Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/n15o4r0CuMd-dm_PZwS7m0p4QC4.roa
File: n15o4r0CuMd-dm_PZwS7m0p4QC4.roa (raw, json)
Hash identifier: f1Hfn8IkwMXNkx0wt6OCamoSrMQW2lW5+0X5WcHJ4ik=
Subject key identifier: 9F:5E:68:E2:BD:02:B8:C7:7E:76:6F:CF:67:04:BB:9B:4A:78:40:2E
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 0186A94D9B2BD2920DD69C7E8201E5C99365
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/n15o4r0CuMd-dm_PZwS7m0p4QC4.roa
Signing time: Fri 03 Mar 2023 21:08:00 +0000
ROA not before: Fri 03 Mar 2023 21:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54203
IP address blocks: 176.67.85.0/24 maxlen: 24
176.67.80.0/23 maxlen: 23
176.67.86.0/24 maxlen: 24
185.91.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a9:4d:9b:2b:d2:92:0d:d6:9c:7e:82:01:e5:c9:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Mar 3 21:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f5e68e2bd02b8c77e766fcf6704bb9b4a78402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:2f:4d:1d:f6:3e:e1:e4:ad:88:89:cd:6c:
f2:0b:db:67:a7:cb:9a:3c:39:53:a7:b3:7b:92:cd:
77:eb:bc:b2:e4:0d:07:ec:b3:ee:f0:b4:3d:49:db:
59:9a:bf:0e:ef:84:91:48:8f:b1:e7:f0:01:50:de:
96:bc:88:3b:ef:b1:8a:9e:64:3d:ea:11:09:b1:ac:
d4:5f:c8:9d:00:6d:38:e7:83:92:2e:9b:3a:27:36:
ce:fe:e8:8e:d8:24:dc:1a:f6:6d:51:2a:02:51:b7:
1a:41:b0:9e:14:b9:38:06:0a:9a:1c:8b:d5:ff:f7:
3f:e8:cf:c4:43:71:0d:b1:d1:12:fe:ad:15:5b:4e:
81:59:59:01:b7:56:0d:33:c0:31:a3:88:9b:e9:33:
76:fb:b7:ef:38:69:bb:4c:b8:28:e0:0a:84:09:2d:
31:35:a4:05:9c:7a:2c:05:86:12:45:5b:81:10:6c:
5a:bb:68:32:c0:03:d4:ce:e3:72:44:6f:1f:8b:c5:
11:4a:25:85:10:f4:37:a0:ee:ca:cb:95:59:68:99:
4c:ac:5e:66:1e:14:70:ee:66:71:9d:34:1c:61:70:
3f:c3:0b:6d:ac:7b:48:9d:c8:03:fc:b9:25:95:81:
78:6a:df:3f:49:08:80:75:d0:5d:e0:46:41:09:cc:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:68:E2:BD:02:B8:C7:7E:76:6F:CF:67:04:BB:9B:4A:78:40:2E
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/n15o4r0CuMd-dm_PZwS7m0p4QC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.80.0/23
176.67.85.0-176.67.86.255
185.91.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:4d:20:b4:d1:75:d9:6a:61:ec:5b:8a:31:42:ba:36:e5:7a:
ef:31:d1:ae:af:cf:ac:29:f6:5e:78:39:e9:67:9d:b6:03:2c:
a1:43:28:0f:33:b8:15:06:46:da:18:e1:c5:d1:0a:4b:73:7c:
c0:df:43:65:11:37:9c:36:d3:e9:64:9d:fe:9c:32:9c:7d:23:
a9:05:11:5c:82:45:c3:2d:b3:99:f0:47:69:a5:9f:f7:9e:72:
6e:33:c1:63:ba:f7:74:9b:9e:5d:97:ea:db:80:ac:80:2a:01:
51:b8:ed:4a:91:42:48:68:17:d2:f5:f9:4e:16:0e:3a:55:3c:
08:3c:0e:d3:91:ff:bf:82:1b:1b:e5:9e:79:7f:08:cf:f8:26:
ac:39:2f:24:e5:92:0e:8f:3b:ef:3b:1a:49:08:eb:0d:80:13:
e4:ab:ea:2f:ec:1f:4d:00:48:23:9d:ab:61:70:20:cb:f5:75:
fc:63:40:bf:3b:41:b6:ea:44:58:82:21:ea:ea:0c:07:9a:fb:
c2:05:5d:b4:9d:17:59:e2:33:f7:a0:26:ab:b7:7d:50:d4:37:
07:6c:f0:b9:2f:1e:89:13:c4:c9:9a:29:28:fc:8b:50:6e:a8:
5f:6a:e6:a8:2b:4f:d9:dd:f7:33:96:af:aa:3e:0e:ec:0e:48:
4e:29:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:33 2024 by rpki-client on console-ams.rpki-client.org