Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/87a_7R1tRkiyLoymaoPXOFl32lI.roa
File: 87a_7R1tRkiyLoymaoPXOFl32lI.roa (raw, json)
Hash identifier: I5IgW47ux94ymxjP1Q2e+RKTadL2KLsWPJf6tukayxI=
Subject key identifier: F3:B6:BF:ED:1D:6D:46:48:B2:2E:8C:A6:6A:83:D7:38:59:77:DA:52
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 01856F66DB42FADFF20E8C76231EEBB7E07C
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/87a_7R1tRkiyLoymaoPXOFl32lI.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50427
IP address blocks: 176.116.184.0/21 maxlen: 21
176.116.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Dec 2023 21:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:db:42:fa:df:f2:0e:8c:76:23:1e:eb:b7:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3b6bfed1d6d4648b22e8ca66a83d7385977da52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:19:b3:17:3f:f6:ae:49:e4:ad:02:f4:a0:
b6:19:0f:0e:50:4d:59:8d:a6:f0:cb:89:82:15:96:
dc:50:b4:09:de:9a:a0:86:a5:f8:7b:d8:27:5f:5c:
0d:1a:29:ae:7a:2b:4f:e2:bd:af:d9:05:23:c1:2b:
b6:de:7d:61:33:bb:c8:63:7e:db:c7:f1:c8:30:e1:
7c:e7:6d:ff:a7:bd:db:1a:93:b7:f6:f0:3b:a0:43:
ad:e2:be:6a:e1:7c:c9:af:15:ed:ae:9a:67:16:15:
15:e9:ce:78:bc:d4:58:17:60:d2:41:df:4d:2f:4d:
5f:9e:5a:7d:5b:e9:85:cd:1c:02:a0:9a:75:c8:03:
4a:b0:ee:97:6b:95:2e:f9:0a:17:66:93:02:e6:82:
ad:ff:73:93:87:00:86:47:5d:0f:94:55:86:3a:a3:
f0:1a:a7:7a:45:44:50:0e:99:9e:b3:4b:2c:93:4d:
12:42:51:dd:e1:f5:29:06:eb:6c:49:22:fe:c7:4d:
d4:24:9d:04:3f:df:82:f0:30:20:85:b3:2c:42:e7:
1e:f8:4b:8c:57:36:6b:0f:99:10:fe:47:c4:0a:41:
c4:68:1e:de:11:38:38:ca:5e:2f:c3:86:83:99:13:
ce:bf:d2:e1:93:ab:cb:58:98:33:29:f4:ec:c4:48:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:BF:ED:1D:6D:46:48:B2:2E:8C:A6:6A:83:D7:38:59:77:DA:52
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/87a_7R1tRkiyLoymaoPXOFl32lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.184.0/21
Signature Algorithm: sha256WithRSAEncryption
40:51:a0:5e:ca:1b:a8:2f:e5:bd:a2:a0:9c:6d:fe:8f:b9:8d:
52:bf:9d:56:5c:d5:3d:18:33:7c:a5:1b:ef:44:c7:26:6d:58:
6d:5d:c3:32:0e:03:dc:df:61:ba:bb:cd:6f:a5:6b:b8:00:cd:
30:19:fc:27:aa:70:c1:19:df:0f:45:d0:1f:d8:d6:07:93:d1:
3f:a5:33:15:f4:4f:f3:f2:d1:3c:86:0e:91:43:74:35:9e:93:
d0:a5:f6:07:66:ca:bc:9c:47:5b:50:2a:a9:18:eb:9f:92:6d:
ea:33:ce:65:3b:57:9e:aa:73:b4:b4:f6:8d:ec:e7:73:52:5d:
13:40:ac:5a:ab:21:7b:26:f7:3b:30:4e:28:2b:98:cf:72:fd:
13:5f:f0:cc:e2:dc:e9:0c:fe:01:cd:54:72:ee:40:55:b0:04:
2a:ab:d0:55:a0:f4:bd:f1:0b:4b:fe:c8:dd:71:e3:aa:bc:00:
16:cd:ca:5b:b4:84:d2:21:6e:df:b5:49:48:41:b0:53:78:b4:
31:c0:66:cc:23:0e:ba:4b:04:b0:4c:ee:8d:41:84:be:2d:e7:
b5:db:93:39:15:96:2d:a4:4f:4d:49:85:64:90:6a:ad:2d:90:
84:c2:9d:6b:f6:c4:a9:04:99:66:6b:e4:78:31:ff:01:78:bd:
ea:e5:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org