Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/PsAyf_aeS_yyISuPf37u0aGgbfQ.roa
File: PsAyf_aeS_yyISuPf37u0aGgbfQ.roa (raw, json)
Hash identifier: ofau59DNk4Oa/9lFthiklJ/uUf9oBQX8eMXRgFstWdI=
Subject key identifier: 3E:C0:32:7F:F6:9E:4B:FC:B2:21:2B:8F:7F:7E:EE:D1:A1:A0:6D:F4
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CE164CADED3D80EF61E83323BA417EF1B
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/PsAyf_aeS_yyISuPf37u0aGgbfQ.roa
Signing time: Sun 07 Jan 2024 00:48:48 +0000
ROA not before: Sun 07 Jan 2024 00:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51791
IP address blocks: 176.125.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 08:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e1:64:ca:de:d3:d8:0e:f6:1e:83:32:3b:a4:17:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 7 00:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec0327ff69e4bfcb2212b8f7f7eeed1a1a06df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:ac:df:0c:05:e2:ef:04:7e:34:39:1a:8f:
be:57:b0:dc:c0:e0:54:61:ab:de:9a:ba:24:38:72:
5b:40:8f:6e:e6:b8:30:43:bc:55:04:26:55:e9:c8:
72:9a:ef:f0:82:e7:40:e5:36:f5:cc:90:1c:42:5d:
ae:52:49:9c:b2:8f:93:79:e9:cf:74:89:ee:4e:f0:
06:04:2b:26:78:ff:48:e5:20:7b:7e:2a:cc:dc:6a:
26:48:6c:23:fa:51:0c:50:9a:11:bd:11:4d:93:8c:
d3:17:0b:ef:86:47:e1:ff:50:3d:b1:1d:ff:8a:92:
c0:04:aa:a7:8e:95:b1:ea:d9:01:b8:7a:80:01:a9:
8f:54:18:f8:c3:be:fd:ab:e1:c9:ce:2f:88:9c:dd:
51:b3:01:75:75:8f:cb:4c:b4:67:46:8e:fe:31:e9:
92:bc:f3:17:9b:68:2f:d9:1f:e6:75:6f:f9:cc:5a:
fe:e0:c4:f8:c5:eb:b1:21:20:6c:f4:f9:59:b8:72:
ef:15:4c:d4:1a:e6:45:15:d4:42:37:15:45:2a:a7:
5a:7c:9e:69:19:6f:6a:2d:6a:c9:dd:11:58:01:c2:
27:d6:e1:fa:1d:f9:6a:a7:8c:28:96:c3:dc:27:ab:
02:56:1d:8b:8e:a8:da:da:95:5f:eb:34:f9:16:f3:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:32:7F:F6:9E:4B:FC:B2:21:2B:8F:7F:7E:EE:D1:A1:A0:6D:F4
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/PsAyf_aeS_yyISuPf37u0aGgbfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
82:72:9f:18:ac:9d:53:6a:a5:0e:dc:d8:da:7e:53:d8:d2:99:
64:e4:42:9b:5e:1d:3b:3c:97:be:8c:0e:71:1c:d8:e0:a4:7e:
50:73:71:1f:1b:84:db:52:10:40:1a:c5:65:5d:49:cf:42:0a:
98:9e:bc:43:ef:90:7a:e2:85:38:69:a0:99:d4:ef:2d:ea:21:
95:74:57:b3:1e:39:da:5a:ec:dc:df:a0:74:4e:4a:8d:00:0a:
99:53:3d:a5:7e:45:74:90:bf:ae:17:d1:da:ce:64:28:91:c9:
1b:76:92:7e:de:31:76:c4:34:7b:5d:30:a9:11:02:6e:9c:01:
f1:c0:7f:d8:c0:eb:33:0b:b1:41:4d:6b:e5:56:9c:3b:1b:cb:
1d:dd:f9:08:60:04:57:06:5a:46:da:dd:82:f7:ee:d5:2c:d6:
68:e1:f6:94:92:49:d4:0d:5e:67:74:3e:19:1b:ae:12:27:fe:
8c:a8:aa:dd:a3:f7:2a:d0:bc:74:e0:99:ea:63:60:bb:bc:40:
78:b6:b8:dc:d7:fa:60:a2:dc:af:6a:65:53:08:a5:63:62:70:
21:52:c8:e9:e9:fd:41:5c:2b:31:79:d3:f4:6f:64:a6:f2:dc:
3c:e3:29:ab:7c:ee:fa:c8:0c:1e:05:61:b2:06:b2:de:f8:ff:
07:fe:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org