Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/dXGJEeoeTtWCshz30W39J6UDjdM.roa
File: dXGJEeoeTtWCshz30W39J6UDjdM.roa (raw, json)
Hash identifier: mo8+fO16mcdzVskdk7MHWKc9cjEhEimEZICHbpr6C2Y=
Subject key identifier: 75:71:89:11:EA:1E:4E:D5:82:B2:1C:F7:D1:6D:FD:27:A5:03:8D:D3
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 01856B40F92CB33052C58966BE7A34B070DF
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/dXGJEeoeTtWCshz30W39J6UDjdM.roa
Signing time: Sun 01 Jan 2023 02:54:58 +0000
ROA not before: Sun 01 Jan 2023 02:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56970
IP address blocks: 176.124.56.0/24 maxlen: 24
176.124.57.0/24 maxlen: 24
2a0e:fa40:1::/48 maxlen: 48
2a0e:fa40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:f9:2c:b3:30:52:c5:89:66:be:7a:34:b0:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Jan 1 02:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75718911ea1e4ed582b21cf7d16dfd27a5038dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:45:9c:3a:54:49:88:2b:f5:f6:b2:93:ba:
7a:15:ce:0e:0c:c4:62:cc:2b:58:ac:08:91:c8:e0:
11:22:d6:ff:6c:3e:eb:fb:e1:d3:30:4d:2c:b3:f7:
44:95:7b:7d:d5:c7:f2:b7:5a:ca:24:b5:db:70:3e:
7d:44:c5:85:87:f5:50:d6:79:50:89:a1:b3:5a:96:
34:18:e2:c5:bc:4c:30:5d:21:2c:6d:a4:a9:a1:f6:
be:fd:e5:24:e6:8e:03:14:d1:55:c1:07:44:28:20:
93:cf:73:4a:f2:75:8d:bf:d0:10:53:0a:34:d9:fc:
14:81:03:ce:52:8c:f1:db:68:19:db:73:c4:fa:43:
c7:a3:39:df:21:5e:7c:4f:d8:3e:8d:e3:e1:3d:e6:
50:6d:fc:5f:8e:06:3c:00:87:c5:46:4d:13:1b:88:
67:2f:10:c7:de:59:96:94:ab:29:61:51:b0:2a:f2:
f3:c9:be:2b:5a:37:d7:6a:2d:c5:a5:32:d8:4c:46:
2d:a0:cc:67:58:f5:c2:86:cb:29:ab:97:02:20:66:
31:9b:28:46:8a:73:9a:4c:35:bf:d2:32:cf:83:b1:
9d:87:ab:8a:85:08:28:8a:94:7a:88:59:4c:1b:bc:
86:21:0b:80:82:5e:8c:6a:aa:ba:23:2f:2f:9b:8e:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:89:11:EA:1E:4E:D5:82:B2:1C:F7:D1:6D:FD:27:A5:03:8D:D3
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/dXGJEeoeTtWCshz30W39J6UDjdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.56.0/23
IPv6:
2a0e:fa40::/47
Signature Algorithm: sha256WithRSAEncryption
9d:72:dd:2c:3a:5d:c9:95:2e:a7:53:4d:78:4a:53:c2:c8:3e:
6f:5c:50:24:fb:10:d1:4a:4b:6b:e2:db:a5:38:45:a4:ed:c7:
58:76:5f:0b:be:32:1c:2f:ff:f2:aa:06:06:0a:7b:a7:6c:e4:
d7:cb:78:f5:a3:3c:b2:61:77:2d:c9:0f:e4:3f:f8:ab:a9:c5:
88:3c:91:56:b1:3e:8a:b2:6e:be:45:7f:64:24:1a:93:26:bc:
22:2c:d1:6d:50:18:46:54:0b:55:e1:fa:11:a4:db:8f:f3:5e:
e1:a0:b9:c5:0b:43:55:73:fd:af:30:d7:a1:f0:c6:2f:20:ac:
71:5e:b4:6b:bc:5e:03:ba:ae:56:6c:99:70:4b:96:24:25:3e:
9c:45:c2:b9:6e:47:3a:6e:16:4a:c3:f8:3c:c2:fc:37:51:2f:
83:84:a9:10:c4:2e:15:ee:4c:82:5e:b8:53:92:30:65:6e:86:
1c:77:79:fe:b0:ad:1e:e6:64:14:b5:ff:72:03:9d:77:e0:d5:
0a:86:87:be:9e:6d:05:0e:6c:ed:6e:19:c9:34:2a:c8:99:4c:
70:2f:68:af:9a:48:41:59:65:69:91:10:fa:26:28:4e:29:fc:
6d:96:99:8a:36:b1:19:44:cb:88:f1:f0:9d:fe:8e:10:e8:fb:
89:ff:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:11 2024 by rpki-client on console-fra.rpki-client.org