Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/aKyWBrHm0TZFIXA-TaFg__De4l8.roa
File: aKyWBrHm0TZFIXA-TaFg__De4l8.roa (raw, json)
Hash identifier: huoVs+6T8KVgrRpR30fpXK/+MBSYOswapoc47OZQvvI=
Subject key identifier: 68:AC:96:06:B1:E6:D1:36:45:21:70:3E:4D:A1:60:FF:F0:DE:E2:5F
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018AB84F931209754995DE76894F7AB45990
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/aKyWBrHm0TZFIXA-TaFg__De4l8.roa
Signing time: Thu 21 Sep 2023 15:15:37 +0000
ROA not before: Thu 21 Sep 2023 15:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.118.163.0/24 maxlen: 24
176.118.161.0/24 maxlen: 24
176.118.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:4f:93:12:09:75:49:95:de:76:89:4f:7a:b4:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Sep 21 15:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68ac9606b1e6d1364521703e4da160fff0dee25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:d2:a6:f4:ab:01:54:1e:28:81:96:e7:fa:
ed:2e:e7:25:49:40:05:73:65:4e:ba:f5:5a:3b:35:
60:63:33:59:30:1f:6b:5b:8d:61:a1:2e:9a:81:c8:
01:55:15:30:80:24:de:b7:19:5f:db:92:26:80:cd:
e0:43:9c:57:89:0d:4d:90:08:40:61:c7:7b:db:b6:
fc:6f:ef:a3:07:bf:cb:73:ba:b2:b7:f0:56:5d:12:
6e:bb:4c:90:3a:82:dc:92:35:91:75:27:d8:b8:80:
75:09:35:89:d0:5f:9b:9a:6e:71:87:a3:45:73:b9:
a2:e6:7f:43:88:24:52:01:57:91:6f:91:7c:3f:a6:
d3:91:9b:fe:62:5d:84:3c:03:27:f0:f9:6e:e6:b8:
1c:de:59:5c:f4:e1:ea:1f:1c:3d:e0:58:60:c3:b2:
c1:57:d6:17:9b:4f:2b:96:b2:3f:34:70:4a:c5:52:
bc:08:0c:55:b6:15:e3:a7:1c:77:65:c5:c3:c3:16:
52:15:94:3e:a1:90:16:1e:eb:e9:18:c9:0b:70:a3:
2b:48:90:60:fa:a3:ad:1c:2a:66:95:b6:c2:d6:30:
1a:34:d8:55:d1:73:ae:82:ed:ad:82:97:90:c3:c9:
1f:43:74:7b:7f:ea:84:34:e7:ee:d0:31:3b:fa:6f:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:96:06:B1:E6:D1:36:45:21:70:3E:4D:A1:60:FF:F0:DE:E2:5F
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/aKyWBrHm0TZFIXA-TaFg__De4l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0-176.118.163.255
Signature Algorithm: sha256WithRSAEncryption
a7:2e:71:a5:dc:a8:4d:19:28:d4:76:1b:66:64:00:ea:73:d9:
ff:7b:de:47:47:43:eb:03:59:af:f0:13:8c:19:40:08:43:2e:
cc:ad:57:9b:e6:ce:7b:39:25:c9:18:aa:9b:4f:38:bb:e0:b0:
88:b0:5b:46:19:5f:cd:9e:98:ad:f5:41:16:c9:cc:3c:11:4d:
9e:f8:8c:d8:ab:42:0a:01:c2:f2:cd:d3:7e:a2:ce:ed:36:a3:
05:86:b6:7d:c9:fb:35:14:79:6e:06:82:42:a1:5c:3c:4a:c4:
d2:aa:c2:ad:a4:25:d6:d3:23:fe:3c:e6:66:91:4e:22:2a:29:
32:58:ad:41:83:7a:f2:05:56:4d:9d:82:9e:44:ed:b7:d8:ae:
f9:03:6b:b1:3c:09:59:ea:90:e5:56:59:92:1c:bb:e1:bd:ae:
79:6c:60:81:1b:a0:1a:37:17:d8:2f:7d:3c:9b:36:e8:44:d0:
34:44:4b:ab:ce:9b:37:1f:92:b8:af:75:77:ba:05:fe:c5:27:
85:85:43:37:7b:4b:ab:32:6a:08:ec:de:ff:d0:e1:5e:92:49:
20:da:30:26:bc:09:ab:4f:55:04:26:2b:77:34:1c:b9:4e:55:
25:1f:00:0d:73:64:ba:de:39:54:9e:13:27:e3:23:cd:70:13:
d1:40:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 09:05:47 2023 by rpki-client on console-ams.rpki-client.org