Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/49bxPwRXAE1B88QoDviAHrrRn5A.roa
File: 49bxPwRXAE1B88QoDviAHrrRn5A.roa (raw, json)
Hash identifier: /TLcHVj1zM1LKxLFZvtQYzvmbCkNXnXpIBxvsx62o8Q=
Subject key identifier: E3:D6:F1:3F:04:57:00:4D:41:F3:C4:28:0E:F8:80:1E:BA:D1:9F:90
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018CC8DF26FE53A7FE3B3E23E838E9AFD56C
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/49bxPwRXAE1B88QoDviAHrrRn5A.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:26:fe:53:a7:fe:3b:3e:23:e8:38:e9:af:d5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3d6f13f0457004d41f3c4280ef8801ebad19f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:96:40:7e:f7:d5:b7:07:50:54:d7:1b:f5:
b6:ec:ce:8b:d4:fd:1b:41:aa:a9:c6:45:db:64:de:
47:14:ab:31:6c:09:f5:82:8d:1a:cd:f0:bb:71:20:
ae:98:7b:ac:b0:62:92:04:a5:50:f5:9a:86:ad:5e:
21:02:7c:57:3f:48:22:ae:e0:60:6c:81:0b:19:e5:
b1:96:af:32:41:eb:46:ad:ec:56:7f:84:28:80:e5:
32:29:5a:ed:b6:38:f8:a5:da:cf:d6:d7:2a:d9:eb:
fd:28:98:8f:d9:7b:c3:07:e6:17:b3:43:aa:4c:4c:
05:a6:7f:fc:36:09:25:f0:01:86:a6:a6:3c:dd:61:
e1:80:56:99:6e:5e:35:9c:5f:78:a7:05:a7:ab:14:
50:13:58:b6:18:83:34:0f:9c:09:df:30:6b:ff:98:
fe:1e:9d:1c:4c:35:0e:dd:6a:7c:f4:e0:fb:95:83:
13:96:c5:d2:80:4d:d0:28:6a:d3:f7:84:1a:2b:bb:
7c:38:14:da:e9:41:6c:1b:1a:ce:fa:1c:53:60:3e:
bd:97:89:9d:0e:f5:97:98:d0:70:f5:85:f2:71:04:
97:ff:fd:e9:ca:ba:b6:84:5f:f4:8b:34:e4:f7:d5:
59:12:95:ad:98:fd:06:9c:46:f0:13:08:b9:e7:fd:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:F1:3F:04:57:00:4D:41:F3:C4:28:0E:F8:80:1E:BA:D1:9F:90
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/49bxPwRXAE1B88QoDviAHrrRn5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b2:32:e3:b0:42:97:d3:5d:7f:03:47:fc:eb:f8:b1:59:0f:
88:5e:82:4f:3e:d6:3b:65:a0:1a:64:fd:31:8a:72:a0:92:a3:
b0:9c:90:c5:e1:a1:a4:ce:fc:e6:9a:4d:76:e5:61:2f:60:84:
0a:47:1f:92:d4:99:c5:f9:e9:56:1f:68:e6:b8:9e:97:79:6b:
29:6d:1c:84:42:96:8e:b0:74:03:31:b7:ee:45:d4:4b:cc:49:
67:25:36:26:eb:78:5f:84:3d:1a:e0:43:c1:a1:a9:81:9a:6f:
e8:58:1d:30:ce:5a:72:f6:3d:4a:a0:2a:9a:a3:3d:be:d9:7d:
71:71:b2:7d:9f:64:5b:9c:f5:10:c5:d3:b7:3f:65:45:54:03:
f5:7f:44:01:aa:0d:17:fb:3e:26:6a:bc:24:52:0f:71:20:c8:
d2:5d:9a:02:09:96:54:00:84:f6:d8:65:53:fd:2b:d7:a9:e7:
0f:f4:7d:ac:3d:a0:a8:6c:f1:0d:46:11:04:0c:d1:fb:c6:1e:
87:3f:83:d7:cf:cd:83:c0:97:3b:e6:5d:d5:1a:4e:f7:bc:dd:
b4:33:6d:9d:02:73:cb:ff:13:69:9d:e4:73:2d:ff:29:6c:ac:
d1:9f:56:d7:7a:7b:e5:ae:d7:b8:51:cc:20:11:55:99:69:e0:
d2:08:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 12:30:17 2024 by rpki-client on console-ams.rpki-client.org