Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/csMTed5DUSKGKrGmp7q77gu2AEM.roa
File: csMTed5DUSKGKrGmp7q77gu2AEM.roa (raw, json)
Hash identifier: 4UvOv6hw672SK4gGQqSTcumUgUVjj1s9PikokaTz7Co=
Subject key identifier: 72:C3:13:79:DE:43:51:22:86:2A:B1:A6:A7:BA:BB:EE:0B:B6:00:43
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0191B8CFF75918332B649CC846D9B5A2B405
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/csMTed5DUSKGKrGmp7q77gu2AEM.roa
Signing time: Tue 03 Sep 2024 16:55:22 +0000
ROA not before: Tue 03 Sep 2024 16:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 176.105.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 17:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:cf:f7:59:18:33:2b:64:9c:c8:46:d9:b5:a2:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 3 16:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72c31379de435122862ab1a6a7babbee0bb60043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:a1:47:68:21:8e:4c:fe:25:4e:27:43:59:
3c:04:3d:ee:c2:be:bf:d6:c0:45:52:a7:90:04:a4:
dc:60:36:9a:65:84:d2:26:8b:3f:d1:d3:8f:23:bb:
54:7a:35:a4:3f:b5:e4:7d:7e:3a:da:bd:dd:c1:2c:
a3:c4:82:5a:a6:74:f8:f4:53:ea:a7:44:0e:f2:7d:
93:ea:dd:e3:6e:66:81:35:4c:50:fe:fc:9e:de:a7:
74:23:3e:aa:88:82:8a:53:53:9c:79:27:12:bb:c3:
51:39:e7:58:5f:24:f9:b7:2b:5a:42:72:92:0c:ee:
ff:08:d0:c0:20:39:90:1b:8d:b4:1f:58:82:a3:a9:
40:a3:a1:13:ed:22:cc:88:c2:6d:0f:3c:40:5c:37:
8d:22:9d:fc:20:9f:58:83:ab:c5:3b:b5:fc:e3:13:
c1:bb:ed:bf:fe:64:ee:32:02:d0:a7:93:fc:dc:59:
02:d7:ad:10:4a:4c:c9:c3:85:ac:a2:d9:a8:e9:5d:
88:74:0b:7c:a0:70:22:63:08:02:03:01:b0:29:6f:
dc:43:1f:33:3d:e7:bd:7e:b0:42:64:9a:d3:43:e0:
c3:b2:2d:70:11:ab:19:15:a9:e6:66:8b:48:a5:d6:
47:f6:fd:08:2c:ce:e4:4c:8b:c2:b7:6a:f4:76:74:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:13:79:DE:43:51:22:86:2A:B1:A6:A7:BA:BB:EE:0B:B6:00:43
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/csMTed5DUSKGKrGmp7q77gu2AEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f0:2c:b9:2f:68:ba:e9:9a:e6:be:fc:29:6b:fe:07:68:81:
58:ef:69:23:21:00:56:4d:85:53:8b:ec:a2:8b:52:a4:30:3f:
17:df:49:af:af:ec:9b:d0:31:a8:28:80:0d:80:45:06:88:c3:
e0:aa:82:cc:1b:6f:06:39:24:9c:36:08:cb:e0:6f:14:d5:18:
98:9f:16:ae:cb:75:84:59:92:76:cf:c0:0d:55:d3:94:d8:47:
1e:48:41:91:7c:40:77:2b:bb:e3:75:73:50:09:a4:a6:27:04:
17:69:a4:08:56:e2:3f:e1:41:f1:96:b3:04:31:ac:fa:4b:3b:
ff:f6:57:55:31:fc:67:24:29:0c:82:20:1f:98:50:be:a4:cf:
bb:b5:99:31:4f:ba:93:82:f8:c1:33:c3:ee:9e:4a:65:c2:db:
af:6b:b5:02:2a:a0:aa:80:88:e2:e9:bc:65:70:0a:11:67:c6:
9d:6d:a9:57:9d:d1:66:dd:33:2e:a8:69:87:67:1f:d6:b7:6a:
d6:2c:fd:34:82:1a:00:0d:38:0a:b5:73:4a:0f:ce:27:b3:46:
cf:09:03:ee:a3:c5:9f:66:3b:ad:98:ac:3b:06:98:fb:7b:a8:
57:1a:f7:90:df:7d:27:1e:da:0d:25:5b:a5:7e:82:57:b9:ab:
01:72:e2:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG4z/dZGDMrZJzIRtm1orQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwOTAzMTY1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmMzMTM3OWRlNDM1MTIyODYyYWIxYTZhN2JhYmJlZTBiYjYwMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xyhR2ghjkz+JU4nQ1k8BD3uwr6/
1sBFUqeQBKTcYDaaZYTSJos/0dOPI7tUejWkP7XkfX462r3dwSyjxIJapnT49FPq
p0QO8n2T6t3jbmaBNUxQ/vye3qd0Iz6qiIKKU1OceScSu8NROedYXyT5tytaQnKS
DO7/CNDAIDmQG420H1iCo6lAo6ET7SLMiMJtDzxAXDeNIp38IJ9Yg6vFO7X84xPB
u+2//mTuMgLQp5P83FkC160QSkzJw4Wsotmo6V2IdAt8oHAiYwgCAwGwKW/cQx8z
Pee9frBCZJrTQ+DDsi1wEasZFanmZotIpdZH9v0ILM7kTIvCt2r0dnQLQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLDE3neQ1Eihiqxpqe6u+4LtgBDMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvY3NNVGVkNURVU0tHS3JHbXA3cTc3Z3UyQUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGnlMA0G
CSqGSIb3DQEBCwUAA4IBAQBV8Cy5L2i66Zrmvvwpa/4HaIFY72kjIQBWTYVTi+yi
i1KkMD8X30mvr+yb0DGoKIANgEUGiMPgqoLMG28GOSScNgjL4G8U1RiYnxauy3WE
WZJ2z8ANVdOU2EceSEGRfEB3K7vjdXNQCaSmJwQXaaQIVuI/4UHxlrMEMaz6Szv/
9ldVMfxnJCkMgiAfmFC+pM+7tZkxT7qTgvjBM8Punkplwtuva7UCKqCqgIji6bxl
cAoRZ8adbalXndFm3TMuqGmHZx/Wt2rWLP00ghoADTgKtXNKD84ns0bPCQPuo8Wf
ZjutmKw7Bpj7e6hXGveQ330nHtoNJVulfoJXuasBcuKb
-----END CERTIFICATE-----
Generated at Thu Sep 5 19:51:54 2024 by rpki-client on console-fra.rpki-client.org