Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/iwUV-TGHZ4gwEQREeoFaqOl3a28.roa
File: iwUV-TGHZ4gwEQREeoFaqOl3a28.roa (raw, json)
Hash identifier: CW3QoZuXWZlF4wGcMK9SjsUgdDJvvhgwD3HT5wZUqtc=
Subject key identifier: 8B:05:15:F9:31:87:67:88:30:11:04:44:7A:81:5A:A8:E9:77:6B:6F
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 01856EB9269E398B0E432E710877BB3C57F6
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/iwUV-TGHZ4gwEQREeoFaqOl3a28.roa
Signing time: Sun 01 Jan 2023 19:05:05 +0000
ROA not before: Sun 01 Jan 2023 19:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204463
IP address blocks: 176.98.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:26:9e:39:8b:0e:43:2e:71:08:77:bb:3c:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: Jan 1 19:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b0515f931876788301104447a815aa8e9776b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:84:1c:de:f8:b8:1f:96:c8:c8:aa:a8:ac:
9f:42:53:9b:1f:35:c8:63:af:9c:0f:29:a6:ce:6c:
31:2f:77:40:fa:31:61:43:e8:65:f3:33:b7:27:4d:
7d:1f:ff:fa:15:2c:e2:91:c5:98:a4:e0:41:8f:66:
ca:7b:a0:ad:d2:ef:75:90:e4:dd:00:59:33:4c:8d:
95:62:bc:ee:a1:4e:a8:b9:64:d2:ae:28:fa:ee:d2:
6a:12:68:18:2d:ee:98:ae:e6:49:d7:f4:25:db:35:
1d:26:4e:99:61:ed:b6:88:2f:d0:f4:35:57:4a:b0:
d0:5e:8a:78:50:49:4c:87:34:45:6d:fd:c9:3c:5b:
c8:4b:b8:1b:45:d5:e8:67:6b:16:5c:fe:a5:98:f7:
23:4d:ec:ab:42:e4:4e:d7:fc:bd:16:2b:51:9a:2a:
3d:8e:c9:f7:02:eb:f5:f5:54:01:a6:54:b1:07:3f:
62:f7:b4:26:95:6c:e9:0e:e8:07:6a:4d:94:c9:c7:
cc:86:91:10:8a:10:23:53:e5:c0:33:84:6d:97:dc:
bf:e7:d7:18:d2:62:c8:b9:aa:11:73:ea:14:29:a4:
ca:52:a5:d7:ba:c1:8c:ed:65:19:9d:fd:5b:58:2d:
ab:70:4d:52:23:ee:92:1a:54:a8:06:95:a6:b0:18:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:05:15:F9:31:87:67:88:30:11:04:44:7A:81:5A:A8:E9:77:6B:6F
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/iwUV-TGHZ4gwEQREeoFaqOl3a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ce:7e:52:1a:8b:92:6a:1c:f7:3e:70:62:3f:f1:76:9a:64:
5c:3b:dd:62:d1:ce:30:13:3d:31:01:37:b3:6a:c2:5a:54:82:
2d:4f:c0:41:5c:43:db:45:7f:5c:e6:77:d9:e5:83:c2:d1:e6:
a1:8a:0e:51:5f:95:84:e5:b3:41:d6:7d:43:20:0b:84:9a:12:
b5:cb:59:76:23:e1:9c:f3:d6:bd:0f:08:49:bb:04:da:ee:52:
12:e4:d0:57:e3:5c:8f:78:ab:55:22:05:b5:f2:0a:6d:d2:f5:
1f:86:36:1f:fb:b5:06:70:00:0a:04:0e:24:56:3c:87:6c:7f:
77:27:4b:76:87:2e:8f:be:40:87:70:55:5d:70:b3:d7:67:b3:
e3:01:99:06:7e:12:12:f0:a2:49:7e:11:39:27:48:55:c8:49:
b4:83:e0:c1:7a:c3:8c:85:13:c9:cf:9b:c8:ad:0d:3e:10:03:
af:b1:4f:52:67:6d:6a:c4:66:bd:5f:99:ee:2c:69:5c:6b:90:
51:3c:81:c6:e6:5b:e3:1a:a4:68:11:82:d9:1a:0f:d0:bf:18:
b7:b7:2b:a2:60:80:0e:8d:f6:84:99:ac:1c:5c:15:74:1d:55:
8f:0b:04:c2:92:b7:3c:55:7f:48:0f:b7:7a:d7:ae:77:10:bd:
83:96:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:07 2024 by rpki-client on console.sobornost.net