Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/r5YXeYWExlbxRxmEH6ZI6LAv_rI.roa
File: r5YXeYWExlbxRxmEH6ZI6LAv_rI.roa (raw, json)
Hash identifier: Oa8qEuEGShqFFdBT12hvYsXxmrg6/+n6UE5k1sJ404Y=
Subject key identifier: AF:96:17:79:85:84:C6:56:F1:47:19:84:1F:A6:48:E8:B0:2F:FE:B2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D5601C8F2B7D7471209727A48E3ED2
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/r5YXeYWExlbxRxmEH6ZI6LAv_rI.roa
Signing time: Mon 02 Jan 2023 04:55:09 +0000
ROA not before: Mon 02 Jan 2023 04:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59606
IP address blocks: 176.119.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:60:1c:8f:2b:7d:74:71:20:97:27:a4:8e:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af9617798584c656f14719841fa648e8b02ffeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:3f:0e:5e:38:b9:b8:37:fb:a7:ba:03:88:
93:0b:ca:fa:66:42:8c:d0:41:ec:05:44:5a:94:a5:
63:52:ad:11:4e:7e:1f:96:74:3c:87:5e:9f:61:a8:
d5:21:0c:48:12:5b:1f:8b:f1:21:4c:d3:8f:90:28:
ae:5b:df:ad:48:43:a7:15:5a:78:f0:8f:be:1c:49:
5b:89:38:19:b5:ac:8d:40:12:4c:51:74:32:ca:a5:
d1:ef:16:b8:84:ce:1f:68:04:95:3c:98:24:6e:a3:
6f:5f:3a:b5:d1:e2:c2:6d:d0:9d:97:40:79:79:12:
0f:13:08:cd:e5:b5:f3:c9:22:11:94:30:70:51:c0:
ce:9d:28:08:fd:a5:bc:f2:ea:84:5a:5e:dc:45:88:
65:a6:88:68:7d:75:e5:ae:de:92:8a:34:90:33:47:
b0:2e:57:1d:44:38:4a:45:9a:5f:3c:dd:23:a6:65:
ec:ed:f4:bc:7e:50:30:77:6d:ed:85:fe:2d:be:e5:
18:73:a6:0a:5c:20:b2:95:27:01:7a:f3:60:a1:a7:
cb:97:1f:1e:d3:6c:76:be:e5:af:8e:37:6b:71:d7:
5d:b4:8f:14:3c:da:c3:43:bd:19:95:03:ab:34:ef:
ba:93:e3:ef:a3:b9:1e:50:a5:b4:ae:a8:63:10:d6:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:17:79:85:84:C6:56:F1:47:19:84:1F:A6:48:E8:B0:2F:FE:B2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/r5YXeYWExlbxRxmEH6ZI6LAv_rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
00:57:6a:d7:27:18:75:e8:a9:cb:57:6a:7a:74:9f:c1:1f:9a:
92:39:4e:ba:25:d9:bb:5c:56:6a:0a:37:4a:a3:dd:c3:1d:5a:
13:23:17:48:51:63:a8:22:bc:44:ce:af:1b:ef:cc:d3:e4:fc:
46:d7:20:40:97:5c:e0:bc:92:2d:2a:c4:fd:30:79:70:f4:57:
ba:eb:6f:64:1a:5c:78:91:4a:79:e0:27:03:97:a5:e8:6d:75:
8c:2d:f4:7e:a6:e4:2d:26:bc:d9:03:87:74:a8:c3:65:cb:63:
08:29:92:be:2a:56:ec:92:99:bb:f0:2e:a6:66:62:36:10:8c:
fa:cd:14:bc:5c:16:b3:64:7b:9a:ab:0f:d3:02:28:52:06:78:
d4:d1:61:82:35:64:93:5f:e4:f7:1a:de:e8:c6:d2:25:3e:ec:
4d:83:4c:e8:cf:ec:fb:81:2f:7e:38:c6:e4:92:34:8f:91:83:
98:49:46:0c:06:be:e3:52:51:98:dd:a8:7c:3d:63:61:2f:75:
5e:17:ed:57:cd:f0:29:d5:68:68:e1:b0:31:2c:c5:c1:d7:55:
d5:a0:d5:bc:91:00:64:6c:98:db:d3:2b:2b:a1:36:0c:f1:23:
00:84:45:f3:84:1f:d8:11:73:70:2b:47:c4:80:d2:7f:c5:7d:
88:e0:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org