0:
d8:7f:b9:41:42:83:e3:8c:50:41:d9:1d:a2:ed:ac:
00:76:e9:af:b9:ca:fa:fb:96:39:e6:8e:c0:00:d6:
7d:9b:b2:7a:25:a2:0b:d6:87:90:6a:0f:72:6c:c6:
af:45:03:a4:f4:c5:9b:5c:ee:f8:1f:09:25:e8:ae:
98:6d:2d:ba:ab:1b:4c:7d:ac:b8:a3:b3:b6:23:9e:
c3:52:1f:12:c0:36:b1:61:49:de:78:4f:38:e1:77:
15:ef:c1:db:dd:66:b6:33:2c:e5:04:8a:fd:40:5b:
5a:38:fe:c2:0c:c7:63:2b:42:90:c3:34:6e:62:70:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:09:44:5F:4C:E2:1F:21:E8:E1:A9:1A:11:8E:D9:A5:9B:A4:A5
X509v3 Authority Key Identifier:
keyid:DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2_wJRF9M4h8h6OGpGhGO2aWbpKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:31:01:b5:20:fb:14:a3:d0:cd:d0:69:41:09:82:5c:24:ce:
76:ba:42:57:98:d8:27:65:bf:9b:35:50:71:f2:30:ea:3c:d9:
d3:03:da:f6:08:0a:71:23:66:19:27:c0:2f:e6:57:f5:28:37:
64:87:91:ad:43:2b:6f:b7:85:da:72:80:6e:09:ef:ee:c1:93:
a5:e8:c1:1d:79:80:29:f7:86:5f:cd:c3:24:ee:c3:59:8d:49:
67:12:9e:f8:59:f3:ef:c4:cb:e4:7c:21:90:cc:91:3c:bb:d6:
2b:2b:00:27:70:63:3d:58:e7:ed:32:f7:86:cc:ab:40:5e:b5:
e1:0c:e2:72:7c:c2:2c:f9:0e:ee:1e:34:4c:1f:d7:ee:b5:fa:
e6:7d:6a:0f:02:15:c4:ca:42:82:43:f0:42:8e:f7:ac:fe:6f:
f0:a3:6c:33:bb:ee:ce:90:81:64:36:6f:85:96:0a:d0:11:bf:
6e:e9:79:54:83:55:2c:f1:33:74:2a:b0:5f:57:5d:f9:b1:ed:
72:d3:fa:b1:7b:b0:ea:63:3a:de:ee:8d:ce:3e:0c:4c:af:59:
99:b7:a6:ae:cb:42:3e:eb:23:94:d2:97:35:b5:55:a5:27:cc:
55:ef:9c:7e:66:35:00:53:fb:86:fb:8e:c4:0e:15:e5:af:31:
d0:13:c6:74
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 3 07:18:19 2023 by rpki-client on console-ams.rpki-client.org