Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/Dp_HuT5Q6girc7JclkLMxZp2tvg.roa
File: Dp_HuT5Q6girc7JclkLMxZp2tvg.roa (raw, json)
Hash identifier: xD0jnsTIuVyaiRq4IsJB1mkteGnAK/i/gEpj2vheO3w=
Subject key identifier: 0E:9F:C7:B9:3E:50:EA:08:AB:73:B2:5C:96:42:CC:C5:9A:76:B6:F8
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01856C0A53E864FDCB246FD2D1B4ED18B8CF
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/Dp_HuT5Q6girc7JclkLMxZp2tvg.roa
Signing time: Sun 01 Jan 2023 06:34:54 +0000
ROA not before: Sun 01 Jan 2023 06:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208306
IP address blocks: 176.222.63.0/24 maxlen: 24
176.222.60.0/24 maxlen: 24
176.222.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 02:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:53:e8:64:fd:cb:24:6f:d2:d1:b4:ed:18:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jan 1 06:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9fc7b93e50ea08ab73b25c9642ccc59a76b6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:c9:65:f9:e2:5c:10:50:88:58:45:a3:55:
d3:0e:4c:a2:cd:c9:34:9a:46:36:99:62:b6:8a:98:
23:b4:b1:e1:2b:98:ae:18:13:20:29:21:11:5e:57:
c4:f0:00:a0:5d:31:5e:aa:51:83:3d:be:8f:39:6c:
5b:8e:38:ea:40:ae:a0:56:f3:fb:f5:e2:81:37:45:
87:15:a6:5b:49:df:48:34:69:da:a3:e0:dd:cb:00:
c7:7b:c3:07:e6:ca:fe:1e:f4:b8:d5:7a:9b:57:a0:
fc:29:40:d3:59:13:87:d8:ae:27:81:f7:a6:c1:ce:
81:fc:72:bf:02:50:6c:59:cd:85:a7:ec:bb:bd:36:
86:7d:29:c0:c3:64:cd:28:02:e2:51:0b:0c:2a:08:
42:53:02:f8:3a:28:e8:a1:f1:0a:5c:18:cc:cf:91:
87:c2:03:57:1d:8e:68:18:aa:46:bb:e6:c7:f5:d8:
c7:4e:be:5d:5e:4b:3f:46:db:9a:4d:ff:8c:f5:23:
bf:73:95:f6:19:d6:c8:99:9c:5a:a0:39:0d:91:ad:
df:39:83:30:b6:6e:d8:b5:c2:4e:e0:fd:38:8c:1f:
c6:f0:c1:75:36:f9:40:51:f5:de:4f:fe:4b:61:0e:
91:8e:98:26:97:50:b6:9a:7d:ef:05:a8:66:16:eb:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:C7:B9:3E:50:EA:08:AB:73:B2:5C:96:42:CC:C5:9A:76:B6:F8
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/Dp_HuT5Q6girc7JclkLMxZp2tvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.60.0/23
176.222.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:78:2a:86:74:c8:47:a4:ed:1e:01:d9:3c:1c:54:f9:92:54:
af:65:2e:8c:a4:28:a6:a5:ec:91:de:55:de:3d:64:5e:78:c1:
be:72:6b:ed:41:2b:8b:03:46:ca:8b:28:b6:11:e9:a0:d8:f3:
f8:4d:73:3a:bf:c8:d7:94:66:25:93:6d:3d:b3:55:f9:2b:e9:
74:e1:56:6a:53:30:7d:14:9a:6e:fd:c7:98:5f:63:9c:f0:42:
ba:a3:cf:7a:17:20:93:5e:3a:74:40:cf:22:38:4a:12:36:5e:
31:15:11:69:da:91:17:ef:9b:7b:9a:d2:8a:46:96:c8:21:19:
a6:12:e7:14:f6:72:64:19:eb:8b:48:3f:ed:37:d1:1b:ef:3a:
71:82:67:af:d0:98:f7:89:fd:a3:37:81:21:06:76:a8:f6:1c:
fa:cb:54:13:b8:21:f6:a0:31:be:35:b1:d6:7f:22:b1:9c:fa:
38:9d:ec:7a:6f:77:e3:d0:7a:68:0a:e6:bc:a7:82:9f:1d:93:
0c:8e:5d:25:34:6c:2c:9f:ee:0e:b2:10:bc:ae:71:d0:2b:49:
9d:ae:fb:f5:68:58:d2:53:14:97:e4:43:98:ff:93:1a:e7:71:
b4:24:bf:e4:b4:4e:36:77:b4:d3:e1:f5:2d:53:48:b9:d8:08:
18:f6:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:41 2024 by rpki-client on console-ams.rpki-client.org