Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/dWemqQWc6dqtIH2hVr_HlWUJ9Y4.roa
File: dWemqQWc6dqtIH2hVr_HlWUJ9Y4.roa (raw, json)
Hash identifier: NR+LILSnDdBFMml4/bzOYHWPzH2gYq4Aw+JNgo6NNpA=
Subject key identifier: 75:67:A6:A9:05:9C:E9:DA:AD:20:7D:A1:56:BF:C7:95:65:09:F5:8E
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 0187F69BE8BEA06A71CCA7C87C52657B25A9
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/dWemqQWc6dqtIH2hVr_HlWUJ9Y4.roa
Signing time: Sun 07 May 2023 14:27:05 +0000
ROA not before: Sun 07 May 2023 14:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 132.76.0.0/16 maxlen: 16
132.77.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:9b:e8:be:a0:6a:71:cc:a7:c8:7c:52:65:7b:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: May 7 14:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7567a6a9059ce9daad207da156bfc7956509f58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:7c:32:c3:cb:5f:ea:be:91:a5:d0:cf:60:
9b:ce:c2:2a:da:e8:7d:42:b7:01:70:f4:70:92:6b:
c9:44:91:db:d4:85:06:11:99:f0:df:ca:5b:ed:3e:
17:d8:0f:fc:a3:fa:0a:8c:9a:e6:08:51:76:d4:d2:
25:d8:eb:e2:c6:84:3e:e5:08:0c:12:f5:3e:9a:06:
dc:ea:d9:f7:d6:93:d1:1b:76:8e:e8:7d:01:4b:9f:
43:e0:f2:73:74:93:b7:6b:c9:15:3c:7f:d3:82:5a:
5b:a7:2a:83:69:88:69:d0:ef:bf:4a:d4:f9:33:6c:
73:9f:92:5b:22:c7:47:40:26:f0:ae:75:e1:7b:cd:
3c:a5:5e:8b:09:ad:9f:af:0c:e2:e4:04:65:8a:70:
34:be:34:e3:be:e4:e6:88:d2:b8:9f:68:c2:17:90:
6e:b1:98:8b:b2:fa:3e:43:4b:c0:8f:ee:99:a6:56:
2b:c3:2c:33:24:f7:5a:ef:14:13:79:d5:b1:3f:a6:
0d:92:2c:d1:75:fc:f3:fb:62:99:f0:02:f2:0a:c7:
1b:ee:76:56:02:f4:d8:94:f2:a9:8f:26:c6:42:23:
b7:32:ec:fc:b9:90:f2:e4:4e:ce:2d:cc:ce:75:14:
d7:af:d6:c2:ae:fc:ab:d7:ac:1b:48:92:7e:32:19:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:67:A6:A9:05:9C:E9:DA:AD:20:7D:A1:56:BF:C7:95:65:09:F5:8E
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/dWemqQWc6dqtIH2hVr_HlWUJ9Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
47:48:fd:4a:f4:0a:1d:f9:04:57:1b:e0:80:42:09:2e:45:f1:
41:d4:37:73:4c:d2:a7:12:47:b1:f4:09:e6:ee:b4:55:a1:a0:
27:d5:47:be:b8:02:58:2d:b7:d2:45:70:7f:53:3a:0d:bd:7a:
24:58:6a:69:b4:10:b1:5b:29:74:66:b5:74:a2:e7:3c:08:c6:
cf:2e:5a:7c:46:90:5f:d7:da:e8:34:8d:b2:1f:d2:3c:ef:cf:
78:1f:cb:9a:aa:24:d0:56:ad:7c:30:c0:4a:07:58:25:25:47:
ab:91:60:10:58:f9:0c:d1:04:a0:a8:a4:73:50:ab:36:c0:7e:
36:cf:72:d3:42:a1:68:b5:cb:4f:dd:13:5c:54:a2:1f:63:02:
78:9f:29:ba:ff:2f:06:06:42:40:67:80:b3:e0:7f:26:c6:de:
57:21:19:46:8e:25:e2:4b:36:ef:5c:0f:16:ac:05:b0:26:14:
2e:bb:03:f6:46:5a:36:10:70:84:7b:0c:31:e1:4e:d1:03:22:
3e:e3:2a:27:aa:40:d3:12:14:6c:23:f7:74:96:80:82:99:6a:
80:5c:56:45:7f:32:4d:c1:95:c8:b1:e0:88:19:b7:90:5c:46:
39:1f:b5:97:c9:ca:00:4b:e2:bb:fe:fd:3a:c1:d9:d6:7c:15:
fc:8b:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:05 2024 by rpki-client on console-ams.rpki-client.org