Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/HOxG3ZFNMaVe4zkut6UHzwCTVCU.roa
File: HOxG3ZFNMaVe4zkut6UHzwCTVCU.roa (raw, json)
Hash identifier: slQXWn9piNXNZSgdMRvjgkJcKirfF84EMGYk2lGwmts=
Subject key identifier: 1C:EC:46:DD:91:4D:31:A5:5E:E3:39:2E:B7:A5:07:CF:00:93:54:25
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 018D12E1A66511DA6739A5CCBD1CDB9DBFE3
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/HOxG3ZFNMaVe4zkut6UHzwCTVCU.roa
Signing time: Tue 16 Jan 2024 15:26:34 +0000
ROA not before: Tue 16 Jan 2024 15:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41743
IP address blocks: 176.115.136.0/21 maxlen: 21
176.115.136.0/24 maxlen: 24
176.115.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 17:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:e1:a6:65:11:da:67:39:a5:cc:bd:1c:db:9d:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jan 16 15:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cec46dd914d31a55ee3392eb7a507cf00935425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:a6:d2:c9:ed:38:bf:64:3e:ac:31:19:bb:
3c:5a:34:2f:97:be:ef:38:97:4b:85:6b:88:aa:7b:
4c:02:34:1d:59:bf:aa:d2:79:6c:2f:95:1c:a6:70:
94:21:37:f8:18:a7:51:a7:f5:6f:bf:1c:1e:2c:ca:
3b:fb:c6:14:76:92:ec:a0:4e:ce:85:4a:73:20:20:
01:50:5f:70:2c:d1:10:5f:fc:e4:05:f4:10:98:86:
6b:bd:7d:a7:6b:6a:0b:30:50:33:6c:2c:d7:d8:ea:
c5:35:2e:c5:8f:cb:39:7d:b0:70:91:4d:7f:ff:fd:
be:df:b1:7d:f6:80:13:b6:18:3c:6b:22:ff:1e:28:
04:2a:e8:49:8f:ba:a0:bd:8b:7f:27:94:7b:a5:c4:
d9:09:68:eb:33:5c:a0:88:57:9e:17:52:d8:00:67:
fb:c9:63:76:87:82:d3:e5:b2:ea:4b:cb:da:e3:5f:
05:de:b3:09:9f:aa:94:3a:db:1a:b5:a7:bf:5e:eb:
23:3c:15:49:48:f5:c6:5b:85:07:9d:08:77:22:96:
11:9e:7a:9b:67:31:e8:84:10:1e:14:cf:98:a6:20:
cd:27:cb:d5:44:21:d1:f7:2a:58:ce:56:92:08:d4:
89:77:8c:01:70:10:c1:8e:26:e0:dd:e5:c7:e5:d2:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:46:DD:91:4D:31:A5:5E:E3:39:2E:B7:A5:07:CF:00:93:54:25
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/HOxG3ZFNMaVe4zkut6UHzwCTVCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.136.0/21
Signature Algorithm: sha256WithRSAEncryption
89:1f:06:5d:59:de:7f:db:19:60:d8:78:c7:94:d3:6b:de:4e:
04:94:90:4f:a1:b7:fc:69:7c:9c:e5:4c:02:ed:8c:23:e2:a1:
c2:62:26:38:9a:94:3a:d7:33:c2:02:b0:d4:8b:3c:30:ca:26:
24:f8:24:f8:99:b9:87:b7:9f:03:e7:51:d6:08:ff:50:22:0b:
77:cf:e0:9d:e6:d9:da:a2:25:54:f5:0b:92:ab:b0:4d:0e:30:
58:e5:b3:6f:4e:05:d9:d7:a7:4e:e2:88:b4:b5:01:08:7e:1e:
2f:ed:84:d4:0f:1d:76:33:d0:d6:b0:32:3a:4f:74:b6:27:7c:
9f:9a:65:6a:94:8f:14:c0:e2:b5:b9:81:46:63:3d:82:ae:c8:
b2:d8:11:28:0c:ee:52:8f:40:3e:1c:78:42:56:32:27:50:c6:
f2:10:2d:d7:23:eb:2e:0f:e0:b6:c9:11:9f:ce:16:4a:29:aa:
29:d2:8d:8f:c1:b1:bb:23:c0:8b:6d:5a:39:96:47:26:86:b1:
29:78:6d:14:83:43:31:75:3d:b2:47:c5:65:97:70:04:55:b3:
ad:ff:29:d4:74:2a:89:42:fb:58:3f:17:91:c2:25:46:b6:59:
45:8d:24:e0:f3:d8:99:8c:da:94:fc:db:55:60:f2:cf:a0:f4:
5c:f3:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:58 2024 by rpki-client on console-ams.rpki-client.org