Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-JDZQFVsf-uYlhA3ebAQetJO73E.roa
File: 1-JDZQFVsf-uYlhA3ebAQetJO73E.roa (raw, json)
Hash identifier: daFWAs3SHdLBYng6YDL3q9K68UxnBk3FEf1ldljaZ/k=
Subject key identifier: F8:90:D9:40:55:6C:7F:EB:98:96:10:37:79:B0:10:7A:D2:4E:EF:71
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 0188770A6D28269A775560B89DF97C94015D
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-JDZQFVsf-uYlhA3ebAQetJO73E.roa
Signing time: Thu 01 Jun 2023 12:59:12 +0000
ROA not before: Thu 01 Jun 2023 12:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39700
IP address blocks: 176.74.224.0/24 maxlen: 24
2001:4cb8::/29 maxlen: 48
2001:4cb9::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Oct 2023 09:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:0a:6d:28:26:9a:77:55:60:b8:9d:f9:7c:94:01:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 1 12:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f890d940556c7feb9896103779b0107ad24eef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:47:cf:78:e0:11:f2:c8:78:31:b2:45:71:
11:f1:0b:f6:d7:cc:50:61:bf:29:aa:ee:6b:f9:be:
99:fd:c5:f6:b3:f7:a8:01:92:52:ce:9c:f0:1d:b9:
95:42:6a:ba:c5:b3:ca:2b:8e:23:7f:4f:42:ca:ec:
a2:cd:d6:8d:86:45:43:dc:bb:ec:21:5e:72:1b:30:
2c:f6:b9:c0:63:9d:86:8d:ec:78:b9:e0:5a:84:fe:
d0:8e:41:7c:01:49:8f:0b:27:a6:35:50:84:a0:71:
06:3e:8f:70:33:8e:f5:81:b6:a6:d6:4e:3c:42:6c:
66:8f:bd:4f:50:24:87:15:f5:40:1f:7c:5f:4b:4d:
1e:2a:ec:d3:9d:68:d4:fe:84:c1:4b:bd:6c:42:4b:
24:66:98:79:f9:fb:af:da:74:41:e0:a5:e3:44:69:
f2:a0:71:ba:de:4c:b5:b0:16:48:12:18:bc:33:fc:
7f:3d:3f:a9:72:ac:61:11:58:3d:3d:c5:e3:7d:0e:
f1:4e:8a:cc:6a:1d:42:86:fa:71:36:26:11:85:01:
b8:4c:c3:0e:ac:cd:7a:0c:a1:25:a4:b2:86:b7:14:
52:a0:b1:8e:f7:8a:a8:b1:ba:97:f1:70:93:b9:b6:
6a:cd:06:97:9e:da:ca:ff:01:e5:32:ae:13:aa:0d:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:90:D9:40:55:6C:7F:EB:98:96:10:37:79:B0:10:7A:D2:4E:EF:71
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/1-JDZQFVsf-uYlhA3ebAQetJO73E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.224.0/24
IPv6:
2001:4cb8::/29
Signature Algorithm: sha256WithRSAEncryption
3a:7a:bc:fd:ec:1b:b3:c9:5b:e8:a0:02:4c:53:29:30:4c:4d:
b4:62:03:7d:a3:46:ba:30:28:8a:09:08:1a:ad:59:5c:02:a9:
3e:0c:2e:58:c4:a5:a6:56:4b:ce:c5:02:0e:16:ba:d2:7d:bd:
5b:58:2c:7f:50:0a:60:d4:4d:9a:a8:eb:05:e7:77:19:5a:b1:
5b:c0:e0:0a:ac:00:d7:d5:d8:c1:b4:88:2b:5c:d7:0f:c1:9a:
b2:33:56:7a:3e:ec:50:d1:02:1e:80:f5:42:dd:93:4c:13:f1:
3c:f5:e5:7e:db:7e:13:c5:85:62:d5:31:bd:fb:98:6a:1a:86:
8b:94:62:6d:6d:c2:01:c3:5d:1a:bc:2f:c9:79:22:3d:29:23:
cc:f2:e9:55:5f:27:fd:2c:23:68:04:6e:60:79:e2:89:1f:2c:
2e:8a:9e:23:68:f7:31:b0:68:03:f5:3a:fa:93:de:6f:0c:76:
c0:40:54:10:3d:39:3b:b4:10:38:d5:e7:19:c4:02:55:db:d8:
91:a7:06:02:db:8e:4a:ef:4b:b6:02:e1:23:c7:93:01:79:e0:
b2:d3:06:00:33:d4:75:d2:11:df:4e:e4:bf:0b:c5:75:34:b1:
b4:9c:f0:86:49:20:1b:e5:7f:c5:31:0d:e1:ac:d6:28:c9:55:
fa:3b:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org