Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/n9lXOaCM_eO-NQGEXJxQv74ogkY.roa
File: n9lXOaCM_eO-NQGEXJxQv74ogkY.roa (raw, json)
Hash identifier: gd8ljZRx1Iw3QghpImykim+HDKHQuEwv8wpPZx4XhLI=
Subject key identifier: 9F:D9:57:39:A0:8C:FD:E3:BE:35:01:84:5C:9C:50:BF:BE:28:82:46
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 0186076A520660783793F3F5CBE94F641531
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/n9lXOaCM_eO-NQGEXJxQv74ogkY.roa
Signing time: Tue 31 Jan 2023 10:40:53 +0000
ROA not before: Tue 31 Jan 2023 10:40:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41114
IP address blocks: 176.111.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:6a:52:06:60:78:37:93:f3:f5:cb:e9:4f:64:15:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Jan 31 10:40:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd95739a08cfde3be3501845c9c50bfbe288246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:04:b3:74:a6:f1:b3:c3:a5:f3:2a:f2:d0:
f6:5e:38:ed:7e:4f:e1:8d:1e:76:e9:4f:f6:a3:f5:
82:bf:33:b4:1c:2e:b3:a2:e3:ca:b8:26:4a:55:74:
52:19:49:e6:35:56:42:1e:1b:36:65:09:39:24:56:
d1:bc:38:63:64:66:05:60:dd:bf:73:e2:99:f8:e9:
53:3b:35:1f:74:b4:db:08:f8:6f:fe:91:ce:b2:39:
6e:5d:12:21:ba:1b:bc:fb:14:e6:c1:69:bc:01:30:
b9:9a:fb:af:49:d8:1e:8d:b4:ac:47:f6:7c:a7:1e:
b7:39:ab:44:f2:69:e7:f2:14:85:13:23:e2:c0:64:
4e:4d:18:56:d9:e7:4f:a9:50:c7:ca:88:1b:ed:e6:
c9:da:76:91:8f:79:48:f3:65:83:aa:9a:94:5f:97:
5e:48:ab:cb:fe:09:cf:1e:a9:b1:e3:3a:12:77:57:
36:97:bc:62:2c:cb:7f:95:99:0e:4d:9f:43:a0:19:
3e:34:53:c7:b7:a5:d7:30:b3:05:2c:84:30:19:e0:
2d:c0:42:66:a4:a3:a4:cd:ca:63:c1:9e:e8:31:6b:
3e:ac:2c:9f:64:1e:d9:5b:91:81:f7:fb:2a:a6:3f:
69:cb:c3:8d:9b:95:62:3a:4d:4e:14:90:06:55:1a:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:57:39:A0:8C:FD:E3:BE:35:01:84:5C:9C:50:BF:BE:28:82:46
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/n9lXOaCM_eO-NQGEXJxQv74ogkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:84:f8:46:e4:d1:7e:3c:96:5d:12:9f:ec:cd:d8:52:cf:2a:
4e:03:cb:81:ca:d8:6f:32:22:02:8b:f0:2f:33:8d:88:3a:19:
6d:40:05:e2:06:b7:bf:a3:38:38:d4:2d:82:64:3a:5b:21:60:
0a:f1:e5:2a:0c:fb:46:fd:22:20:ed:ce:be:06:4d:7d:ff:35:
c6:a6:42:c6:68:3e:fc:6a:6e:96:75:d2:32:cd:85:00:b2:17:
4d:d5:b6:7b:c9:51:e4:f6:ca:8d:35:f8:15:1f:ac:03:63:c2:
3e:fb:fa:f9:f8:a4:10:4d:a1:f5:3c:29:02:2e:cc:19:0e:45:
ba:94:ea:0b:89:52:a5:6f:92:4c:73:a7:35:87:0d:5d:49:dc:
79:39:e3:c6:d8:c4:f5:12:a9:dc:0d:08:04:f2:76:52:5c:61:
49:43:29:e5:f8:40:e7:c0:36:50:c6:28:2e:18:54:98:d9:3e:
e3:5d:ee:8e:13:6a:df:73:76:7d:23:9c:d8:7c:3d:f5:ff:fd:
20:70:6b:84:74:a5:fe:b2:4e:6e:c7:3b:35:f8:bb:f0:5f:50:
d5:11:ba:7c:11:2e:3b:e0:11:80:26:f9:61:68:6c:aa:64:8b:
ab:f9:4d:99:1d:8c:65:71:85:b0:37:ad:10:2c:dc:1c:77:43:
2b:72:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:47 2024 by rpki-client on console-ams.rpki-client.org