Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/LiFITp8TB6ePHg_ssO04Oy9K9os.roa
File: LiFITp8TB6ePHg_ssO04Oy9K9os.roa (raw, json)
Hash identifier: +HZDWjjnUi7ukUXBjUC9yo8Y3LJ1z3kkboUEqbdwIzs=
Subject key identifier: 2E:21:48:4E:9F:13:07:A7:8F:1E:0F:EC:B0:ED:38:3B:2F:4A:F6:8B
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 019210BC9A6BDDFE6EB9C06FBEF735C35FAF
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/LiFITp8TB6ePHg_ssO04Oy9K9os.roa
Signing time: Fri 20 Sep 2024 18:40:48 +0000
ROA not before: Fri 20 Sep 2024 18:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214192
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 09:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:bc:9a:6b:dd:fe:6e:b9:c0:6f:be:f7:35:c3:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Sep 20 18:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e21484e9f1307a78f1e0fecb0ed383b2f4af68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:95:8f:ca:2e:d4:13:c9:eb:ac:7e:f4:67:
48:7b:71:8f:45:85:ce:cf:50:7d:a9:b4:68:f8:7a:
fa:a1:a5:15:05:cc:37:93:64:e2:4f:6f:3e:29:ba:
05:07:69:20:eb:a4:a0:05:04:fa:82:57:ad:51:54:
be:f6:4c:45:66:2d:cf:fe:2b:25:d8:3b:c7:a0:f1:
3a:c7:8d:ea:9e:5f:0a:43:d8:22:58:5e:f6:13:80:
2f:31:4f:03:c2:f1:64:f9:e6:29:e5:cf:23:93:0d:
40:8f:db:48:eb:6e:bc:ae:97:8b:a4:06:a4:82:2d:
bd:31:97:64:0f:d7:55:d1:21:a8:ba:10:70:71:88:
be:af:1b:13:6d:bd:b2:64:4f:08:db:f7:e6:55:6e:
9a:bd:80:b2:dc:e6:d4:1d:2b:8e:09:45:e4:8f:ac:
4c:56:63:e4:6f:d9:73:20:ec:f6:d2:1a:30:e1:f7:
61:e3:18:f3:35:4c:fe:4c:77:62:53:7c:f1:07:58:
4d:c4:16:22:74:e4:e4:6b:0a:a2:a1:90:7e:b0:86:
f3:91:4e:7f:90:0c:0d:95:f5:12:87:50:69:90:6f:
aa:86:c1:20:ce:39:49:70:a1:42:e5:69:ea:69:f7:
a6:94:8b:9a:f3:13:9d:0c:2b:9c:2d:7d:02:40:b7:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:48:4E:9F:13:07:A7:8F:1E:0F:EC:B0:ED:38:3B:2F:4A:F6:8B
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/LiFITp8TB6ePHg_ssO04Oy9K9os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d9:c6:23:6f:c0:48:9f:88:93:86:f7:20:ab:40:89:7c:4a:
4f:e6:10:d4:d0:0c:2b:6f:2f:50:e2:de:75:1d:fc:87:27:a4:
83:0e:ca:90:42:77:97:dc:8d:f7:5d:f6:9a:fd:59:a6:72:98:
5c:e4:1c:5a:6e:8c:7f:a6:1e:60:fd:de:5e:7a:de:99:58:02:
12:ae:95:fc:d2:61:ff:a7:0b:94:1a:4b:4e:59:82:35:37:c5:
22:9d:4f:29:21:a3:2d:59:00:dc:54:ca:84:46:79:41:4d:b8:
a2:a3:96:d6:fa:4c:d4:a3:e5:ca:8f:39:64:d0:1f:a7:91:2c:
c1:ec:ed:5e:33:c6:71:fb:6e:a7:85:d7:c0:cb:af:93:37:17:
2f:e7:b2:ec:56:96:93:87:72:3d:93:40:1f:fa:50:5e:18:b8:
cd:0d:4f:7e:62:48:30:68:bf:2b:f5:f2:aa:c1:83:04:b7:03:
9d:b0:65:14:46:f4:a5:1b:37:5f:77:95:61:2f:eb:55:bb:8a:
f4:dd:86:27:89:ad:e3:a5:8d:cb:a7:4a:38:cd:d2:3e:6d:86:
0e:fb:34:ba:6f:d0:d6:8a:e5:ad:54:10:3d:df:2a:f6:31:a8:
53:60:b1:f8:8d:5d:b8:ce:46:f9:f8:71:ea:f7:89:34:e4:66:
fa:00:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 12:07:46 2024 by rpki-client on console-ams.rpki-client.org