Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/vnwtQouP3a35RwEz5Ag7IIW9Wh4.roa
File: vnwtQouP3a35RwEz5Ag7IIW9Wh4.roa (raw, json)
Hash identifier: /qzofoOT7XYq0zoj5BWrzVVUHj80rNfGOV7Skog4MOU=
Subject key identifier: BE:7C:2D:42:8B:8F:DD:AD:F9:47:01:33:E4:08:3B:20:85:BD:5A:1E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01856F94CFF4C06FD07462C4AA68B853FB51
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/vnwtQouP3a35RwEz5Ag7IIW9Wh4.roa
Signing time: Sun 01 Jan 2023 23:05:01 +0000
ROA not before: Sun 01 Jan 2023 23:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48624
IP address blocks: 176.56.80.0/22 maxlen: 22
176.56.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:cf:f4:c0:6f:d0:74:62:c4:aa:68:b8:53:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be7c2d428b8fddadf9470133e4083b2085bd5a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:ee:d1:ca:e2:06:50:4e:e6:60:21:70:d7:
df:24:6c:79:be:33:8b:0f:4c:a1:46:8f:c8:49:73:
e9:8a:48:9b:0c:0f:fd:5d:e6:0d:89:c5:32:4c:0b:
46:2a:d7:e9:9f:45:58:a2:be:58:8b:8d:a2:2b:a2:
cf:3d:5f:99:fa:5b:42:87:ed:92:03:e6:ea:85:06:
8a:a3:ba:c4:82:fc:c3:96:00:b4:7f:a3:2e:fc:51:
8f:63:35:6f:47:fc:b5:ae:fa:a3:0c:45:74:e3:eb:
e7:52:ac:81:42:57:95:d7:b9:2d:ea:70:14:de:af:
b1:b0:37:ec:ba:2b:22:5b:ab:6e:c1:c9:bc:60:9e:
41:f9:bf:1a:4a:16:b7:38:8f:45:89:dd:70:34:9d:
b3:74:cd:2e:79:cb:eb:7c:75:df:71:1c:8f:e4:13:
4a:50:24:9d:35:f5:4e:ce:72:0f:01:87:4b:7f:ea:
26:d2:91:31:2e:11:43:57:6c:d5:fd:82:f3:55:84:
6b:6a:6d:1d:f4:c8:96:25:cb:6d:09:df:bb:60:d0:
ce:d4:71:e9:aa:ae:55:84:d9:d7:f9:e8:f8:3f:a9:
1c:df:c6:e5:ff:88:08:a4:b4:ec:d5:02:54:c4:de:
7b:ff:63:c2:a5:f4:c7:13:6d:17:c4:71:7a:a9:b2:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:2D:42:8B:8F:DD:AD:F9:47:01:33:E4:08:3B:20:85:BD:5A:1E
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/vnwtQouP3a35RwEz5Ag7IIW9Wh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.80.0/22
176.56.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ff:bd:34:ec:11:05:cb:cd:9d:a2:2c:3c:2f:d0:61:1f:75:
74:ad:1d:26:4b:a9:c9:77:68:1c:28:75:fd:02:28:d4:b2:22:
49:8a:2b:18:a4:d0:64:bd:30:7f:6c:ce:71:a4:f3:2c:88:51:
04:bb:e3:e2:d9:ad:a6:d4:2b:9f:8a:82:66:0c:55:ff:77:d3:
7d:86:e4:44:9d:30:10:61:31:92:6c:a4:91:54:91:74:08:c7:
b2:35:03:bc:a9:71:7e:3e:d7:50:46:8c:bf:07:6b:72:81:d7:
a2:ca:13:28:34:4e:23:fa:7f:80:4c:bc:d9:b0:12:79:b4:7d:
54:de:44:70:22:df:6d:36:b7:b4:42:4c:69:c5:80:62:92:db:
43:6e:98:11:d5:b8:c3:95:3a:8a:b6:80:81:15:80:1a:d8:04:
fc:23:12:46:f2:3a:91:0d:c1:38:6d:75:b7:2c:0d:1b:28:8f:
30:e3:e5:d6:0a:74:b8:9c:f8:b3:a2:0f:87:05:64:fa:c9:08:
62:f1:9e:0c:91:cc:f1:3c:b5:42:be:e2:19:53:88:90:19:34:
e8:65:0d:16:27:94:cf:1d:8f:95:49:1f:48:5a:9e:b5:25:f7:
32:bb:a7:25:76:3b:98:7d:a8:9a:47:97:b5:4f:e1:d1:a7:f1:
29:e0:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org