Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/fXJtNs_mKzRJEeSaW3bYC2SyP78.roa
File: fXJtNs_mKzRJEeSaW3bYC2SyP78.roa (raw, json)
Hash identifier: shkkxZEFUc5AiLCGRZjVuh4V40ISJfDFufQP0TQymro=
Subject key identifier: 7D:72:6D:36:CF:E6:2B:34:49:11:E4:9A:5B:76:D8:0B:64:B2:3F:BF
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 0189C07C98E8E2849C8E5C9F7F0715847CB3
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/fXJtNs_mKzRJEeSaW3bYC2SyP78.roa
Signing time: Fri 04 Aug 2023 12:18:58 +0000
ROA not before: Fri 04 Aug 2023 12:18:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.118.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:7c:98:e8:e2:84:9c:8e:5c:9f:7f:07:15:84:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Aug 4 12:18:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d726d36cfe62b344911e49a5b76d80b64b23fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:56:6d:e7:cb:17:46:0a:43:38:9f:7b:95:
4a:25:12:f5:9c:b4:84:0a:88:5c:94:8b:a3:41:df:
b0:d3:7d:12:92:71:5c:ac:61:bd:2e:8a:bb:5c:a8:
be:0f:cf:0e:be:41:9f:6a:62:66:5a:fb:79:df:89:
99:94:ba:7d:5a:33:63:70:6d:1a:81:46:c8:e3:f9:
82:d4:07:c4:f6:ae:24:b2:23:dc:03:05:73:5f:87:
34:64:cc:e3:a4:2e:e3:a0:1b:59:b1:66:39:cd:a1:
1f:d6:3b:23:93:e7:ff:b6:32:6a:37:a4:34:0d:d0:
67:93:bf:4a:31:40:77:3b:fa:8e:6e:9d:8b:a5:37:
43:c3:96:69:b8:b3:94:9d:93:1d:37:1f:59:92:67:
b5:c8:23:fc:f2:54:d3:b2:de:87:1b:3c:f2:8a:0c:
34:e7:42:7d:50:a6:97:20:f9:69:61:11:c4:25:a2:
5f:24:f2:ba:a3:cd:07:7a:27:0d:ef:6f:8d:4e:82:
c4:08:b6:34:44:6b:89:52:b8:fd:ce:9f:67:b0:00:
96:d7:a6:5e:83:5a:15:7e:98:fb:f4:07:9f:51:77:
9a:52:8f:66:09:87:0e:95:b9:bb:53:6c:b7:8e:f3:
ea:cd:d8:3f:3a:8f:17:74:6d:9e:b8:9b:ac:a1:b8:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:72:6D:36:CF:E6:2B:34:49:11:E4:9A:5B:76:D8:0B:64:B2:3F:BF
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/fXJtNs_mKzRJEeSaW3bYC2SyP78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.162.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fb:72:33:9c:aa:07:ae:64:f3:86:3f:66:5a:6a:9c:ad:ec:
d0:63:0d:44:3b:8b:a0:63:e9:ea:bd:0e:82:d0:45:1b:8e:2f:
8f:43:98:62:f9:15:15:2a:f8:5a:74:f6:5c:9e:df:73:e4:71:
bf:15:ee:5a:fd:49:7c:50:60:df:0b:a3:c4:b3:26:3c:a8:8a:
b2:f4:fd:89:12:3c:c5:63:26:3f:a5:50:f5:cc:b7:0f:fe:bd:
36:00:4c:50:dd:56:f0:15:f9:da:02:9e:34:31:09:84:51:37:
1e:a7:9a:e0:7a:c3:bb:a1:91:17:c1:56:52:37:7f:d4:73:5f:
02:7d:6d:c0:7f:6a:6f:a7:00:95:ba:a1:7f:03:5f:e4:64:1b:
21:b0:1e:21:03:03:07:1d:aa:bc:09:ad:32:a7:85:73:2c:76:
c3:bc:71:cc:1a:96:55:25:a0:dc:ab:13:97:d0:f2:28:51:48:
9f:fe:34:fe:74:af:68:37:80:5e:b1:72:1b:21:ad:47:f4:50:
f3:a5:c9:f0:de:ce:78:a0:1a:7c:17:78:6a:94:e8:c8:f3:29:
81:4d:90:82:03:11:a7:5d:db:61:4f:15:b1:6d:ff:f0:63:b9:
ad:c5:17:19:c8:36:44:9b:ec:f1:d5:d5:f1:53:25:31:14:a7:
5d:70:9f:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnAfJjo4oScjlyffwcVhHyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWE5ZjE0Zjk3ZDRkYWQ4YzAwNGMyNTNhNWUxY2U3Yzdk
ZDdjNGIwHhcNMjMwODA0MTIxODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDcyNmQzNmNmZTYyYjM0NDkxMWU0OWE1Yjc2ZDgwYjY0YjIzZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqppWbefLF0YKQzife5VKJRL1nLSE
CohclIujQd+w030SknFcrGG9Loq7XKi+D88OvkGfamJmWvt534mZlLp9WjNjcG0a
gUbI4/mC1AfE9q4ksiPcAwVzX4c0ZMzjpC7joBtZsWY5zaEf1jsjk+f/tjJqN6Q0
DdBnk79KMUB3O/qObp2LpTdDw5ZpuLOUnZMdNx9Zkme1yCP88lTTst6HGzzyigw0
50J9UKaXIPlpYRHEJaJfJPK6o80HeicN72+NToLECLY0RGuJUrj9zp9nsACW16Ze
g1oVfpj79AefUXeaUo9mCYcOlbm7U2y3jvPqzdg/Oo8XdG2euJusobgL6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1ybTbP5is0SRHkmlt22Atksj+/MB8GA1UdIwQY
MBaAFJ2qnxT5fU2tjABMJTpeHOfH3XxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2Nzct
NDE0MDEwMDhhNzBjLzEvZlhKdE5zX21LelJKRWVTYVczYllDMlN5UDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2NzctNDE0MDEwMDhhNzBj
LzEvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHaiMA0G
CSqGSIb3DQEBCwUAA4IBAQBg+3IznKoHrmTzhj9mWmqcrezQYw1EO4ugY+nqvQ6C
0EUbji+PQ5hi+RUVKvhadPZcnt9z5HG/Fe5a/Ul8UGDfC6PEsyY8qIqy9P2JEjzF
YyY/pVD1zLcP/r02AExQ3VbwFfnaAp40MQmEUTcep5rgesO7oZEXwVZSN3/Uc18C
fW3Af2pvpwCVuqF/A1/kZBshsB4hAwMHHaq8Ca0yp4VzLHbDvHHMGpZVJaDcqxOX
0PIoUUif/jT+dK9oN4BesXIbIa1H9FDzpcnw3s54oBp8F3hqlOjI8ymBTZCCAxGn
XdthTxWxbf/wY7mtxRcZyDZEm+zx1dXxUyUxFKddcJ8k
-----END CERTIFICATE-----
Generated at Wed Sep 13 12:32:34 2023 by rpki-client on console-ams.rpki-client.org