Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/kDl05CCmcrm7w4Fdd1D2oZc8w08.roa
File: kDl05CCmcrm7w4Fdd1D2oZc8w08.roa (raw, json)
Hash identifier: ZpUeOcFivkyRYcDzz5Nd74LhUhOd6q4NkxW6ExkEbHs=
Subject key identifier: 90:39:74:E4:20:A6:72:B9:BB:C3:81:5D:77:50:F6:A1:97:3C:C3:4F
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 018D526F905E79ABD6FA5A910CB35002192D
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/kDl05CCmcrm7w4Fdd1D2oZc8w08.roa
Signing time: Sun 28 Jan 2024 23:37:39 +0000
ROA not before: Sun 28 Jan 2024 23:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/20 maxlen: 20
176.116.160.0/21 maxlen: 21
176.116.168.0/21 maxlen: 21
176.116.177.0/24 maxlen: 24
176.116.178.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
176.116.182.0/23 maxlen: 23
213.110.224.0/22 maxlen: 22
213.110.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 06 Mar 2024 09:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:6f:90:5e:79:ab:d6:fa:5a:91:0c:b3:50:02:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 28 23:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=903974e420a672b9bbc3815d7750f6a1973cc34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:3f:bc:ac:f6:85:2a:98:54:9c:57:5d:72:
26:83:80:06:fb:a1:e0:5d:08:4b:23:f2:08:da:83:
47:38:73:c2:c7:7b:a8:79:0d:6e:76:c3:6d:14:ac:
24:76:51:1e:1e:68:91:2e:b3:12:ff:c4:24:49:19:
05:91:7b:eb:85:ce:69:25:30:62:10:9a:43:08:0d:
18:a4:f3:74:32:e6:28:40:20:26:cb:c0:0a:99:50:
fe:29:52:8f:42:97:68:fd:79:42:c2:7a:0d:0b:df:
97:b2:06:41:ee:2d:a5:d9:e8:fd:d0:2f:78:f7:8b:
2d:7d:df:28:f8:12:be:70:c8:8c:0c:26:fd:aa:46:
75:96:cf:c8:cf:b1:00:37:ff:fb:1d:7b:f7:2c:2f:
d6:b1:5c:6e:13:b3:57:cf:46:da:2e:7c:42:a9:a6:
80:da:5c:08:a6:b3:da:0b:a9:a7:3c:f8:b3:06:a5:
af:23:b0:f6:ce:18:f5:6e:b6:83:b9:d3:af:c7:5f:
ef:a4:24:24:8a:2b:79:10:b5:9d:c2:16:11:97:6e:
69:61:61:9f:85:a4:f5:62:1a:57:97:2f:96:fe:88:
84:aa:4e:1c:c0:b3:a4:23:18:ff:c5:f1:4f:8b:8e:
d1:97:96:aa:0e:28:e7:b6:9a:3d:5d:fb:5b:89:fa:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:74:E4:20:A6:72:B9:BB:C3:81:5D:77:50:F6:A1:97:3C:C3:4F
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/kDl05CCmcrm7w4Fdd1D2oZc8w08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.177.0-176.116.183.255
213.110.224.0-213.110.229.255
Signature Algorithm: sha256WithRSAEncryption
04:64:99:b2:f6:e8:46:2f:0e:9d:b8:4f:d5:c3:51:30:3b:51:
16:df:a9:62:77:f0:01:a0:ef:4c:cd:b6:ef:ed:3b:09:4c:aa:
a3:d6:07:91:bf:26:a5:9d:fa:23:e1:64:63:80:12:19:2c:88:
9f:4e:8e:5a:72:2f:b5:b0:9b:b1:95:05:be:99:52:19:4c:0f:
53:a7:78:ac:19:30:1a:ab:dc:6d:58:6e:06:70:4b:41:a2:5a:
6e:b2:4e:f9:c7:e0:2a:4b:04:d5:ef:30:c1:cc:89:4a:a5:1e:
84:0c:a7:be:0e:ea:f9:71:98:60:e0:0e:88:72:6e:36:1b:99:
0e:c2:a5:11:3c:ae:16:05:fc:8e:99:c9:61:5a:13:ce:01:72:
f0:a5:44:1d:6b:8f:c2:5c:55:68:94:96:c6:75:88:d3:cf:7a:
2a:d2:24:76:86:50:28:ae:1d:98:15:b6:24:c8:03:2c:c9:c6:
2f:b0:b4:fa:8b:2f:19:19:db:b9:41:05:a6:b8:22:74:09:1a:
0a:d3:f2:4c:98:b8:41:d8:71:54:7d:3a:26:2a:f3:f7:33:7e:
62:a0:8c:40:c9:1f:2e:36:64:a8:e2:e6:9d:bf:1f:37:e7:bb:
f5:93:58:fc:51:6b:e0:7d:39:35:3f:b8:50:36:4f:80:37:8d:
f0:3d:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org