Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/a-OLuSPhkxWuVAVuVkMQkd-4TAQ.roa
File: a-OLuSPhkxWuVAVuVkMQkd-4TAQ.roa (raw, json)
Hash identifier: e95pY+cOnUAiCjK8L1CpYRg+bAheR+lH7ZpqFWVUpHA=
Subject key identifier: 6B:E3:8B:B9:23:E1:93:15:AE:54:05:6E:56:43:10:91:DF:B8:4C:04
Certificate issuer: /CN=9ff736a181e954a7701aa328056f2c48c366aee7
Certificate serial: 01856F66FB67F0B9B1131EB857E184EAA9C9
Authority key identifier: 9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/a-OLuSPhkxWuVAVuVkMQkd-4TAQ.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.126.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fb:67:f0:b9:b1:13:1e:b8:57:e1:84:ea:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff736a181e954a7701aa328056f2c48c366aee7
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be38bb923e19315ae54056e56431091dfb84c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:de:ff:68:bc:f9:1b:61:8b:2a:8d:6d:6d:
0f:72:a2:e7:00:74:14:fd:27:d5:a7:a0:b9:2e:73:
31:99:de:d4:23:fe:eb:e5:39:23:8d:2a:d9:c1:d5:
4f:d7:59:f7:ae:98:b2:35:c0:7a:df:be:37:a9:a1:
27:10:a7:18:aa:a9:5d:70:0c:d0:f3:0e:5c:de:0a:
06:b6:24:f2:d2:07:86:b2:dc:e3:da:ae:8b:4e:87:
38:51:3a:d9:4d:9d:2d:07:c9:10:76:66:7e:72:2a:
d8:de:69:a2:77:d2:f2:e9:ed:0d:cd:6b:bc:12:f2:
87:83:67:80:dd:89:d2:aa:28:a9:2d:af:47:7f:62:
9f:2d:f7:e5:44:04:46:26:41:fe:ad:6a:68:5b:f6:
bb:43:f4:ed:67:9e:44:32:cd:4a:93:1c:42:71:2a:
61:e6:1e:03:49:1f:ab:2f:09:1d:86:06:c0:f8:01:
6e:5d:05:45:83:b1:4e:a9:b7:fc:7d:36:2f:6a:0c:
fb:ad:35:c4:cd:77:da:aa:c7:6f:90:5e:ae:73:97:
74:45:25:fa:1b:26:8c:98:50:14:5d:36:a0:ca:c3:
48:ae:a8:22:9a:6e:86:b4:f5:1c:0b:21:47:ea:8a:
84:00:d1:0b:28:ca:b3:c2:d8:95:4f:49:f1:20:c7:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:8B:B9:23:E1:93:15:AE:54:05:6E:56:43:10:91:DF:B8:4C:04
X509v3 Authority Key Identifier:
keyid:9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/a-OLuSPhkxWuVAVuVkMQkd-4TAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:24:1f:0a:0e:40:83:42:53:2b:c6:87:20:40:3c:e7:98:78:
47:57:23:89:85:98:61:d4:a3:99:67:47:f7:b7:c0:c3:b4:cd:
69:3a:1d:2d:38:b1:ef:a9:d7:00:f5:dd:a6:3f:40:e6:9f:e8:
4b:dd:a3:13:55:77:4d:6d:bd:ff:29:e7:aa:09:7f:d5:d8:ad:
33:7e:df:77:97:26:13:bd:1e:7e:ff:66:10:10:c4:df:b7:df:
c4:61:bc:44:23:60:86:75:34:96:35:82:b5:d9:4e:3a:e2:19:
bf:a1:9f:a1:90:ec:c2:50:61:28:60:67:59:95:ff:3f:c0:67:
94:d5:cf:b3:2a:78:82:7b:16:bf:90:45:48:0c:5b:98:98:af:
50:44:75:fd:e8:72:30:70:a9:95:64:c4:57:b4:d3:7d:1d:b4:
1f:80:a3:83:64:5b:d0:9f:59:6e:26:74:87:0c:f3:98:0d:5f:
69:80:b7:dc:b1:c4:66:0d:77:90:51:aa:b0:b9:35:58:4a:ac:
ae:e9:8f:d4:59:e0:1c:ec:9e:ff:9f:f6:25:d7:a6:14:e6:6e:
f9:af:8d:b9:58:c4:d8:6a:fe:ac:07:57:91:86:9c:5d:73:cd:
50:26:90:e7:e4:97:98:83:62:8a:a6:2c:ed:ed:d3:e7:fa:10:
d5:8d:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-fra.rpki-client.org