Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/dCwkuhOtJekqXsTGfdaqM4xtJGo.roa
File: dCwkuhOtJekqXsTGfdaqM4xtJGo.roa (raw, json)
Hash identifier: CcxitupsdsMDQad6huhisMkmui/Xb6UHEuXo2ftnJP4=
Subject key identifier: 74:2C:24:BA:13:AD:25:E9:2A:5E:C4:C6:7D:D6:AA:33:8C:6D:24:6A
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 01856D5416F47D15309B1F0EDFB89B581E65
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/dCwkuhOtJekqXsTGfdaqM4xtJGo.roa
Signing time: Sun 01 Jan 2023 12:35:05 +0000
ROA not before: Sun 01 Jan 2023 12:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210061
IP address blocks: 176.118.168.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:16:f4:7d:15:30:9b:1f:0e:df:b8:9b:58:1e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Jan 1 12:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=742c24ba13ad25e92a5ec4c67dd6aa338c6d246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e1:ae:18:b2:3e:9c:5d:76:e9:c6:04:ef:46:
ed:28:6e:9c:9d:2d:9c:58:e3:09:6d:28:11:15:30:
72:51:86:d2:58:c3:59:0f:91:86:fb:88:20:d4:16:
2f:68:8a:56:0a:a4:2d:35:61:0f:a4:bf:76:e5:b8:
d9:63:f8:3b:b2:93:bd:9d:68:e5:b7:fa:a2:e6:ff:
86:1d:56:25:a4:d5:97:c0:10:08:7f:e5:92:45:b2:
33:8d:a9:8b:c2:a1:cc:74:c3:22:88:25:88:04:a5:
c9:c5:d8:36:82:47:ec:c2:9d:06:f4:b6:58:37:c1:
bb:bb:c2:5a:67:2d:e6:c7:5c:16:b5:e3:00:ed:52:
b8:d6:58:db:a2:47:bf:36:5b:29:1d:e4:71:24:79:
c7:3e:48:47:f4:8d:0c:5a:eb:07:cb:b5:d8:f1:d4:
4f:1d:65:64:c3:af:5d:58:ad:3e:44:75:1a:5b:ce:
a5:77:fc:7e:7c:2d:58:aa:5d:44:67:8a:2e:5f:c0:
2d:95:33:76:fe:80:62:11:6f:5a:c0:ab:79:f9:56:
83:15:e8:ad:72:4a:d3:36:56:49:84:23:16:30:c3:
2c:de:e0:a7:71:ae:af:72:50:0d:d6:8a:40:35:fa:
a2:2d:b6:30:af:bf:32:e8:8e:23:0b:1d:81:b4:a0:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:24:BA:13:AD:25:E9:2A:5E:C4:C6:7D:D6:AA:33:8C:6D:24:6A
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/dCwkuhOtJekqXsTGfdaqM4xtJGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.168.0/23
Signature Algorithm: sha256WithRSAEncryption
57:e0:f8:57:2f:fb:ab:90:c2:03:00:b6:31:e9:28:f0:21:21:
05:d8:b8:37:54:68:0c:9b:b9:9a:18:cb:0a:5b:f4:ca:30:ef:
61:e4:8e:21:b8:78:9e:b0:88:8f:96:61:85:01:fe:e9:bf:9c:
e0:c8:b0:e4:b3:a9:92:56:90:3d:f5:6c:a1:53:ac:dd:fe:ee:
0d:78:a3:e7:d4:3a:ad:55:a5:08:1b:08:89:51:14:30:10:03:
53:29:8e:86:e8:ea:ce:f3:81:fb:10:42:3b:e0:a4:7e:3a:14:
7c:2c:d6:6b:d6:c2:5d:10:04:0f:e5:2a:c2:cd:b7:1c:6d:1e:
1e:82:3a:50:6e:80:41:e7:59:f5:2b:20:ef:e3:50:a2:3f:05:
58:02:c6:45:d7:70:a2:3f:93:40:f2:07:97:2d:d4:69:24:54:
4a:ca:c0:76:41:4c:c1:13:d8:ce:c0:c3:e3:4b:43:44:e9:70:
0c:0e:ae:40:45:43:57:7a:4a:52:b0:81:b9:81:bd:f7:a4:3f:
00:ac:30:bf:b7:de:11:ad:a0:e7:ce:c7:05:b2:94:fa:a5:28:
c2:ed:05:a9:f1:6b:78:43:24:cb:d6:5d:63:e2:fe:a2:e6:c9:
74:6e:4d:c8:bb:76:e3:e5:85:0e:7b:27:20:25:23:a5:69:01:
48:e2:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:47 2024 by rpki-client on console-ams.rpki-client.org