Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/FV-CVHlofj0rUvDZBP_4zG8px1k.roa
File: FV-CVHlofj0rUvDZBP_4zG8px1k.roa (raw, json)
Hash identifier: 9SGZA+yBCXWkXZ51geLejMER2M55ltaKSawcK/lEoVs=
Subject key identifier: 15:5F:82:54:79:68:7E:3D:2B:52:F0:D9:04:FF:F8:CC:6F:29:C7:59
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 0188DDFBA668B9B4A4ACA0F5058D9AFE0178
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/FV-CVHlofj0rUvDZBP_4zG8px1k.roa
Signing time: Wed 21 Jun 2023 12:43:56 +0000
ROA not before: Wed 21 Jun 2023 12:43:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.118.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:fb:a6:68:b9:b4:a4:ac:a0:f5:05:8d:9a:fe:01:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Jun 21 12:43:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155f825479687e3d2b52f0d904fff8cc6f29c759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:5b:c9:6a:f4:61:10:4d:bd:eb:34:5b:53:
25:15:d7:d0:ab:5d:94:39:39:2f:d1:59:f5:2a:e7:
4a:e9:f6:73:c9:cf:17:b8:7a:34:aa:f7:27:ad:e0:
fb:da:98:4e:d3:ef:3a:8b:22:b8:b8:44:3f:4b:2a:
f7:30:37:ec:43:79:3d:b3:b4:9d:2d:4f:80:57:c0:
a4:f4:98:db:e4:1f:59:28:5e:cb:df:73:81:f6:2e:
30:ea:6b:84:19:2f:4a:d8:10:0b:f9:ab:b0:32:4e:
b4:34:fa:51:57:07:6e:90:a1:37:53:9b:db:39:a8:
ed:0d:da:ab:58:a5:a4:d3:0e:42:90:ad:7f:be:20:
c5:c9:34:74:5e:3d:e8:8b:1d:7a:98:fe:06:3f:93:
5a:22:d2:a2:d0:e6:92:2f:bc:b3:7e:53:c6:14:28:
63:f4:86:ce:15:ab:12:4e:bb:88:c1:de:b8:46:c9:
1a:cd:f9:d2:9e:88:c7:c3:58:b1:80:60:f9:cf:fa:
b4:7e:12:42:2c:cf:25:ee:a4:e3:65:15:56:5c:c8:
bf:b0:f6:8f:57:ee:8a:f6:1d:e8:3d:fd:d7:e2:e9:
41:54:cf:ac:15:66:28:3e:0e:07:4d:92:0c:c8:25:
d2:07:a4:52:8b:0f:56:23:f1:d7:eb:8d:37:91:11:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:82:54:79:68:7E:3D:2B:52:F0:D9:04:FF:F8:CC:6F:29:C7:59
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/FV-CVHlofj0rUvDZBP_4zG8px1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0d:b5:89:2c:58:cb:1a:19:fe:77:a0:ad:ec:53:13:4e:23:
8c:4f:0c:7e:b0:4e:9f:f7:31:00:8b:a6:c2:45:00:00:b9:c3:
95:eb:90:b6:b2:40:0c:91:93:86:90:10:04:e3:1e:3e:9b:c8:
15:0d:c9:d9:ed:e3:72:d2:66:3c:68:55:3a:3e:a1:85:d8:10:
f6:31:0c:c2:b8:f5:8f:ea:7b:6e:bf:93:8e:31:5f:14:59:c3:
d5:66:93:32:61:b4:33:0b:00:a9:01:b8:ef:cc:bb:08:99:ab:
eb:87:89:ff:96:2d:0e:e1:e5:75:6a:64:6c:6c:c3:2e:5e:04:
94:35:3b:e8:ca:f4:78:05:5a:4f:57:15:31:15:5d:82:cf:c2:
44:9c:92:c5:e4:23:1c:a8:3c:69:4d:98:34:95:9b:97:3e:59:
c9:db:cf:df:12:48:8b:33:05:e7:d1:07:0d:b2:53:05:b5:ae:
cb:f7:87:59:0d:e5:5f:d2:e4:3d:a0:27:de:35:8d:f7:97:ea:
c2:db:9a:47:26:7a:f5:c1:03:c9:5a:0f:27:8c:8a:3f:ef:5d:
e4:46:eb:31:4f:85:e2:32:ee:f1:f0:48:0d:73:70:1f:80:b9:
ab:f2:29:5b:6c:a3:6e:83:52:59:2f:97:70:cc:ec:6e:fe:4e:
40:c4:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 15:55:01 2023 by rpki-client on console-fra.rpki-client.org