Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/R9syaFAQyO-a9cV6F7SCrX2Xmiw.roa
File: R9syaFAQyO-a9cV6F7SCrX2Xmiw.roa (raw, json)
Hash identifier: 03FyxaEgcF4UE5ThWxxo9sH/KSfmeYsXxmp2z1tpHqw=
Subject key identifier: 47:DB:32:68:50:10:C8:EF:9A:F5:C5:7A:17:B4:82:AD:7D:97:9A:2C
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 018C96C0F9676285BA5DBBB507B64CAD7E23
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/R9syaFAQyO-a9cV6F7SCrX2Xmiw.roa
Signing time: Sat 23 Dec 2023 12:57:58 +0000
ROA not before: Sat 23 Dec 2023 12:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57333
IP address blocks: 176.97.160.0/19 maxlen: 19
176.97.160.0/21 maxlen: 21
176.97.168.0/21 maxlen: 21
176.97.176.0/21 maxlen: 21
176.97.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:c0:f9:67:62:85:ba:5d:bb:b5:07:b6:4c:ad:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Dec 23 12:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47db32685010c8ef9af5c57a17b482ad7d979a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:7f:82:22:e0:85:3e:ad:62:0a:2e:89:0f:
b3:1e:d3:da:c5:ea:43:9a:f9:56:4f:c3:73:30:0c:
3b:de:72:b6:2d:23:2f:9d:ea:46:67:e8:2f:fb:3f:
ce:e5:74:b9:89:40:69:87:cd:ff:6a:ad:05:e2:e0:
58:93:63:55:5e:9c:f3:40:b8:89:5d:39:bc:8f:5e:
04:14:c6:59:2c:f5:a9:46:b8:5b:76:b3:e4:f9:27:
15:cb:91:6d:c3:7a:62:43:7e:6b:75:50:cf:a9:a9:
69:cf:4c:3c:53:17:8e:b9:f6:48:97:67:0c:aa:cc:
6b:4d:ec:d7:2f:55:8e:98:c8:d6:33:1c:0d:31:02:
a8:2e:a2:f0:cf:4b:93:bd:d1:5e:d4:e3:a1:05:60:
0c:62:f0:c3:69:41:37:20:09:11:43:8c:9f:1a:34:
60:44:1b:8a:1f:15:11:9a:58:22:9a:c7:71:dd:c7:
27:3b:c5:57:37:a0:eb:fe:7e:b3:d3:f3:af:29:a0:
9c:d7:d5:78:53:0f:f8:07:17:87:f7:ed:07:ec:09:
08:95:35:65:e1:24:19:dd:18:cc:9b:d3:21:e8:b1:
f1:34:81:6a:59:c8:95:b8:c5:78:57:46:b3:1d:4b:
1f:4d:4e:7b:cd:66:d3:6e:d7:2e:8b:ef:4b:73:8d:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:32:68:50:10:C8:EF:9A:F5:C5:7A:17:B4:82:AD:7D:97:9A:2C
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/R9syaFAQyO-a9cV6F7SCrX2Xmiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:72:d8:51:30:34:26:d4:bb:b4:48:6e:89:e3:57:9a:57:6e:
74:32:f2:9c:99:68:90:d5:1f:ed:51:30:14:af:c3:3c:f4:85:
e8:c4:2d:c6:67:a2:80:8f:e6:07:e7:8e:73:a9:29:e7:d5:76:
22:4f:d7:46:10:7a:c7:a8:02:2e:ad:21:44:85:7b:c9:bb:87:
63:33:b3:c8:e1:f5:8a:77:01:15:d4:8a:4d:83:60:85:61:4d:
a3:78:da:4f:f2:52:4d:2e:fb:d6:6b:1d:a7:46:d8:16:94:9e:
a0:71:f3:b9:fe:2d:8f:6b:d8:e6:df:93:5f:17:c1:a9:0b:82:
eb:01:c4:06:e2:23:17:2f:35:20:c0:7f:ca:63:5b:58:70:a6:
61:6d:6d:df:d7:fe:67:ac:e2:f7:63:07:dc:83:3a:73:6f:d9:
e2:4c:0b:d0:c9:ec:42:cb:71:48:83:29:7d:4d:ae:4a:4b:65:
97:68:f7:1a:8d:ff:81:7b:92:ef:07:9f:9e:b1:91:0b:a2:2b:
8e:5a:cd:1e:1f:39:d0:e6:20:3d:6b:bd:4a:97:be:71:d6:fd:
58:4e:6c:30:c5:9c:94:3d:bf:16:a4:53:95:5d:26:ac:d6:50:
c9:a3:df:9f:6b:dd:a2:c8:78:ee:d4:5b:c0:cb:3c:d0:f0:45:
ab:62:2e:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyWwPlnYoW6Xbu1B7ZMrX4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDZjOWNjZjdmZjdiZGNjZjgzNzc2MmEwZTE1N2JkYzEz
NTcwZTAwHhcNMjMxMjIzMTI1NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2RiMzI2ODUwMTBjOGVmOWFmNWM1N2ExN2I0ODJhZDdkOTc5YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9E1/giLghT6tYgouiQ+zHtPaxepD
mvlWT8NzMAw73nK2LSMvnepGZ+gv+z/O5XS5iUBph83/aq0F4uBYk2NVXpzzQLiJ
XTm8j14EFMZZLPWpRrhbdrPk+ScVy5Ftw3piQ35rdVDPqalpz0w8UxeOufZIl2cM
qsxrTezXL1WOmMjWMxwNMQKoLqLwz0uTvdFe1OOhBWAMYvDDaUE3IAkRQ4yfGjRg
RBuKHxURmlgimsdx3ccnO8VXN6Dr/n6z0/OvKaCc19V4Uw/4BxeH9+0H7AkIlTVl
4SQZ3RjMm9Mh6LHxNIFqWciVuMV4V0azHUsfTU57zWbTbtcui+9Lc43SQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfbMmhQEMjvmvXFehe0gq19l5osMB8GA1UdIwQY
MBaAFCtGycz3/3vcz4N3YqDhV73BNXDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5Njgt
YzdhMmQ1ZjlmZDYwLzEvUjlzeWFGQVF5Ty1hOWNWNkY3U0NyWDJYbWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5NjgtYzdhMmQ1ZjlmZDYw
LzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGGgMA0G
CSqGSIb3DQEBCwUAA4IBAQChcthRMDQm1Lu0SG6J41eaV250MvKcmWiQ1R/tUTAU
r8M89IXoxC3GZ6KAj+YH545zqSnn1XYiT9dGEHrHqAIurSFEhXvJu4djM7PI4fWK
dwEV1IpNg2CFYU2jeNpP8lJNLvvWax2nRtgWlJ6gcfO5/i2Pa9jm35NfF8GpC4Lr
AcQG4iMXLzUgwH/KY1tYcKZhbW3f1/5nrOL3Ywfcgzpzb9niTAvQyexCy3FIgyl9
Ta5KS2WXaPcajf+Be5LvB5+esZELoiuOWs0eHznQ5iA9a71Kl75x1v1YTmwwxZyU
Pb8WpFOVXSas1lDJo9+fa92iyHju1FvAyzzQ8EWrYi6x
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:00 2024 by rpki-client on console.sobornost.net