Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/uDAak8ggw7i0oHbaYAJ8oBsoBAA.roa
File: uDAak8ggw7i0oHbaYAJ8oBsoBAA.roa (raw, json)
Hash identifier: ftSzZWbMxbQMiBEfoLuMXcQXoUfZZQX+U+CzShI3ntw=
Subject key identifier: B8:30:1A:93:C8:20:C3:B8:B4:A0:76:DA:60:02:7C:A0:1B:28:04:00
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018AEF88942D79F0D66B835C48E970E3571D
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/uDAak8ggw7i0oHbaYAJ8oBsoBAA.roa
Signing time: Mon 02 Oct 2023 08:37:00 +0000
ROA not before: Mon 02 Oct 2023 08:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 176.118.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:88:94:2d:79:f0:d6:6b:83:5c:48:e9:70:e3:57:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Oct 2 08:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8301a93c820c3b8b4a076da60027ca01b280400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:2f:22:35:81:03:ac:e5:c1:57:dd:15:f6:
f8:e0:5f:e3:e4:df:7c:0f:09:49:71:7f:d6:1c:fc:
d9:e5:89:ab:a1:95:65:88:dc:4d:0b:ce:a3:b8:bd:
66:65:57:75:c4:d2:e6:7c:46:c9:f0:4d:08:62:28:
dd:aa:e5:41:9f:eb:03:13:bd:b3:49:cc:d5:e8:c8:
3d:6d:18:d1:5c:27:d9:78:dc:24:72:c7:fb:fd:74:
d2:96:95:0e:d8:a7:c4:47:af:79:ef:71:4b:d4:4c:
7f:77:3a:e5:ae:2c:02:3d:31:55:9d:c9:60:ec:b3:
a1:00:06:d0:3a:19:ff:f5:34:85:bb:a3:8b:bc:3b:
41:e1:7e:ea:95:18:4d:dd:5c:74:fc:24:10:88:df:
74:99:4c:d2:77:68:3c:6c:71:1c:7a:9b:dc:9e:9b:
8d:bf:40:7e:0e:66:a1:86:c0:b6:35:ce:47:f1:48:
9b:23:5d:23:f1:00:eb:ad:2d:10:07:33:f3:b3:56:
5a:e3:2a:6e:90:5e:e8:da:6b:ba:ca:b4:85:b0:da:
b6:00:27:8f:de:19:18:b4:3c:7e:29:13:44:9e:fd:
c7:50:95:ac:dc:91:72:52:f5:c3:b8:5d:c1:79:78:
b4:b9:fe:ab:8b:71:1a:ba:da:57:ab:03:8d:5b:bd:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:1A:93:C8:20:C3:B8:B4:A0:76:DA:60:02:7C:A0:1B:28:04:00
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/uDAak8ggw7i0oHbaYAJ8oBsoBAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ae:7b:07:86:7f:15:d0:45:7e:a5:62:c7:89:c8:5a:23:ed:
7c:77:1d:33:57:02:05:78:2b:e9:58:6d:8f:84:be:b9:9c:c4:
bd:18:27:4a:53:93:70:f4:e4:30:1a:e5:74:cf:cf:c2:4b:d0:
f0:0b:1c:d6:c7:7d:21:6b:d5:20:29:b4:8e:71:99:ff:73:79:
ee:b9:cb:34:a7:99:fd:57:3f:ec:c7:f5:43:10:6b:11:33:20:
e8:a1:6e:c0:e4:4b:42:aa:6e:d5:f2:bf:3b:54:50:80:c1:5d:
a8:21:22:c0:1c:c9:14:fa:5d:69:c4:a1:49:26:4e:d2:a7:2b:
b6:89:b6:70:b2:40:7d:c5:42:ad:d6:8b:f7:31:64:fd:9d:33:
21:4e:94:64:37:6d:5b:dc:87:3c:ac:9b:4f:9f:45:25:91:8b:
72:a6:b2:12:60:e2:02:72:27:d6:01:d1:2f:d4:35:63:dd:ae:
5b:27:d4:40:fe:41:b8:47:4b:39:af:62:e7:52:89:b5:60:f6:
91:48:71:b0:98:8c:48:e5:0f:7d:5c:bf:fd:46:64:c8:96:03:
ef:dd:9c:3a:84:53:0e:bd:af:b3:25:4b:6c:9a:b2:ed:fd:76:
00:0c:2a:b9:c0:ed:3b:6e:21:ae:4f:6a:ec:95:a5:99:30:6c:
63:ba:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 08:53:26 2023 by rpki-client on console-fra.rpki-client.org