Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Oee8IfFvd4U4LyQqnRfHqJSKh-Y.roa
File: Oee8IfFvd4U4LyQqnRfHqJSKh-Y.roa (raw, json)
Hash identifier: ew4VwV20NP+V1XTAgANup35f6gxvJYoHwTnjbFpXpK4=
Subject key identifier: 39:E7:BC:21:F1:6F:77:85:38:2F:24:2A:9D:17:C7:A8:94:8A:87:E6
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018572C377DD326E6009D790696855CC0C30
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Oee8IfFvd4U4LyQqnRfHqJSKh-Y.roa
Signing time: Mon 02 Jan 2023 13:54:50 +0000
ROA not before: Mon 02 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62047
IP address blocks: 176.126.57.0/24 maxlen: 24
176.126.59.0/24 maxlen: 24
178.216.40.0/21 maxlen: 21
2001:7f8:5b::/48 maxlen: 48
2001:67c:778::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:77:dd:32:6e:60:09:d7:90:69:68:55:cc:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 2 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39e7bc21f16f7785382f242a9d17c7a8948a87e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:59:a9:08:9f:37:06:26:e9:b8:9a:0e:e3:
44:34:f3:e6:27:d8:94:c9:4b:54:00:a4:ce:fa:8e:
63:40:b8:36:50:91:50:37:dc:e4:45:7b:38:03:7a:
ed:64:c5:e4:6a:9b:7b:2e:bb:5a:b0:0e:0a:06:89:
3e:d9:33:c1:44:d1:36:2e:a7:2e:a6:aa:e1:59:5f:
82:41:f1:38:c3:43:ac:c1:d8:0e:e7:dc:a3:2a:db:
cd:85:0a:90:d3:7e:94:12:51:68:78:d9:9b:5b:c2:
b8:b7:15:0c:8f:01:b0:17:35:62:92:e3:75:2a:15:
e6:0a:1f:96:60:75:d1:9c:8a:9f:92:3c:59:fd:07:
26:2b:be:4a:8e:aa:56:07:35:c1:26:a2:c4:5c:51:
0f:94:e9:fa:a3:bf:15:ff:13:5a:08:7a:73:13:09:
ee:ee:ef:c7:a5:ec:56:dc:77:c1:4a:89:05:82:49:
95:fe:58:a5:2c:26:d0:1c:47:af:de:cd:d7:5e:6e:
bf:30:ff:43:49:71:3c:00:73:73:9a:6e:27:0e:83:
4c:8b:50:f3:f4:da:57:0c:0b:45:26:42:d1:97:a1:
08:53:48:03:5a:3e:6f:4e:20:8f:42:cc:f5:a0:58:
de:44:cd:8f:c6:c1:ff:7d:4a:cb:3f:74:5f:17:3a:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E7:BC:21:F1:6F:77:85:38:2F:24:2A:9D:17:C7:A8:94:8A:87:E6
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Oee8IfFvd4U4LyQqnRfHqJSKh-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.57.0/24
176.126.59.0/24
178.216.40.0/21
IPv6:
2001:67c:778::/48
2001:7f8:5b::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ad:0a:03:71:e7:55:85:35:ef:a6:ef:c8:82:5a:11:e7:28:
be:9b:a4:11:d6:d3:6b:0b:6a:bf:58:98:66:0e:16:31:9d:ca:
71:0d:9d:d1:d3:54:d7:db:06:42:5d:74:54:2f:13:db:fc:9a:
89:b2:a7:ba:9e:bb:52:87:55:4a:2e:1a:18:d2:0a:73:ad:b2:
41:48:df:8b:26:06:00:57:74:dd:3a:f0:36:cd:07:5e:74:89:
cf:36:5c:cb:f0:66:ff:53:18:b6:e2:85:23:06:36:76:d2:10:
c2:f6:38:0f:3a:4c:58:a1:6d:b8:d2:9f:24:95:3b:61:b0:64:
5f:a1:23:70:13:ca:16:ac:ec:3c:47:b9:73:81:3d:b7:6b:29:
ab:12:45:99:74:6c:0d:7d:86:20:f6:c8:42:ac:ec:a2:b7:87:
9f:63:fd:ad:2f:2b:12:71:9e:d6:ce:ef:f3:2e:8a:f0:c5:28:
e0:59:31:0a:cd:70:a8:1b:0b:83:0f:5e:b9:72:7f:f0:38:02:
3e:01:93:66:9d:c5:af:ec:b7:6d:81:d8:d1:26:21:55:34:c5:
68:f3:ed:6e:a5:2d:08:4b:ac:07:ae:59:ae:2f:3d:7b:72:51:
64:db:09:5f:11:6a:e4:9e:e1:a5:44:a7:71:11:b6:67:f3:d9:
67:14:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 11:59:48 2023 by rpki-client on console-ams.rpki-client.org