Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/mtRtng-Q6GYq2NOt7tdEnaeJ3io.roa
File: mtRtng-Q6GYq2NOt7tdEnaeJ3io.roa (raw, json)
Hash identifier: uTnoCLW91SevI3MPtcraWnOJnmb4HrMHsm8psujzu5g=
Subject key identifier: 9A:D4:6D:9E:0F:90:E8:66:2A:D8:D3:AD:EE:D7:44:9D:A7:89:DE:2A
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018AF4A5A82D629AEBBACD0B041C8E8085E0
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/mtRtng-Q6GYq2NOt7tdEnaeJ3io.roa
Signing time: Tue 03 Oct 2023 08:26:51 +0000
ROA not before: Tue 03 Oct 2023 08:26:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.118.163.0/24 maxlen: 24
176.118.161.0/24 maxlen: 24
176.118.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:a5:a8:2d:62:9a:eb:ba:cd:0b:04:1c:8e:80:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Oct 3 08:26:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad46d9e0f90e8662ad8d3adeed7449da789de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:12:40:1d:fd:50:5c:60:97:e3:92:49:f4:
a9:91:61:3e:0f:6b:36:75:23:2f:08:26:d5:26:95:
9a:b4:eb:72:8d:85:c1:55:27:a4:a4:ad:6f:e6:79:
5d:be:a9:94:7c:6b:75:14:43:ae:a6:de:f4:26:9c:
e8:6a:d2:45:1f:02:15:d2:97:7c:b4:63:b7:ea:5a:
4c:fd:e0:01:9e:8d:44:84:16:53:6e:74:95:cf:5e:
6a:d2:3e:c6:71:0a:62:b3:e0:d9:37:ce:b9:16:21:
4e:c7:4c:81:35:c7:17:af:0c:82:c2:2e:69:d5:8d:
d7:be:19:a6:ec:7a:c3:92:09:60:2f:d0:22:86:5f:
fb:ec:d8:07:6f:5f:6f:f8:94:bc:74:dc:2e:11:27:
0b:08:11:ec:d6:24:a5:a5:ba:b8:08:be:31:95:bf:
ef:b0:17:b1:70:72:ec:5f:74:c4:8b:e1:02:a7:4a:
9f:d5:ef:8c:38:4d:4b:04:5b:43:fd:39:bb:9f:51:
4a:c1:e9:0a:9d:6b:b0:25:1f:cf:27:0a:c0:ce:88:
7c:b0:9d:5c:1f:ad:87:9b:03:d8:56:f5:0c:48:ff:
cb:fb:ad:79:a5:72:27:27:c5:ab:a1:da:3f:d0:57:
76:0b:8c:25:a9:9c:a9:36:7b:9c:2a:cc:63:7b:29:
74:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D4:6D:9E:0F:90:E8:66:2A:D8:D3:AD:EE:D7:44:9D:A7:89:DE:2A
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/mtRtng-Q6GYq2NOt7tdEnaeJ3io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0-176.118.163.255
Signature Algorithm: sha256WithRSAEncryption
13:34:c5:ce:67:5c:c5:4d:cf:cc:52:ba:21:fe:40:af:b8:15:
1d:3f:b0:98:0c:66:97:9b:56:16:36:a8:5f:17:29:bf:fd:8d:
5a:e9:44:10:6d:91:54:7f:38:37:a9:f2:60:de:e2:e3:6b:68:
b9:73:66:b5:18:03:86:90:82:77:56:39:30:71:ad:1b:32:0b:
71:68:ae:73:55:60:eb:9b:34:1e:e6:67:b2:2f:c3:e7:20:16:
22:3e:cc:23:c2:dd:ab:e4:61:5b:da:e0:6d:e1:4b:8f:52:21:
6f:a8:66:81:44:5f:c5:c8:3b:7d:37:bd:91:fc:03:b4:09:7a:
7f:15:af:51:69:27:6a:d3:11:bf:e0:46:08:16:72:d7:5a:58:
87:6c:7d:80:d2:da:89:0f:f8:41:6d:31:da:37:f8:3d:d3:e0:
8c:3f:b2:b6:07:44:71:1b:8e:59:e8:6a:82:6d:45:64:fa:d7:
84:be:91:ec:f0:3e:d9:d0:35:a3:b5:1b:d5:f8:84:9d:19:ce:
7b:a6:fb:8b:05:ea:3d:e0:c6:91:9d:e8:49:ba:ea:5d:15:91:
9b:1f:ad:e8:69:a3:64:cc:4c:75:0d:84:53:9c:70:6a:aa:ce:
36:06:3b:2e:d0:d9:81:3a:4c:d2:0a:c6:2d:38:af:28:f1:92:
f1:8f:a5:18
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYr0pagtYprrus0LBByOgIXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWE5ZjE0Zjk3ZDRkYWQ4YzAwNGMyNTNhNWUxY2U3Yzdk
ZDdjNGIwHhcNMjMxMDAzMDgyNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWQ0NmQ5ZTBmOTBlODY2MmFkOGQzYWRlZWQ3NDQ5ZGE3ODlkZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmISQB39UFxgl+OSSfSpkWE+D2s2
dSMvCCbVJpWatOtyjYXBVSekpK1v5nldvqmUfGt1FEOupt70JpzoatJFHwIV0pd8
tGO36lpM/eABno1EhBZTbnSVz15q0j7GcQpis+DZN865FiFOx0yBNccXrwyCwi5p
1Y3Xvhmm7HrDkglgL9Aihl/77NgHb19v+JS8dNwuEScLCBHs1iSlpbq4CL4xlb/v
sBexcHLsX3TEi+ECp0qf1e+MOE1LBFtD/Tm7n1FKwekKnWuwJR/PJwrAzoh8sJ1c
H62HmwPYVvUMSP/L+615pXInJ8Wrodo/0Fd2C4wlqZypNnucKsxjeyl0sQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJrUbZ4PkOhmKtjTre7XRJ2nid4qMB8GA1UdIwQY
MBaAFJ2qnxT5fU2tjABMJTpeHOfH3XxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2Nzct
NDE0MDEwMDhhNzBjLzEvbXRSdG5nLVE2R1lxMk5PdDd0ZEVuYWVKM2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2NzctNDE0MDEwMDhhNzBj
LzEvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwdqED
BAKwdqAwDQYJKoZIhvcNAQELBQADggEBABM0xc5nXMVNz8xSuiH+QK+4FR0/sJgM
ZpebVhY2qF8XKb/9jVrpRBBtkVR/ODep8mDe4uNraLlzZrUYA4aQgndWOTBxrRsy
C3FornNVYOubNB7mZ7Ivw+cgFiI+zCPC3avkYVva4G3hS49SIW+oZoFEX8XIO303
vZH8A7QJen8Vr1FpJ2rTEb/gRggWctdaWIdsfYDS2okP+EFtMdo3+D3T4Iw/srYH
RHEbjlnoaoJtRWT614S+kezwPtnQNaO1G9X4hJ0Zznum+4sF6j3gxpGd6Em66l0V
kZsfrehpo2TMTHUNhFOccGqqzjYGOy7Q2YE6TNIKxi04ryjxkvGPpRg=
Generated at Thu Oct 5 14:59:13 2023 by rpki-client on console-fra.rpki-client.org