Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_05AcJn7pwbvuI3t5ObEQHh77U0.roa
File: _05AcJn7pwbvuI3t5ObEQHh77U0.roa (raw, json)
Hash identifier: SubwvYykbRqip/5UlpbDOCzg4UVXUHkCzNSxyWfVi2o=
Subject key identifier: FF:4E:40:70:99:FB:A7:06:EF:B8:8D:ED:E4:E6:C4:40:78:7B:ED:4D
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 01856D660C1EC704F95699E1E512BC7805C8
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_05AcJn7pwbvuI3t5ObEQHh77U0.roa
Signing time: Sun 01 Jan 2023 12:54:42 +0000
ROA not before: Sun 01 Jan 2023 12:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59560
IP address blocks: 176.116.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:0c:1e:c7:04:f9:56:99:e1:e5:12:bc:78:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Jan 1 12:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff4e407099fba706efb88dede4e6c440787bed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:ea:4a:5c:d0:b9:fc:55:79:58:0b:9f:75:
be:bf:14:af:18:66:11:9e:d2:54:0b:15:77:b7:dd:
6a:35:4a:ec:f3:45:be:e1:a1:41:67:fd:a1:ce:dc:
c4:a2:9f:14:6b:a4:ce:7b:75:c5:fc:69:58:eb:62:
f3:0f:68:c3:62:3c:2e:79:b2:d2:56:ce:43:43:75:
b0:fa:31:a4:fc:df:a1:6e:8c:cf:ee:64:b5:bd:a5:
2f:36:ee:2c:ea:b7:7d:14:00:61:4d:58:77:18:e0:
c1:49:90:0a:02:fd:97:6c:fc:95:8f:88:38:6d:18:
04:7a:67:59:36:ff:f1:2b:7d:19:97:2d:77:c5:d0:
15:e3:ef:3d:b0:04:fc:df:6f:93:dc:01:3f:85:00:
64:51:a0:c8:57:31:99:ab:18:19:c0:80:ee:39:35:
1c:1c:bc:50:99:e2:2f:6e:c6:29:b4:16:33:4a:44:
5e:42:ed:ff:71:d8:1f:2b:98:78:b7:be:b1:9b:90:
07:dd:d6:ac:59:18:dc:9f:7f:50:76:27:95:d4:5f:
2b:1c:06:07:a5:6c:fc:86:87:93:0f:eb:ea:26:11:
bf:26:df:98:61:10:d4:81:34:ef:77:cf:2a:f1:cc:
02:08:68:c2:3a:2f:2c:6c:77:72:b5:25:68:e1:50:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:40:70:99:FB:A7:06:EF:B8:8D:ED:E4:E6:C4:40:78:7B:ED:4D
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_05AcJn7pwbvuI3t5ObEQHh77U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.145.0/24
Signature Algorithm: sha256WithRSAEncryption
70:aa:ea:1b:cf:4b:3a:07:29:2d:15:05:e4:6e:86:62:6e:e5:
3c:ff:f1:62:b1:5e:5a:fe:82:ba:d3:23:3f:ee:98:d1:fc:d6:
57:dc:58:c7:ca:b1:40:c5:e6:82:68:73:04:4f:c3:84:22:d6:
8d:89:66:46:5e:42:2b:1c:b5:e0:12:cf:4c:f7:a1:33:ff:6f:
7e:c6:76:e8:12:29:ba:d3:9e:c5:cc:18:ec:10:57:c6:14:2e:
31:da:e5:a5:32:84:dc:24:fb:d4:e5:20:57:6b:ba:47:1d:83:
ca:9b:f1:b0:ab:8e:b0:ed:80:17:28:e0:51:f4:1f:b1:ce:f9:
7c:eb:22:fb:c6:fa:08:25:40:8a:ea:36:4d:e3:89:20:b7:60:
f4:4a:61:6b:cc:e8:c4:0a:e3:d6:eb:8a:45:f0:73:00:35:78:
d4:90:d9:63:6c:1a:17:51:e4:df:27:47:a7:db:b4:a4:68:fd:
92:0e:13:a4:b8:86:4d:b4:d1:86:54:1b:62:b5:6a:06:41:41:
25:8a:37:99:38:aa:8a:09:74:88:6a:dd:1f:c2:14:0a:65:21:
b0:58:2c:e7:2c:c8:86:8a:41:35:9d:63:b0:54:5d:b5:d2:0a:
22:10:9d:90:e8:db:62:7b:d2:e7:99:f4:bb:69:a8:96:d1:32:
3f:c5:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:33 2024 by rpki-client on console-ams.rpki-client.org