Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/97-sm9wOdmaj663cFB1z81_Wg7g.roa
File: 97-sm9wOdmaj663cFB1z81_Wg7g.roa (raw, json)
Hash identifier: tDZF+vKg8knMna5pE2fLcPKciaXed1dpPeTwGEok6HE=
Subject key identifier: F7:BF:AC:9B:DC:0E:76:66:A3:EB:AD:DC:14:1D:73:F3:5F:D6:83:B8
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C78631FD89F74685C5F226FDBF8BA63
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/97-sm9wOdmaj663cFB1z81_Wg7g.roa
Signing time: Sun 01 Jan 2023 08:35:07 +0000
ROA not before: Sun 01 Jan 2023 08:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 176.105.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 11:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:63:1f:d8:9f:74:68:5c:5f:22:6f:db:f8:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7bfac9bdc0e7666a3ebaddc141d73f35fd683b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:28:d9:07:8a:a2:25:ca:ee:21:2b:55:53:
8d:86:66:16:6e:64:e5:ee:62:8b:77:37:61:63:d4:
12:80:62:7f:93:6f:86:aa:fc:ec:b9:5d:b8:e0:4f:
61:61:32:c7:da:50:99:c0:ee:40:12:c2:90:93:86:
2d:8f:0a:10:77:b5:8e:4c:f7:50:d1:94:7c:75:a6:
b0:fe:1c:64:ca:f1:38:64:8b:f1:b0:82:87:45:3d:
09:d5:30:53:e5:be:c1:c2:f9:eb:7a:7c:d5:59:a0:
21:f8:48:43:a2:d9:40:fb:45:f8:4f:7e:3b:02:0d:
72:b8:34:8c:d3:83:03:39:95:c7:b4:33:fc:0b:27:
29:cd:e7:f4:f1:00:a6:e1:bd:f0:93:86:ee:c2:98:
bf:56:6e:ab:5c:1f:13:32:db:1a:a5:cc:4a:25:81:
0e:95:9f:56:4b:10:d7:ff:7c:4c:45:42:ff:e3:ce:
f5:19:f2:3b:fc:6d:bc:80:ac:90:ae:aa:f1:c8:3d:
51:eb:c2:66:a6:2a:e9:f8:f2:4b:e1:5d:98:2f:df:
b4:86:53:b0:ff:7c:fe:b4:f3:1e:3d:86:a4:37:77:
59:ed:58:42:bd:1e:97:07:03:d1:cf:56:4c:f5:15:
5e:1e:8f:4c:76:6a:ec:8f:68:11:6c:39:8a:97:28:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:AC:9B:DC:0E:76:66:A3:EB:AD:DC:14:1D:73:F3:5F:D6:83:B8
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/97-sm9wOdmaj663cFB1z81_Wg7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bc:eb:94:c2:9d:6e:43:12:ab:42:db:7d:cc:c2:d3:ad:a1:
bb:19:ba:b5:31:49:1f:b1:31:5a:91:93:c9:3f:4e:f8:61:39:
5c:84:c8:e1:d4:cd:cb:9d:e2:87:47:b2:65:b2:ff:a5:4d:c9:
76:ef:f2:25:f3:97:6d:1d:b4:75:eb:9c:9b:c4:c7:3d:47:77:
8e:76:74:3b:a0:fa:0f:bb:59:81:40:aa:5d:25:9b:b3:c5:40:
3d:cf:22:7e:b2:98:0a:26:b3:e1:40:58:ee:2c:e8:e4:06:3f:
dd:b6:60:9d:ca:c1:d9:a1:3b:5b:c0:ff:e2:bc:10:f3:d4:de:
c6:f4:07:87:c3:b6:68:a0:1e:31:ab:c7:8d:09:bf:f0:a2:45:
f6:d2:29:d4:ee:02:5f:b0:a6:04:6e:2a:08:d4:b5:27:42:df:
77:23:1c:e2:ab:50:15:13:44:2b:a4:22:04:6e:50:7e:a8:68:
43:7c:2a:9c:c5:25:55:96:5a:16:44:83:4c:98:02:90:c2:3c:
2c:d0:b7:6a:67:c0:e2:97:15:d6:14:5d:97:02:e1:26:bb:dd:
a6:3a:b7:64:0d:08:fd:95:80:bb:85:30:ae:5f:58:7a:ad:5d:
2b:31:df:cb:a4:20:00:27:3b:f5:cf:d9:93:c9:41:6f:87:11:
1c:29:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org