Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/4l4ptV2O3vjg6Hx8M_tTOWWJT7I.roa
File: 4l4ptV2O3vjg6Hx8M_tTOWWJT7I.roa (raw, json)
Hash identifier: cyxK1/MFMRcWvyOqZOEqSXfq7kiJwl52fESuXskVo1o=
Subject key identifier: E2:5E:29:B5:5D:8E:DE:F8:E0:E8:7C:7C:33:FB:53:39:65:89:4F:B2
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 01856ECBA941479EC754E9AD34F3F839CF1D
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/4l4ptV2O3vjg6Hx8M_tTOWWJT7I.roa
Signing time: Sun 01 Jan 2023 19:25:18 +0000
ROA not before: Sun 01 Jan 2023 19:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48732
IP address blocks: 158.58.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a9:41:47:9e:c7:54:e9:ad:34:f3:f8:39:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 1 19:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e25e29b55d8edef8e0e87c7c33fb533965894fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:c2:91:e3:a0:8b:ad:dc:79:75:56:a5:e7:
a4:4d:40:52:d3:3e:51:45:b1:55:a6:47:6e:73:8c:
c8:f5:94:ba:0b:d9:f1:38:c0:8e:3c:c0:8a:61:82:
83:2c:be:55:6b:c5:a9:03:ea:0e:6e:32:17:e8:d4:
29:ca:8d:c1:48:7f:44:1e:6d:d0:d8:25:4b:0f:79:
17:e1:c6:06:be:09:c5:0d:c3:c2:9b:8b:2e:c7:1e:
f9:a2:e5:00:04:a7:bc:02:ea:fa:be:bd:f1:81:03:
2c:0c:e9:78:56:8f:76:50:c7:b6:b5:6a:e9:78:07:
f0:45:37:63:7e:c7:56:68:bd:5f:0f:a6:a8:51:e8:
64:c9:9f:98:64:30:45:d6:4d:39:d5:41:60:32:8c:
58:3a:22:bb:60:07:87:77:1a:6c:b5:ce:d5:5a:1b:
78:a1:a2:c2:4d:10:cf:3c:01:44:61:03:61:6a:60:
c0:78:e8:59:9e:14:7e:13:21:b4:7e:7b:8a:8f:99:
25:74:da:7f:80:8e:a7:f5:e9:89:b3:a4:26:04:d3:
08:8f:07:c7:7e:69:41:7c:7f:3f:5d:b3:3f:6d:54:
14:b7:bd:b7:b3:c7:66:54:1c:09:b1:f2:8c:06:1b:
b5:4f:10:1d:2b:b8:a5:c3:16:7d:f4:fb:cc:21:0e:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5E:29:B5:5D:8E:DE:F8:E0:E8:7C:7C:33:FB:53:39:65:89:4F:B2
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/4l4ptV2O3vjg6Hx8M_tTOWWJT7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.58.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2d:16:f4:ca:e5:d5:2e:63:29:64:5b:9f:08:21:27:92:df:
9a:59:f7:cb:10:b1:69:55:7c:65:da:57:e6:e0:e5:2b:a7:70:
f7:cd:49:63:68:3b:1b:30:ba:d7:f0:4a:cd:99:9d:b8:87:ad:
5d:60:7b:ac:0d:26:ee:fe:56:e5:67:66:07:ca:2e:95:a8:5d:
d1:93:7f:ea:f1:8a:94:ba:ad:ba:ed:5a:53:67:d0:a2:04:4f:
3a:0c:e1:cc:50:65:a2:40:d7:7e:08:e5:53:ff:1f:97:89:12:
0a:a3:75:a4:25:8c:c9:ab:0a:55:bc:3e:73:1f:eb:03:2e:e1:
93:4b:d1:9d:4e:83:c0:21:64:95:72:e0:ed:ec:f1:a8:03:b7:
eb:c0:e8:86:3f:67:2e:04:a0:76:d0:2d:8a:16:3b:21:1a:f3:
f5:80:fb:c6:15:bb:b9:c4:ec:9a:eb:6c:55:dc:30:33:b0:d5:
4e:5d:92:09:d6:43:22:25:7d:83:00:a3:79:66:fe:37:33:6d:
b7:1e:29:40:36:8c:e4:a2:d7:ef:f6:2d:12:7b:a4:76:5e:3f:
00:20:e9:18:72:0c:26:10:c1:61:fb:8e:3a:57:3f:2e:a5:96:
fd:c1:43:a7:00:e6:14:6c:de:2b:10:93:57:ff:c9:fe:fc:ea:
0c:3f:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:35 2024 by rpki-client on console-ams.rpki-client.org