Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/_V4CYtK1CIMlhpulUIKijaCooQ8.roa
File: _V4CYtK1CIMlhpulUIKijaCooQ8.roa (raw, json)
Hash identifier: oscFLy+LGf0eIXiYwdawk3PbHSJckcVhD+Q2tO920Dg=
Subject key identifier: FD:5E:02:62:D2:B5:08:83:25:86:9B:A5:50:82:A2:8D:A0:A8:A1:0F
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 01856F66DA32A3C6D5F2552F5EE338552260
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/_V4CYtK1CIMlhpulUIKijaCooQ8.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/21 maxlen: 21
176.116.160.0/20 maxlen: 20
176.116.168.0/21 maxlen: 21
176.116.182.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 17 Jan 2023 11:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:da:32:a3:c6:d5:f2:55:2f:5e:e3:38:55:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd5e0262d2b5088325869ba55082a28da0a8a10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:9a:58:48:9f:48:4c:20:a6:25:61:51:a4:
53:a2:68:89:3e:70:ab:36:de:2d:db:cc:d9:2d:54:
47:78:57:88:e3:3d:ae:a9:8b:4b:9a:34:13:6c:58:
55:27:42:3c:b8:55:a1:03:46:d1:49:2b:89:1e:b2:
e2:c4:d8:e0:6d:ae:ae:fa:dd:0b:de:95:36:f7:db:
f8:ed:68:a0:ae:07:2e:0e:20:e8:04:21:1c:69:f3:
a1:ab:97:bb:32:8a:df:a0:ac:f7:63:73:1d:ec:e9:
05:5c:a0:3c:38:0c:86:54:0e:83:8d:93:33:a5:07:
3d:17:33:d5:6b:b3:ee:b5:88:c5:f2:3c:29:11:6a:
42:54:ea:9d:ae:78:57:4a:d0:db:3c:a2:52:ee:bf:
f9:68:1f:27:07:90:a5:83:76:99:32:3e:48:d3:8c:
63:9a:9c:57:b5:43:e4:40:b4:fa:22:e7:0b:9a:24:
75:01:2c:9e:47:74:66:0b:6a:99:ed:c4:35:47:68:
a6:39:9c:34:22:6d:c8:ea:5b:84:35:22:ae:17:83:
b5:e8:46:f6:ac:0e:ba:c4:99:70:e0:ba:a7:af:79:
78:56:98:bc:59:bf:f1:0b:b8:97:7d:f3:ea:f1:fb:
eb:c8:2a:58:d7:dd:b0:70:da:57:a8:91:01:85:20:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:02:62:D2:B5:08:83:25:86:9B:A5:50:82:A2:8D:A0:A8:A1:0F
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/_V4CYtK1CIMlhpulUIKijaCooQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.180.0/22
Signature Algorithm: sha256WithRSAEncryption
79:03:8c:ac:7c:a0:3b:53:b5:e7:ff:8c:08:c5:b3:a0:97:f2:
c4:17:eb:bf:1b:16:41:bf:42:a5:db:b9:ff:81:dc:af:4a:40:
c9:00:89:d8:cf:61:4a:45:88:dd:54:09:f6:69:67:7d:45:15:
3c:7e:24:70:ef:c4:1d:93:2a:00:0b:e0:3f:c2:ca:7b:b4:81:
48:e8:01:0c:16:92:74:36:09:c1:fe:4e:6e:19:16:75:cb:32:
4e:33:c9:dd:86:91:0e:53:3f:55:9f:3b:ba:9b:41:ad:30:49:
ac:f1:2d:55:f1:0a:3c:7f:e5:83:8f:9f:1d:04:27:3a:73:04:
af:22:85:b7:3c:e2:03:8a:42:dd:b3:11:2c:99:60:20:30:ea:
84:d5:17:e1:4a:02:6d:2c:84:14:00:07:96:2c:a3:9e:29:0a:
81:de:b3:3f:eb:07:f2:39:27:75:bf:5d:48:30:60:49:a0:16:
9a:c1:27:4b:d1:cb:67:6e:4c:1e:d1:22:eb:40:1f:dd:fc:a1:
de:0c:66:ee:ae:c5:0b:79:4b:fb:55:a2:92:56:b3:9d:2b:62:
2e:46:54:cb:74:6d:07:c2:a4:1f:7c:b4:73:bc:1d:8f:aa:6b:
d6:b9:fd:cc:96:83:7e:80:32:f7:30:14:f9:ee:ad:e7:33:5c:
61:aa:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org