Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/nj8TdR06bOUId4MWvACRur4GM7E.roa
File: nj8TdR06bOUId4MWvACRur4GM7E.roa (raw, json)
Hash identifier: CTzuIQRVcoFN8+lrtPCz0GV6eqgXKxNvBU3x1XwKR3Q=
Subject key identifier: 9E:3F:13:75:1D:3A:6C:E5:08:77:83:16:BC:00:91:BA:BE:06:33:B1
Certificate issuer: /CN=da828487183840993c01acf9d4005239484c42a0
Certificate serial: 018B00ED755ECE7C772B68DEC9194E58BB1A
Authority key identifier: DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/nj8TdR06bOUId4MWvACRur4GM7E.roa
Signing time: Thu 05 Oct 2023 17:40:43 +0000
ROA not before: Thu 05 Oct 2023 17:40:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:ed:75:5e:ce:7c:77:2b:68:de:c9:19:4e:58:bb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da828487183840993c01acf9d4005239484c42a0
Validity
Not Before: Oct 5 17:40:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3f13751d3a6ce508778316bc0091babe0633b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:b3:cb:f2:58:86:20:45:87:f5:b3:6d:9e:
fc:32:48:b2:be:15:d3:e6:95:8a:9a:94:1f:36:1c:
da:12:73:f4:42:4d:d1:00:8e:27:21:74:8e:72:81:
1e:cf:ba:aa:75:6e:3e:98:ab:39:42:f0:6f:87:52:
fb:dd:7f:82:7f:46:74:2d:0f:cc:6f:11:bc:99:d1:
f4:14:b6:2b:db:6f:76:0f:6d:ec:e2:47:24:d8:c8:
5a:bd:1f:43:37:33:2c:c0:a3:9a:0c:74:e0:6f:32:
b0:68:b8:6b:c4:8e:53:76:e6:c3:f8:7c:cb:8c:17:
77:43:38:1b:b8:66:17:b5:89:a4:7d:9e:65:0b:ee:
a4:0e:be:d5:26:01:b2:9e:ca:f5:c0:7d:b7:7d:07:
db:a0:ef:45:52:af:df:45:3f:40:52:dc:bd:e7:2a:
aa:65:e5:58:27:4f:45:cc:86:67:36:2b:16:f8:60:
a6:6b:4f:95:5e:18:f0:77:ed:ab:a8:4c:4d:a8:d3:
11:4b:e0:87:5a:8f:21:c6:39:7f:f1:23:87:8b:4f:
f3:e3:5d:65:86:83:8d:ed:f2:59:d2:a3:1a:9e:ab:
93:d8:c1:25:6b:b4:6a:fb:b4:7f:fa:2d:6e:78:25:
a4:2c:31:3f:e2:7f:65:1a:00:b5:03:70:a6:b3:4d:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:13:75:1D:3A:6C:E5:08:77:83:16:BC:00:91:BA:BE:06:33:B1
X509v3 Authority Key Identifier:
keyid:DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/nj8TdR06bOUId4MWvACRur4GM7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
88:74:98:2d:46:c8:88:8d:95:a0:5c:94:da:3e:4e:01:50:34:
f2:97:90:d0:ec:87:d1:c5:0e:92:3a:f3:20:19:dd:a4:1f:7e:
38:27:0a:ea:64:e6:a6:d2:78:a0:85:73:09:58:71:8b:52:09:
10:89:62:f5:ea:4e:91:0b:ee:ea:2e:85:88:ca:30:46:dc:95:
a8:b5:d5:e8:7a:a2:2a:c4:26:32:3d:88:11:56:81:9f:2d:f1:
19:10:f7:20:b8:81:70:e4:3c:82:59:1b:9c:44:b1:46:64:40:
b8:46:82:f6:2c:cf:73:8e:20:c1:46:00:92:d4:5a:5f:83:4d:
69:f7:80:01:47:22:3e:da:e7:bf:04:4e:15:56:c7:3b:cd:57:
1a:11:3f:fb:44:8f:f4:cd:40:83:98:49:c7:6e:a5:78:6b:d2:
73:55:c0:aa:59:0a:f4:9c:96:c2:97:3e:f7:ba:05:4d:74:f6:
c8:7c:42:21:fb:cc:57:65:ff:57:8c:78:f5:70:f7:a6:2e:72:
dd:c6:2f:51:66:1c:95:84:70:29:a8:8e:2c:f4:de:d4:fb:5c:
87:1d:95:a2:4c:31:a0:a2:94:dd:6b:41:6b:ac:40:33:af:2e:
2e:a7:a6:e5:fb:93:30:b8:8c:07:99:52:d4:6f:54:3e:d6:0f:
b6:02:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:33 2024 by rpki-client on console-ams.rpki-client.org