Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_HiAfn6GytNYkWHpIUVCo_pr14g.roa
File: _HiAfn6GytNYkWHpIUVCo_pr14g.roa (raw, json)
Hash identifier: v4dmhTl2/r0nJiSivr9CksLAjFX8z1ZS743Uko54OaE=
Subject key identifier: FC:78:80:7E:7E:86:CA:D3:58:91:61:E9:21:45:42:A3:FA:6B:D7:88
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5457579CEC0E9F9F0B629252D3E0C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_HiAfn6GytNYkWHpIUVCo_pr14g.roa
Signing time: Mon 02 Jan 2023 00:15:26 +0000
ROA not before: Mon 02 Jan 2023 00:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62114
IP address blocks: 176.223.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:45:75:79:ce:c0:e9:f9:f0:b6:29:25:2d:3e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc78807e7e86cad3589161e9214542a3fa6bd788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:a4:0f:b0:5b:da:aa:2a:57:40:ee:af:9b:
e1:82:23:60:f5:44:07:eb:95:3c:4c:9a:84:8d:c6:
da:39:35:7a:9e:30:af:af:88:98:75:97:a3:43:12:
6f:80:e2:51:a6:25:94:79:fd:5b:2e:90:3b:03:45:
da:25:15:58:ef:ce:93:18:f2:f4:24:5b:b0:ab:7e:
4f:56:1d:77:c2:91:ea:0f:58:8b:9f:84:cb:30:59:
ac:e3:02:47:91:4c:95:c4:5e:19:7d:b5:31:81:c7:
ed:ae:60:68:94:89:b3:e9:69:65:55:41:73:20:34:
7f:54:79:7a:d5:a0:58:94:17:8b:44:82:99:de:46:
21:c5:02:65:f2:1f:ef:1e:09:c9:56:c6:e7:03:a5:
aa:b2:28:3d:6d:7e:81:06:c8:d9:c1:71:85:77:f4:
a6:f8:ec:81:d4:ed:c2:e8:d6:af:3f:96:42:09:be:
1e:c1:9c:81:38:b4:4c:59:75:36:8b:77:1d:c9:5c:
12:24:b1:bc:98:1d:b8:9d:b4:83:4c:27:73:f0:ed:
51:55:97:e9:80:bb:24:2b:4e:f5:43:eb:3a:ac:02:
8b:88:a4:e0:88:20:8e:7e:36:05:64:6d:04:f5:df:
5f:93:83:82:ab:0d:3a:55:2c:3e:4e:15:ff:05:0c:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:80:7E:7E:86:CA:D3:58:91:61:E9:21:45:42:A3:FA:6B:D7:88
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_HiAfn6GytNYkWHpIUVCo_pr14g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5e:6c:dc:aa:f8:6b:71:fc:1e:ce:19:49:1a:25:3c:53:6b:
d7:77:f7:60:ad:cc:ef:38:6c:bf:d7:a3:3e:a6:6a:b5:e0:09:
bb:53:4b:83:ce:76:29:05:a3:4a:37:a4:a6:4a:86:e2:0e:6e:
3c:7a:f6:74:c0:2e:5b:d6:a1:80:a3:7a:10:ad:33:81:88:cd:
38:e5:13:98:41:86:cc:27:e7:5a:1b:de:cc:bf:62:1f:a4:77:
64:9c:50:ad:1b:d5:a1:5f:5c:a5:02:c2:8f:69:e1:e2:1d:7a:
ed:e8:e6:e4:0f:f7:86:c5:24:09:10:9c:ce:b4:14:88:84:2d:
1f:4d:ac:91:26:36:47:55:59:c9:e5:bf:17:28:2f:e4:12:7d:
2d:45:8a:f7:76:68:98:0f:e4:82:cf:ba:cd:53:da:b2:b9:c5:
ac:32:11:34:05:13:65:03:ba:c7:82:6e:f5:50:b9:73:8d:ff:
b4:eb:dd:a3:7e:cb:6e:ff:57:90:d3:6c:1a:11:f2:e2:a4:f7:
cb:7d:b9:88:d1:53:a0:1b:d3:1e:2c:02:75:3a:a0:52:36:f0:
c9:af:6f:de:b0:0b:be:2e:f0:cb:82:e3:94:47:ea:a0:c4:2d:
25:07:57:44:80:f6:bf:ff:b2:ae:cd:37:45:cb:14:01:fd:6a:
62:54:bf:47
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1UV1ec7A6fnwtiklLT4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzc4ODA3ZTdlODZjYWQzNTg5MTYxZTkyMTQ1NDJhM2ZhNmJkNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15GkD7Bb2qoqV0Dur5vhgiNg9UQH
65U8TJqEjcbaOTV6njCvr4iYdZejQxJvgOJRpiWUef1bLpA7A0XaJRVY786TGPL0
JFuwq35PVh13wpHqD1iLn4TLMFms4wJHkUyVxF4ZfbUxgcftrmBolImz6WllVUFz
IDR/VHl61aBYlBeLRIKZ3kYhxQJl8h/vHgnJVsbnA6Wqsig9bX6BBsjZwXGFd/Sm
+OyB1O3C6NavP5ZCCb4ewZyBOLRMWXU2i3cdyVwSJLG8mB24nbSDTCdz8O1RVZfp
gLskK071Q+s6rAKLiKTgiCCOfjYFZG0E9d9fk4OCqw06VSw+ThX/BQyrXwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPx4gH5+hsrTWJFh6SFFQqP6a9eIMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL19IaUFmbjZHeXROWWtXSHBJVVZDb19wcjE0Zy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACw30Aw
DQYJKoZIhvcNAQELBQADggEBALJebNyq+Gtx/B7OGUkaJTxTa9d392CtzO84bL/X
oz6marXgCbtTS4POdikFo0o3pKZKhuIObjx69nTALlvWoYCjehCtM4GIzTjlE5hB
hswn51ob3sy/Yh+kd2ScUK0b1aFfXKUCwo9p4eIdeu3o5uQP94bFJAkQnM60FIiE
LR9NrJEmNkdVWcnlvxcoL+QSfS1Fivd2aJgP5ILPus1T2rK5xawyETQFE2UDuseC
bvVQuXON/7Tr3aN+y27/V5DTbBoR8uKk98t9uYjRU6Ab0x4sAnU6oFI28Mmvb96w
C74u8MuC45RH6qDELSUHV0SA9r//sq7NN0XLFAH9amJUv0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org