Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/stQYoltkO0Zug0UBH5HHv627P44.roa
File: stQYoltkO0Zug0UBH5HHv627P44.roa (raw, json)
Hash identifier: 6YM+n4PlXZqFWo9CbCu8/EJVGlt3afc6hKntQH0OgF8=
Subject key identifier: B2:D4:18:A2:5B:64:3B:46:6E:83:45:01:1F:91:C7:BF:AD:BB:3F:8E
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0192EE3852F2B18859B1EE82834DCC46D8D3
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/stQYoltkO0Zug0UBH5HHv627P44.roa
Signing time: Sat 02 Nov 2024 18:52:01 +0000
ROA not before: Sat 02 Nov 2024 18:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 176.105.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 03:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ee:38:52:f2:b1:88:59:b1:ee:82:83:4d:cc:46:d8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 2 18:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2d418a25b643b466e8345011f91c7bfadbb3f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:17:51:e7:88:65:6c:82:01:4f:19:04:86:
2c:f0:c4:b4:d5:b6:56:24:b2:cb:5f:58:85:3e:b2:
df:17:04:85:7f:7e:80:f5:f8:88:99:ad:c2:a0:cc:
7e:14:2d:60:6b:22:62:74:85:03:a5:b8:38:0d:08:
ac:3b:23:78:2a:ec:e7:a4:f7:f8:b6:0f:8d:44:50:
f9:f0:04:ca:16:e5:d3:81:ff:62:50:0f:38:52:3a:
f0:39:87:f5:d2:70:a1:d9:b7:cf:f1:f2:5a:ee:dd:
37:9b:83:0a:6a:a6:2a:11:b0:83:51:10:ea:57:30:
fa:91:07:29:d3:19:c7:86:26:d9:77:9f:da:32:9b:
b9:f2:6a:57:e5:40:ec:9b:5a:ee:17:b9:bc:23:91:
cc:70:bd:b2:b8:67:25:f6:75:0c:18:12:fb:48:32:
81:81:e5:29:32:44:15:d1:2f:77:11:7a:69:72:40:
2f:ed:ef:4c:a6:2c:d8:22:25:35:ed:db:e3:9b:26:
53:cd:0f:6a:f5:13:0b:04:99:05:c1:55:3b:42:17:
f8:af:bb:38:b4:6a:63:2a:46:ea:66:8c:32:7e:c9:
f5:cc:a7:c4:ef:87:e3:25:c6:2c:ee:c2:a6:6a:da:
f1:db:65:83:ae:61:f6:0a:9c:8d:8a:f6:34:bd:c5:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:18:A2:5B:64:3B:46:6E:83:45:01:1F:91:C7:BF:AD:BB:3F:8E
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/stQYoltkO0Zug0UBH5HHv627P44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:64:8f:de:af:04:71:ca:4f:de:ed:d7:f6:db:e3:0e:85:df:
c0:d9:15:41:aa:a7:46:9d:8c:85:04:dc:3c:0b:be:97:09:a5:
ec:57:58:36:6c:4e:f8:8c:79:e5:44:7c:c8:3b:35:7c:79:07:
f0:f1:0f:55:5a:6b:5a:ac:2c:f3:85:8a:eb:1e:07:62:39:62:
b4:48:eb:2d:ee:42:b3:45:c3:69:ce:29:6f:12:cb:c3:d4:ee:
a3:28:26:af:a1:19:0c:b8:7a:1d:05:bd:c5:25:eb:8c:02:50:
19:99:ff:4d:e9:07:50:5e:66:b0:d1:df:e7:90:ee:3b:40:4b:
dc:70:af:16:3e:18:c7:4f:c5:65:09:cd:a2:c1:6b:69:1c:dc:
f9:a9:fd:bd:46:a7:a1:d7:ff:0d:81:4c:c6:76:57:95:57:f8:
48:19:72:32:74:0a:df:e6:1c:67:72:e7:70:61:4c:8e:1e:e4:
f5:0e:0b:7c:e3:4c:a6:e0:56:8f:c1:fd:90:43:e0:32:93:ab:
02:f6:a3:a1:52:55:97:a4:50:58:fd:dd:54:97:d2:53:5e:80:
e2:a1:d9:33:01:9f:d7:50:63:9b:5e:09:e2:51:cc:0a:f2:73:
6f:e6:2f:44:f9:1b:8c:5d:5a:32:b7:6d:1c:e6:2a:85:a5:b3:
d1:b5:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 06:42:29 2024 by rpki-client on console-fra.rpki-client.org