Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sQczxpOLc5vvEVc1qR6v8MekG9A.roa
File: sQczxpOLc5vvEVc1qR6v8MekG9A.roa (raw, json)
Hash identifier: llVKMinpwqsta4Ta6ZkfDS6F1tqQyCtPYyr7xAcivSU=
Subject key identifier: B1:07:33:C6:93:8B:73:9B:EF:11:57:35:A9:1E:AF:F0:C7:A4:1B:D0
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01865AF9FBD0DF7E142AA2FEC55AE3D9C5C6
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sQczxpOLc5vvEVc1qR6v8MekG9A.roa
Signing time: Thu 16 Feb 2023 16:06:17 +0000
ROA not before: Thu 16 Feb 2023 16:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 176.105.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 00:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:f9:fb:d0:df:7e:14:2a:a2:fe:c5:5a:e3:d9:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 16 16:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10733c6938b739bef115735a91eaff0c7a41bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:2f:b9:bb:e0:a7:fe:02:45:76:fc:f4:75:
47:00:2c:4b:ed:60:3a:c1:6f:b8:1f:e3:63:f8:19:
5b:ea:aa:1b:07:f5:c6:77:ba:70:25:d8:af:7d:26:
b7:fe:df:88:4c:48:ee:3f:b5:ef:23:74:12:4c:74:
73:cb:a0:c6:d2:bd:2f:49:29:a8:0c:4c:58:dd:6e:
2a:e1:b0:fc:00:8e:32:90:10:c7:f6:7d:d7:d4:61:
cf:38:1c:cd:95:1c:1c:e3:db:45:d0:60:94:9f:bc:
b3:2d:ca:d8:a2:a9:a0:02:16:8b:07:fd:95:b4:a3:
58:36:4d:c4:06:d4:3d:b6:af:bd:86:34:45:5c:5e:
cf:50:a9:b5:50:86:b5:e1:d9:31:a3:0f:9f:6e:51:
ca:25:83:2c:b4:bd:fc:ca:8b:47:37:bc:73:d8:f7:
1a:b1:a4:3d:a7:63:44:51:02:21:d9:2c:9f:b0:bc:
1c:ec:b9:2d:9f:2f:59:25:ef:1a:b7:c3:6c:75:0c:
2e:52:22:83:e1:ab:2a:e2:c3:cb:dc:80:32:7e:bf:
2d:2e:64:0f:99:0a:5a:f8:a3:dc:89:c6:28:2b:39:
e8:89:9e:6c:c2:14:41:2b:8e:c4:87:69:86:75:d3:
88:60:29:c1:d2:ce:7a:25:fc:2a:0a:63:71:80:69:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:33:C6:93:8B:73:9B:EF:11:57:35:A9:1E:AF:F0:C7:A4:1B:D0
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sQczxpOLc5vvEVc1qR6v8MekG9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b7:ac:41:c4:8e:da:71:30:e1:00:d9:d0:a3:4b:93:c0:9f:
e8:a4:87:05:da:b8:4c:fa:8c:a3:a7:77:f6:75:81:1b:2a:3a:
54:37:6b:09:a4:1d:16:3d:8d:cc:d0:91:e7:b1:29:63:4b:96:
8a:0f:3e:66:bb:3c:96:ab:9d:51:36:9a:64:89:7e:9b:e0:df:
3a:0f:08:89:e9:67:45:13:bb:f6:d8:e4:38:c1:40:1d:c7:0a:
d0:bb:7f:cd:e3:b4:22:bb:a0:1a:5b:e2:13:f1:0b:f1:5e:89:
52:29:e6:81:b0:a3:84:b2:37:46:7e:59:ce:ac:9d:b2:0e:d5:
78:24:6a:e9:fa:42:da:08:d9:9e:bd:f3:af:b5:95:fd:ec:1f:
30:d0:46:9e:d6:b2:a0:14:31:93:dd:13:c2:ef:6e:89:1c:20:
f5:6e:49:6b:25:8e:86:73:2f:0a:d9:6b:d3:47:84:32:b7:04:
66:61:d1:26:22:84:eb:5d:f1:35:e7:4e:7b:81:6e:db:01:0d:
2d:26:8e:81:1c:19:f3:a9:fe:cd:db:b0:ee:a6:f3:28:22:c6:
41:dd:73:cd:b5:75:cd:b9:07:eb:95:e6:ac:cd:ad:7d:ad:f1:
d1:76:06:e4:a4:54:9f:b6:bc:43:b4:50:85:06:60:a0:b6:c1:
ca:9f:c3:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZa+fvQ334UKqL+xVrj2cXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwMjE2MTYwNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTA3MzNjNjkzOGI3MzliZWYxMTU3MzVhOTFlYWZmMGM3YTQxYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQkvubvgp/4CRXb89HVHACxL7WA6
wW+4H+Nj+Blb6qobB/XGd7pwJdivfSa3/t+ITEjuP7XvI3QSTHRzy6DG0r0vSSmo
DExY3W4q4bD8AI4ykBDH9n3X1GHPOBzNlRwc49tF0GCUn7yzLcrYoqmgAhaLB/2V
tKNYNk3EBtQ9tq+9hjRFXF7PUKm1UIa14dkxow+fblHKJYMstL38yotHN7xz2Pca
saQ9p2NEUQIh2SyfsLwc7Lktny9ZJe8at8NsdQwuUiKD4asq4sPL3IAyfr8tLmQP
mQpa+KPcicYoKznoiZ5swhRBK47Eh2mGddOIYCnB0s56JfwqCmNxgGnMNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEHM8aTi3Ob7xFXNaker/DHpBvQMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvc1FjenhwT0xjNXZ2RVZjMXFSNnY4TWVrRzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGnmMA0G
CSqGSIb3DQEBCwUAA4IBAQAht6xBxI7acTDhANnQo0uTwJ/opIcF2rhM+oyjp3f2
dYEbKjpUN2sJpB0WPY3M0JHnsSljS5aKDz5muzyWq51RNppkiX6b4N86DwiJ6WdF
E7v22OQ4wUAdxwrQu3/N47Qiu6AaW+IT8QvxXolSKeaBsKOEsjdGflnOrJ2yDtV4
JGrp+kLaCNmevfOvtZX97B8w0Eae1rKgFDGT3RPC726JHCD1bklrJY6Gcy8K2WvT
R4QytwRmYdEmIoTrXfE15057gW7bAQ0tJo6BHBnzqf7N27DupvMoIsZB3XPNtXXN
uQfrleasza19rfHRdgbkpFSftrxDtFCFBmCgtsHKn8OJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org