Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/9qBen3X8XbLoEuQw3li5cZYp2nk.roa
File: 9qBen3X8XbLoEuQw3li5cZYp2nk.roa (raw, json)
Hash identifier: Gp2luSyM+K/CFiZwlBa4pz+Bf07l5vIr/lfqFNlLQjE=
Subject key identifier: F6:A0:5E:9F:75:FC:5D:B2:E8:12:E4:30:DE:58:B9:71:96:29:DA:79
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018577A2487CCE77D8C99981D3C60804A418
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/9qBen3X8XbLoEuQw3li5cZYp2nk.roa
Signing time: Tue 03 Jan 2023 12:36:42 +0000
ROA not before: Tue 03 Jan 2023 12:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 176.118.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:a2:48:7c:ce:77:d8:c9:99:81:d3:c6:08:04:a4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Jan 3 12:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a05e9f75fc5db2e812e430de58b9719629da79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:8e:d8:cd:8b:8c:44:72:6a:ed:ad:b7:df:
52:c7:51:f5:28:01:2e:a9:a6:65:bf:b9:a5:99:5e:
ac:cb:64:8c:1d:3f:f4:db:d1:87:b9:b5:f1:86:59:
bb:68:65:0b:12:ff:00:e1:10:2c:44:a5:d3:2e:2a:
69:2d:d7:3e:18:29:76:cc:f3:53:14:fe:39:6a:8e:
23:b4:2b:5f:e4:ab:f8:7e:87:ec:87:e9:fd:47:90:
a2:2a:16:4b:aa:f5:0d:de:50:04:af:a3:fd:e0:af:
ce:91:ec:49:b3:0e:49:48:6b:77:52:97:2c:84:b7:
3a:fb:0e:5f:72:9c:b9:f8:59:11:85:fd:6b:5d:7a:
8c:2e:85:04:5f:64:a6:3d:57:69:55:83:23:e6:f0:
84:f9:ac:65:9d:7f:a9:44:03:bf:9d:5f:f4:1b:d9:
dd:b2:cf:7f:89:78:56:9a:b6:e0:5d:4f:97:82:2a:
e5:76:8b:1c:e3:b3:82:aa:7f:13:a9:5b:ec:f1:97:
3c:a2:5d:2c:ed:b8:3d:90:96:9c:4c:9d:52:f0:cd:
2d:04:5d:fa:56:ce:fd:b4:92:b4:ef:37:d1:2b:2e:
cf:c8:1e:f0:3c:ef:6a:1c:3a:64:92:b3:e1:8d:23:
b3:7d:70:a3:65:e9:ec:c0:82:b5:69:cd:50:43:42:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:5E:9F:75:FC:5D:B2:E8:12:E4:30:DE:58:B9:71:96:29:DA:79
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/9qBen3X8XbLoEuQw3li5cZYp2nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.162.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0d:d3:df:df:88:30:e6:41:50:7d:88:90:f1:51:54:cc:45:
c2:11:b6:90:ca:d1:4c:22:29:4f:b5:8d:99:17:52:a5:93:84:
2c:f9:2f:6d:cf:da:c9:e5:90:41:eb:ca:b9:ea:fd:fb:60:8c:
5c:30:09:16:82:e3:20:4d:02:72:07:c8:59:5c:cb:de:a4:e2:
13:d6:0d:8e:4e:8c:cb:98:f4:f8:7c:a1:30:42:7d:d0:3b:3c:
99:c6:ff:4b:c8:a2:f6:ce:a8:32:19:fa:6d:ac:fa:0b:18:eb:
20:f5:b3:55:dc:35:70:d0:b8:4a:dc:af:8f:75:d6:62:f7:f2:
51:35:99:d3:cb:14:39:68:a0:f3:13:5c:74:13:82:13:a4:2a:
39:6a:f0:b2:03:b7:01:21:ac:1d:7e:85:e9:52:c6:4b:ba:a6:
22:bf:d2:c5:0a:16:c4:51:c1:23:34:4c:af:52:85:98:fe:4d:
4f:91:1c:f6:10:28:f9:11:cd:06:48:4b:0f:f4:ec:8d:c3:f9:
c5:4f:eb:17:d4:17:4b:67:e3:53:2e:58:ac:6f:bd:bf:2c:db:
93:cc:8a:fc:7d:af:8c:3e:2a:f8:f6:10:1e:b5:0d:c4:70:a4:
71:d6:c0:ed:81:31:8f:81:92:34:91:13:25:0b:31:57:ec:b9:
64:8c:2b:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV3okh8znfYyZmB08YIBKQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWE5ZjE0Zjk3ZDRkYWQ4YzAwNGMyNTNhNWUxY2U3Yzdk
ZDdjNGIwHhcNMjMwMTAzMTIzNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmEwNWU5Zjc1ZmM1ZGIyZTgxMmU0MzBkZTU4Yjk3MTk2MjlkYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDiO2M2LjERyau2tt99Sx1H1KAEu
qaZlv7mlmV6sy2SMHT/029GHubXxhlm7aGULEv8A4RAsRKXTLippLdc+GCl2zPNT
FP45ao4jtCtf5Kv4fofsh+n9R5CiKhZLqvUN3lAEr6P94K/OkexJsw5JSGt3Upcs
hLc6+w5fcpy5+FkRhf1rXXqMLoUEX2SmPVdpVYMj5vCE+axlnX+pRAO/nV/0G9nd
ss9/iXhWmrbgXU+Xgirldosc47OCqn8TqVvs8Zc8ol0s7bg9kJacTJ1S8M0tBF36
Vs79tJK07zfRKy7PyB7wPO9qHDpkkrPhjSOzfXCjZenswIK1ac1QQ0J3yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPagXp91/F2y6BLkMN5YuXGWKdp5MB8GA1UdIwQY
MBaAFJ2qnxT5fU2tjABMJTpeHOfH3XxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2Nzct
NDE0MDEwMDhhNzBjLzEvOXFCZW4zWDhYYkxvRXVRdzNsaTVjWllwMm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2NzctNDE0MDEwMDhhNzBj
LzEvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHaiMA0G
CSqGSIb3DQEBCwUAA4IBAQARDdPf34gw5kFQfYiQ8VFUzEXCEbaQytFMIilPtY2Z
F1Klk4Qs+S9tz9rJ5ZBB68q56v37YIxcMAkWguMgTQJyB8hZXMvepOIT1g2OTozL
mPT4fKEwQn3QOzyZxv9LyKL2zqgyGfptrPoLGOsg9bNV3DVw0LhK3K+PddZi9/JR
NZnTyxQ5aKDzE1x0E4ITpCo5avCyA7cBIawdfoXpUsZLuqYiv9LFChbEUcEjNEyv
UoWY/k1PkRz2ECj5Ec0GSEsP9OyNw/nFT+sX1BdLZ+NTLlisb72/LNuTzIr8fa+M
Pir49hAetQ3EcKRx1sDtgTGPgZI0kRMlCzFX7LlkjCsI
-----END CERTIFICATE-----
Generated at Thu Aug 3 11:06:49 2023 by rpki-client on console-ams.rpki-client.org