Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/lksdFP_mYEl3IWCuuX_syMPPAh4.roa
File: lksdFP_mYEl3IWCuuX_syMPPAh4.roa (raw, json)
Hash identifier: RaNtyc7ik8gf/hdU+sLhCriNfPZFz8BK2TUD314DoYo=
Subject key identifier: 96:4B:1D:14:FF:E6:60:49:77:21:60:AE:B9:7F:EC:C8:C3:CF:02:1E
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 01856C413C185A2F3C0EC4ACF6F76A10B0B8
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/lksdFP_mYEl3IWCuuX_syMPPAh4.roa
Signing time: Sun 01 Jan 2023 07:34:52 +0000
ROA not before: Sun 01 Jan 2023 07:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198360
IP address blocks: 176.103.217.0/24 maxlen: 24
176.103.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3c:18:5a:2f:3c:0e:c4:ac:f6:f7:6a:10:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Jan 1 07:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=964b1d14ffe66049772160aeb97fecc8c3cf021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:95:ff:c9:cf:10:e9:c5:fb:8b:5c:1e:d7:
87:cd:71:df:cd:24:1b:11:73:37:68:e7:50:54:f3:
7f:15:bb:48:cc:52:86:d1:af:f0:8e:3b:48:c4:0d:
66:09:8f:19:2a:53:8d:d7:cd:72:5d:3c:84:1e:8c:
b1:bf:9e:4e:a0:8f:ab:a0:2f:f6:60:f5:43:4c:0a:
17:be:b1:fd:c1:12:f9:de:fc:35:e2:fa:cf:2f:10:
5b:c9:1f:d8:fa:cc:2a:77:33:46:0f:41:7c:07:59:
48:bb:f9:b4:2e:8d:22:e6:24:c0:2a:b0:94:24:88:
96:5f:c5:6b:5b:2f:32:fc:4d:fb:53:bd:3c:2c:28:
0f:b3:07:ab:7c:4b:4a:c2:4d:b0:4a:36:1f:a8:df:
b8:2b:76:ec:14:8a:07:0a:74:7e:15:c1:33:fe:bc:
ec:a0:5e:45:82:2f:5f:0d:f8:45:d3:55:75:f7:dc:
b8:7d:35:11:76:cc:64:4c:3f:93:7f:ef:96:2e:da:
08:f6:92:84:21:b5:b5:53:52:11:34:e4:cf:c0:28:
c0:1c:9b:29:9b:77:a1:d3:14:44:e0:f9:19:34:fd:
9a:cb:5e:0d:65:2e:5f:f8:a9:5a:a7:0a:41:35:59:
74:36:37:58:7e:a9:f5:24:af:9f:73:e9:06:c8:0a:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:1D:14:FF:E6:60:49:77:21:60:AE:B9:7F:EC:C8:C3:CF:02:1E
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/lksdFP_mYEl3IWCuuX_syMPPAh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.216.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:e1:c5:eb:3f:c3:6e:12:be:e8:74:04:b0:20:5a:5a:e5:98:
d0:0f:7d:eb:98:5f:aa:1c:9c:bb:68:bb:cc:fd:7b:66:09:da:
0c:cd:b3:6b:81:ea:cc:f1:0d:66:29:d7:84:71:26:95:4f:86:
75:88:74:7c:8f:32:ce:12:fb:d2:06:99:53:a8:74:a7:66:2a:
db:c6:44:26:09:e4:e5:85:19:96:88:74:bd:12:d3:5c:b1:4d:
13:4b:ba:2b:29:4b:98:72:35:a0:fa:99:78:de:b4:1c:57:db:
21:e7:e7:4a:88:12:c9:f0:fd:4e:81:51:ab:72:6a:c8:68:2e:
1f:07:b9:06:e1:77:29:2f:93:64:81:de:c8:91:8a:8e:c3:6f:
22:0e:39:73:d8:62:70:24:b7:b1:e1:91:37:b2:20:05:f5:df:
a1:c3:73:56:c5:73:3c:57:5f:d8:9c:a2:ba:a1:dc:bc:ef:59:
e7:dd:d6:11:04:e1:2d:a2:41:57:f2:1a:e3:08:87:89:0a:61:
09:0a:06:3a:4a:b8:79:a0:38:83:df:f4:b6:ac:bf:df:c1:78:
02:27:f7:11:96:04:24:5b:b3:b0:34:d3:5c:a4:93:21:da:e3:
c4:ad:5f:46:31:c9:ea:c4:d5:0a:82:17:eb:d6:dd:8c:fc:3e:
b6:a9:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:50 2024 by rpki-client on console-fra.rpki-client.org