Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dw_OPT_ZUN03iWaOU7nAD65Ttk8.roa
File: dw_OPT_ZUN03iWaOU7nAD65Ttk8.roa (raw, json)
Hash identifier: eYLLhZ28PjjyKbd0thqWfoIipMlTLGAcbF+xRg7W6jc=
Subject key identifier: 77:0F:CE:3D:3F:D9:50:DD:37:89:66:8E:53:B9:C0:0F:AE:53:B6:4F
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01856D5CF1E30F5E025D2175D1C61ED6644A
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dw_OPT_ZUN03iWaOU7nAD65Ttk8.roa
Signing time: Sun 01 Jan 2023 12:44:45 +0000
ROA not before: Sun 01 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39700
IP address blocks: 176.74.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 10:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f1:e3:0f:5e:02:5d:21:75:d1:c6:1e:d6:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 1 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770fce3d3fd950dd3789668e53b9c00fae53b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:eb:84:2c:88:31:87:64:22:35:66:df:65:
85:9d:d9:bc:9a:ef:c8:06:e0:09:b0:eb:fb:b5:01:
05:73:bf:05:d6:a6:9d:cf:c8:99:34:a2:c1:6f:47:
5c:06:6e:4d:69:c3:6a:ec:cf:61:bd:da:33:e3:d8:
9e:14:96:14:9d:84:f4:09:e2:c3:c5:93:94:04:56:
d7:5e:38:cc:40:ca:94:2d:8d:0a:8d:28:6a:49:7e:
fa:f1:00:4d:6f:e3:44:5f:f1:1b:eb:bf:86:dc:bc:
8c:59:d7:ac:e7:63:0d:55:f8:b3:4c:60:e2:55:4a:
58:36:ba:99:9c:0b:9d:94:18:80:ca:35:a4:51:36:
c4:ca:4e:e8:93:f4:5a:84:2f:d9:bc:94:a8:80:d4:
0f:8f:af:4a:f4:f7:25:08:ea:e6:45:57:44:77:39:
0a:c4:d3:34:05:a3:10:64:d3:06:58:13:a6:5f:60:
49:7f:da:f1:8f:33:d8:de:bb:83:ca:b2:18:e7:fc:
d9:8c:54:2e:fa:92:1a:41:0e:86:3d:fd:05:c0:74:
2a:b6:38:e9:dd:b6:b5:bd:cf:2d:2a:cc:a0:b1:2d:
d7:4a:5b:53:52:83:57:2d:67:6e:e8:f8:02:57:26:
d0:5b:dd:50:be:82:85:6d:40:a2:e6:f8:a2:33:33:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:CE:3D:3F:D9:50:DD:37:89:66:8E:53:B9:C0:0F:AE:53:B6:4F
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dw_OPT_ZUN03iWaOU7nAD65Ttk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.224.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e5:76:19:44:ce:64:f3:c4:6d:d6:2f:51:f0:39:74:18:06:
cf:3c:19:24:76:d8:fc:70:05:29:af:05:88:cf:36:90:6c:12:
45:b4:ab:41:43:c0:52:b7:f2:ed:42:29:2f:19:5f:1f:0e:1c:
52:95:32:68:d3:28:39:06:20:36:c7:a8:a2:92:15:61:19:ff:
03:37:01:82:70:96:bd:0b:cd:97:46:cf:45:7b:ab:c0:4b:72:
c8:be:1a:8e:d6:c2:96:0a:3c:e7:fa:f7:e4:c0:58:37:c0:6a:
0e:32:02:12:20:c8:14:58:30:f7:af:a8:8a:32:94:5f:80:b8:
d0:ce:25:c9:1d:b3:d0:33:e2:9e:cc:9f:d8:ce:e7:c0:ee:b0:
94:25:bf:aa:d1:f7:54:e2:33:0a:df:04:c3:07:58:48:2a:6e:
30:b0:ab:b0:8a:73:81:15:97:14:39:71:87:60:5e:4e:cf:f4:
c5:d1:44:e5:4d:35:d7:0b:d1:46:d3:b0:7a:a3:ff:ea:04:ce:
56:93:59:88:c2:eb:34:1d:47:bc:2b:47:bd:b5:93:47:86:49:
d1:f5:ff:4f:53:8e:a2:78:13:8e:dc:de:ba:ec:a7:c3:56:67:
aa:d7:e2:26:dc:cb:bc:c6:07:ab:0d:a2:7b:a3:3d:df:19:d7:
49:1f:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org