Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/AO1tJmLGpcD3bM3lFA2hTASfYCg.roa
File: AO1tJmLGpcD3bM3lFA2hTASfYCg.roa (raw, json)
Hash identifier: 6p+S8Zt6740ivJbn63JIIRHzmdiNCP3I+eyNh4GvOpg=
Subject key identifier: 00:ED:6D:26:62:C6:A5:C0:F7:6C:CD:E5:14:0D:A1:4C:04:9F:60:28
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 018CC6B77C67DDBE62465A79D558ABDBA24A
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/AO1tJmLGpcD3bM3lFA2hTASfYCg.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208306
IP address blocks: 176.222.63.0/24 maxlen: 24
176.222.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 14:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7c:67:dd:be:62:46:5a:79:d5:58:ab:db:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00ed6d2662c6a5c0f76ccde5140da14c049f6028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:95:cf:ad:56:33:de:d5:d9:5a:02:16:10:
74:93:07:f6:37:cd:8c:f2:fa:a3:8f:7b:62:bb:f1:
47:06:48:8c:d1:07:dd:cf:8d:bb:ce:15:84:42:3e:
ad:97:22:ce:56:eb:2b:db:b0:7d:16:76:00:45:6d:
3e:8e:9c:65:1a:5f:c5:ba:f9:78:75:39:1d:93:8c:
5b:c9:65:dc:6b:b5:40:89:0c:fe:63:26:22:5a:04:
01:7c:b7:c5:c0:4c:6b:71:e4:8f:69:e9:f8:49:99:
ad:87:00:31:74:1f:cc:d5:84:96:a8:a7:58:82:9e:
af:7b:84:33:c1:30:90:83:8b:2b:87:a4:31:26:30:
68:a6:2b:ae:6f:04:1c:09:4e:39:d1:c4:43:06:25:
f7:54:86:42:5d:ae:61:1f:36:f2:b1:74:92:44:3a:
b8:0a:82:ea:94:9e:b8:c0:fa:18:26:95:18:d9:27:
db:37:c6:8e:f4:f0:08:e0:8e:46:7f:d6:b2:6b:8b:
68:9a:85:31:39:95:44:72:d4:a2:26:03:63:d6:48:
f7:ab:15:6a:81:ed:3e:cc:ca:62:b6:f9:da:3e:6d:
44:8b:68:85:32:c0:47:26:d6:f4:cd:7f:b3:25:76:
3b:95:47:44:ec:a0:eb:f5:1d:60:cd:84:20:9a:fd:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:6D:26:62:C6:A5:C0:F7:6C:CD:E5:14:0D:A1:4C:04:9F:60:28
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/AO1tJmLGpcD3bM3lFA2hTASfYCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.61.0/24
176.222.63.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:3e:81:9e:c5:69:25:d3:4d:52:69:2e:9b:02:42:25:1d:
d5:96:65:42:17:b0:c7:5b:22:ff:1c:ac:66:80:73:b2:f3:25:
5d:08:63:0e:f8:fa:43:2d:28:3a:c1:d7:bd:81:18:32:e7:6a:
93:a2:4f:f2:60:3a:7e:6b:7c:93:83:87:a1:55:58:98:4b:40:
67:8e:2d:4d:7b:36:13:2e:55:d4:74:00:1a:47:11:49:de:7b:
70:f9:0a:98:f5:37:1e:98:0f:07:76:de:34:18:a1:4a:d0:45:
b3:d4:e2:ce:70:41:37:99:43:9d:50:20:70:37:7c:1b:ee:db:
08:fb:86:70:46:f3:6b:c3:cf:cd:8f:c4:64:93:55:80:e8:49:
fb:8f:67:14:6f:aa:d9:14:e2:f5:bc:7c:21:41:3d:2c:87:94:
28:da:8f:6d:49:0f:d2:eb:23:b0:26:74:54:54:c7:aa:2f:36:
03:a9:71:7f:c1:b4:80:0d:58:b5:97:36:43:89:e8:c7:b9:e4:
ec:af:54:a6:bc:b6:2c:17:a4:d6:d3:43:d9:3a:1a:bd:e0:d8:
ef:dc:c7:96:34:a8:62:5d:4a:c1:0f:d1:97:c1:8f:5a:87:a4:
9f:99:16:1f:44:72:c5:f9:66:4c:fe:fa:8e:e7:55:38:f7:ac:
55:1b:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:41 2024 by rpki-client on console-ams.rpki-client.org