Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/Yj-2AV6WDWfbhZbe52NGKDbO5Ag.roa
File: Yj-2AV6WDWfbhZbe52NGKDbO5Ag.roa (raw, json)
Hash identifier: yM9CFp+QG4L/c7fAy3Hb/VeygbSoDfYpv+TscAkzyFs=
Subject key identifier: 62:3F:B6:01:5E:96:0D:67:DB:85:96:DE:E7:63:46:28:36:CE:E4:08
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 018CC348E1C16EC915766A9601ED81E08BC0
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/Yj-2AV6WDWfbhZbe52NGKDbO5Ag.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48276
IP address blocks: 176.96.184.0/22 maxlen: 24
176.96.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 11:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e1:c1:6e:c9:15:76:6a:96:01:ed:81:e0:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=623fb6015e960d67db8596dee763462836cee408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:5b:66:86:4a:fd:75:a4:e1:34:17:f9:c9:
56:48:59:d9:d7:dc:03:0e:58:ff:33:02:db:71:06:
20:08:2a:80:66:01:56:50:b7:7c:c4:00:bf:bf:de:
86:a4:f0:8f:27:b8:b1:7f:1c:77:7f:40:6d:98:18:
62:b0:e0:d7:00:43:e8:a4:d6:07:6d:49:bc:88:37:
f7:5d:96:0f:00:99:5d:e7:7d:b1:66:a1:17:cd:6f:
43:04:18:11:8e:ff:9e:cd:46:60:52:d2:13:59:38:
81:3b:94:91:ca:c0:a1:24:1c:72:f6:ac:54:3b:91:
22:c2:31:6c:82:0f:3e:f2:6f:86:d5:0a:e3:c6:95:
b5:ee:58:fa:1a:52:95:da:68:2f:c2:20:b6:c4:95:
d1:60:44:7e:5b:aa:7f:04:f1:81:b8:ae:47:d1:cf:
2b:3a:c7:9d:89:c6:6b:d4:84:0f:e0:1a:4c:70:8a:
bb:44:ec:34:00:58:d9:2c:36:d7:7a:1d:54:1b:f4:
bf:44:2a:58:6d:a5:70:0f:ac:42:c8:2c:26:ee:42:
e8:1a:62:1c:9b:6f:b2:ad:3e:18:b2:0d:f5:c8:42:
a8:97:7e:64:b1:7c:4a:88:0d:f4:60:0a:ff:98:c8:
54:c1:24:c4:fd:eb:ee:53:6c:ee:b8:5f:f5:16:9b:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:B6:01:5E:96:0D:67:DB:85:96:DE:E7:63:46:28:36:CE:E4:08
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/Yj-2AV6WDWfbhZbe52NGKDbO5Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.184.0-176.96.188.255
Signature Algorithm: sha256WithRSAEncryption
27:b7:99:26:b5:0a:01:8a:a7:c9:6b:87:56:59:73:66:a1:16:
84:ed:61:a3:f4:88:00:ac:75:a5:1c:1c:1a:d8:f6:95:af:8b:
bf:f6:33:48:80:4f:c7:3c:59:14:58:7e:32:fe:34:fd:8b:ca:
5f:68:69:4c:28:0f:e3:7a:ae:3a:14:19:5e:5a:f6:92:c3:e6:
6a:61:b7:6e:a7:a7:e5:1c:00:f3:98:ec:05:0e:91:dd:ab:61:
bd:d9:84:cf:9d:5f:1a:5a:f4:31:c7:3b:7a:90:1e:ae:2b:6a:
13:5f:63:27:f2:af:42:a8:d9:8f:1b:47:25:ff:d1:27:ab:22:
1e:22:2f:f5:b0:73:e2:5c:b2:d8:63:fb:f4:54:dd:2b:18:93:
e4:cd:71:fa:96:68:dd:01:de:a4:1e:61:16:13:2c:8d:a1:c4:
77:53:c7:48:01:77:12:77:52:d1:47:ea:89:76:80:be:6b:47:
58:6f:ac:7b:05:6f:63:07:e5:c3:f4:f7:eb:e7:f5:0a:04:c1:
54:dc:e0:67:71:49:fb:c2:e7:cb:aa:14:a4:f2:96:8f:42:70:
4b:a1:b7:8b:27:dd:c5:3a:98:15:33:b7:85:72:cc:5f:54:4d:
b5:1c:0f:a9:12:aa:a5:e9:62:d6:df:51:9e:9a:59:8c:9b:17:
93:9e:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org