Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/5hkHo0TXUBiLvPMaC6htfCBUFbU.roa
File: 5hkHo0TXUBiLvPMaC6htfCBUFbU.roa (raw, json)
Hash identifier: vssqnqRTBYXST+cgR3rYaUjobJlyNXzYZOpLItqvL7M=
Subject key identifier: E6:19:07:A3:44:D7:50:18:8B:BC:F3:1A:0B:A8:6D:7C:20:54:15:B5
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01889B205458DC2A87EB130F6B2B5BA3036A
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/5hkHo0TXUBiLvPMaC6htfCBUFbU.roa
Signing time: Thu 08 Jun 2023 13:09:27 +0000
ROA not before: Thu 08 Jun 2023 13:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60557
IP address blocks: 176.119.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:20:54:58:dc:2a:87:eb:13:0f:6b:2b:5b:a3:03:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jun 8 13:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e61907a344d750188bbcf31a0ba86d7c205415b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:de:ef:f5:58:fa:99:a1:1a:51:e8:3b:00:
b1:32:42:4a:93:f4:ff:d8:b6:a5:96:53:02:6c:a9:
37:d3:82:f9:df:f2:ad:6b:c0:6c:c1:87:5e:c4:26:
27:7a:12:02:e7:fd:e0:5a:a2:ec:85:ca:9a:d5:8f:
1f:bb:9e:8f:27:70:aa:26:8d:f4:33:5f:50:14:c3:
55:6c:71:65:15:41:86:bb:42:fb:11:2e:ef:91:47:
da:84:0e:03:f5:af:a3:5c:36:78:e4:5a:99:07:1c:
80:7a:dd:fc:2a:6c:03:8a:63:23:00:94:c9:0c:e9:
1d:bc:ae:c9:79:82:f8:e4:50:b0:99:84:a6:f2:28:
e2:a3:07:66:98:e9:95:8d:09:87:6b:25:72:02:c5:
44:84:52:1a:b6:88:dd:01:f2:f7:f3:e3:6c:bb:fc:
e0:88:c5:9c:c1:c7:3b:40:b8:bf:f2:22:41:0e:92:
9f:04:27:b1:18:0e:db:bd:3c:b3:76:b6:6b:3b:f2:
7d:50:0b:53:e0:c0:06:d5:bc:41:2d:c4:4e:64:22:
8d:f8:0a:0f:54:db:53:6b:a7:e9:9f:36:42:85:7f:
cb:a2:92:c8:67:f2:2f:09:74:c2:d7:55:da:40:68:
61:31:22:f6:47:f0:06:54:d9:d7:98:a3:22:6d:72:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:07:A3:44:D7:50:18:8B:BC:F3:1A:0B:A8:6D:7C:20:54:15:B5
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/5hkHo0TXUBiLvPMaC6htfCBUFbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.215.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ce:ee:8a:a6:95:a4:b8:b6:e2:9e:92:e6:35:e1:d9:85:65:
fb:4b:1f:b4:44:1a:bf:5c:c0:3e:90:35:9c:65:cd:1e:61:dc:
56:11:76:6f:43:99:4b:14:6a:be:bb:03:85:a0:5a:ee:95:c3:
38:3a:4c:72:11:d6:e8:8f:d9:34:9f:8c:96:55:90:65:54:18:
52:db:b0:d6:ab:c1:0e:c8:60:7e:23:ef:16:82:a4:e3:fe:9e:
b1:e9:47:8b:d8:34:fe:a0:d9:37:27:4c:5d:65:74:bf:51:00:
26:cb:30:7a:a3:4f:75:77:49:d9:30:29:6a:ea:e4:d9:6e:ff:
f0:75:8c:ea:ed:60:89:4e:e5:95:80:de:40:12:3b:a9:c6:4c:
b9:93:6e:d7:bd:43:35:0e:91:9a:64:70:22:0f:ba:d3:9e:2f:
14:09:e1:d3:ae:d2:99:f0:48:fc:34:6c:e4:75:73:9d:8a:89:
46:fe:86:56:a6:27:0d:5c:67:0f:eb:0a:de:4e:b8:2b:45:a8:
fa:37:da:ee:1c:e8:e4:36:b8:1b:d0:fb:0a:8a:e6:54:dc:5a:
f3:88:d7:5b:f2:7e:cb:55:a9:10:20:b6:50:b3:f2:6d:d1:07:
b4:81:90:57:33:d4:30:c5:aa:1b:2f:cd:d4:3b:01:5a:18:c4:
e6:39:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org