Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/n4WYOKwtywp0ZoucFrXV4sCOQJs.roa
File: n4WYOKwtywp0ZoucFrXV4sCOQJs.roa (raw, json)
Hash identifier: HaQk7E4FcKuq8+5b/ZfnSoi5nIKp3bsogW+A9LdNWLQ=
Subject key identifier: 9F:85:98:38:AC:2D:CB:0A:74:66:8B:9C:16:B5:D5:E2:C0:8E:40:9B
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 0185BF0C1A5D632F3B56456A7DBE7FFD98F1
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/n4WYOKwtywp0ZoucFrXV4sCOQJs.roa
Signing time: Tue 17 Jan 2023 09:25:19 +0000
ROA not before: Tue 17 Jan 2023 09:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 176.118.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:0c:1a:5d:63:2f:3b:56:45:6a:7d:be:7f:fd:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Jan 17 09:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f859838ac2dcb0a74668b9c16b5d5e2c08e409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:d5:69:fd:ca:94:f3:a0:21:4c:b0:48:40:
19:54:16:2e:8a:2c:27:7b:d7:1c:00:a6:3d:9b:f7:
c0:01:1c:eb:76:f7:0b:fa:46:f6:cf:b0:a4:da:15:
ba:90:17:d7:df:12:18:ce:7f:b2:44:de:a2:a1:9d:
e1:7d:32:28:b4:df:f3:b6:30:2e:bc:8e:19:25:25:
0d:7d:59:49:de:0d:62:19:26:79:28:f7:03:12:58:
ce:79:c4:70:ce:7b:c7:a0:5e:d4:dd:d7:9f:48:71:
f9:4a:0f:9d:01:44:4e:57:6d:3e:3c:7d:62:80:23:
c5:92:f7:d6:86:c8:3b:cc:be:d2:fb:27:0f:94:fa:
3d:af:8b:70:18:e1:6f:8c:04:42:41:91:46:da:fd:
70:89:59:05:d5:44:67:3e:13:87:f5:f8:cd:ce:71:
87:dd:d7:4a:d1:04:f4:79:9f:7c:d4:1e:6a:41:ba:
1b:84:fd:66:b2:60:37:d7:a4:58:53:95:09:3f:e5:
ed:b6:fa:56:ea:89:f5:dc:7e:2c:31:bf:8e:ad:a8:
7e:17:35:f0:0f:48:f2:a1:4b:95:0a:b2:8c:2d:6c:
93:cf:f5:1f:86:f1:29:ca:bd:cf:a1:66:73:78:b1:
f2:00:a6:2c:86:b7:52:5f:c3:d8:f5:12:f0:ce:9d:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:98:38:AC:2D:CB:0A:74:66:8B:9C:16:B5:D5:E2:C0:8E:40:9B
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/n4WYOKwtywp0ZoucFrXV4sCOQJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e6:67:8b:df:c4:6b:f1:0d:fe:06:db:23:07:5c:db:15:a2:
0b:5a:2e:fc:54:f5:c7:7f:f3:84:ae:18:c5:4d:d4:7d:c4:72:
79:04:46:71:bf:72:3a:72:0b:a8:85:e2:d6:08:43:f1:e9:61:
38:e1:b2:04:66:0e:33:f3:17:ac:f8:c6:02:15:f7:93:a3:81:
dd:ad:b8:dd:81:cd:df:e3:c3:51:61:c0:bc:a0:24:f1:73:21:
cc:e3:72:62:b7:85:90:ef:06:4d:ff:ad:7e:c1:4c:63:c1:47:
6a:df:54:3d:3a:49:4c:99:6e:ff:95:8c:6d:18:82:f4:63:55:
16:16:d4:ac:b6:9c:13:ae:b0:0d:b2:37:e4:61:44:8b:71:8c:
d9:26:1d:86:8c:76:f3:bc:31:d0:26:ad:d1:db:c9:b2:c3:0d:
ce:ab:07:02:c4:0f:18:a0:fb:1e:14:1a:0c:9c:98:82:4c:19:
c5:c9:17:44:b9:7e:e7:63:fb:8b:3b:59:cf:b8:29:60:82:b3:
cf:fb:42:29:c0:c4:47:57:57:a2:94:28:9f:27:bf:19:49:4c:
b7:4c:6a:80:f3:d7:81:9f:34:76:43:a7:6f:eb:5b:81:5b:84:
5c:74:cb:ff:df:55:8a:1a:d8:9d:1a:42:cc:27:16:88:f1:ab:
0d:9d:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-fra.rpki-client.org