Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XVxx66BnkhpOns4V3Y2vj_ACGRU.roa
File: XVxx66BnkhpOns4V3Y2vj_ACGRU.roa (raw, json)
Hash identifier: 9o0P4uZ0g/mqYzLUfCUMpYztgDA2TrGtWTgrD6F/27k=
Subject key identifier: 5D:5C:71:EB:A0:67:92:1A:4E:9E:CE:15:DD:8D:AF:8F:F0:02:19:15
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE676FB8943EA84D09608B04D1C2E94
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XVxx66BnkhpOns4V3Y2vj_ACGRU.roa
Signing time: Sun 01 Jan 2023 10:35:21 +0000
ROA not before: Sun 01 Jan 2023 10:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210754
IP address blocks: 62.176.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:76:fb:89:43:ea:84:d0:96:08:b0:4d:1c:2e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d5c71eba067921a4e9ece15dd8daf8ff0021915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:f6:46:9a:c2:54:2f:a0:e6:55:42:90:d1:
9f:73:fe:f8:78:8a:d5:31:56:4c:6d:af:78:76:dc:
cb:08:91:ea:e8:c4:90:37:13:6e:27:04:4e:5d:21:
ab:e5:84:50:57:f8:09:dc:25:a1:77:71:31:1f:e6:
f5:40:25:bc:d4:3f:f7:76:d6:6a:15:9f:29:4e:4d:
8e:2b:8e:54:4d:eb:62:28:01:7b:d6:af:39:d2:68:
88:fa:d5:e2:4a:12:6b:50:15:64:b8:0c:24:84:98:
95:dc:53:a8:99:99:a5:35:ff:9f:e4:da:14:30:72:
5a:ba:3b:7c:23:2b:3d:b0:a0:85:35:99:45:10:b6:
0a:32:ec:01:ca:e6:6c:cc:73:f2:03:8d:51:ed:d9:
a5:bb:69:56:17:fa:d9:57:de:24:c7:fe:a2:63:11:
da:47:c2:91:c8:52:0d:30:03:04:3d:68:c8:08:f7:
0a:e1:c5:20:c3:70:8c:5b:8b:8e:3a:22:79:cd:1b:
93:96:9f:3d:cc:d2:3c:97:1b:e4:5b:cf:fd:6a:e7:
8e:d1:70:a5:3d:5d:64:0e:cb:c3:0a:7c:07:84:7f:
04:d8:6c:49:bf:b8:30:28:d2:da:db:36:b6:8c:00:
e6:22:2a:2c:fe:73:ea:56:c6:3d:aa:d9:dc:1e:9a:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:71:EB:A0:67:92:1A:4E:9E:CE:15:DD:8D:AF:8F:F0:02:19:15
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XVxx66BnkhpOns4V3Y2vj_ACGRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.98.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e1:b8:44:a0:73:8e:e7:a9:70:9d:cf:2a:16:b8:89:d2:ab:
25:f0:fe:9f:9e:20:a8:35:3a:00:3e:b9:49:42:b9:8c:65:ed:
be:b4:39:d1:b9:18:84:ef:40:27:99:62:b1:02:1a:df:d8:01:
0f:bd:36:30:ea:20:c6:22:01:6b:83:98:90:9e:a0:77:3e:82:
30:f3:82:47:3f:9b:04:08:bc:96:17:4c:3c:08:01:ee:1e:be:
57:e9:01:18:a4:61:50:78:d6:f2:13:5c:68:69:32:25:e1:66:
c1:dd:d6:db:17:c9:3a:9f:85:ec:d9:12:28:8e:34:c3:7f:25:
e9:7e:b8:11:21:a8:cc:39:9a:bf:59:51:ab:57:ab:0e:2f:dc:
31:06:32:ca:d0:92:9e:00:50:45:c6:2c:4b:e9:77:fb:8c:6f:
13:33:28:fc:a2:89:0e:d0:49:76:d5:92:92:21:49:94:f2:f6:
bc:a1:1c:43:18:56:82:75:48:8c:c6:bf:7f:de:84:32:2a:97:
c1:7f:53:a7:bf:d6:27:a8:14:e6:ae:32:37:23:07:2c:7b:90:
9e:1c:06:37:16:eb:3a:ec:c3:ba:77:91:24:10:86:3a:f1:11:
be:05:0d:c1:8a:3b:8c:62:6a:a8:b7:27:8f:21:1b:cb:f5:ca:
aa:9c:d2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org