Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/liGjEUHmmlIptG5m4fUYwcCfO3k.roa
File: liGjEUHmmlIptG5m4fUYwcCfO3k.roa (raw, json)
Hash identifier: t92+7M9Eb+O6GuDeqVWlq8u6MmsmmRaK1ccTf3VwQko=
Subject key identifier: 96:21:A3:11:41:E6:9A:52:29:B4:6E:66:E1:F5:18:C1:C0:9F:3B:79
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DB15B391813B37950D05F875E1F544EBD
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/liGjEUHmmlIptG5m4fUYwcCfO3k.roa
Signing time: Fri 16 Feb 2024 09:59:22 +0000
ROA not before: Fri 16 Feb 2024 09:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 212.16.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 15:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:5b:39:18:13:b3:79:50:d0:5f:87:5e:1f:54:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 16 09:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9621a31141e69a5229b46e66e1f518c1c09f3b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:1e:f0:76:c0:ef:e3:90:5a:13:2e:d0:3e:
70:97:e7:99:c4:fa:af:31:08:9a:a6:56:c1:00:21:
3e:92:6f:44:33:66:92:d0:1f:fe:c7:9c:69:4a:7f:
3b:3d:b8:f0:3d:c8:be:3f:8a:84:03:ed:df:53:f5:
40:41:58:98:41:99:a9:59:79:25:e7:a6:8b:42:58:
64:56:9d:90:3b:21:49:86:e8:94:01:a5:5e:ba:79:
6e:a1:94:f9:27:58:e8:8f:47:4a:c6:cc:f7:d6:33:
8a:91:5f:a3:af:a6:fb:cd:fe:18:02:5d:f3:d2:93:
8c:c2:66:5c:04:e1:5f:e5:da:4a:94:44:03:87:52:
2f:b0:80:85:c1:6a:ca:ae:2e:73:49:85:12:7f:96:
8b:ed:08:a3:a0:3b:a0:bf:af:8a:dc:e8:23:99:bf:
1c:e4:c5:f3:ef:fa:c4:ab:ba:ab:05:f6:40:ba:c4:
a8:e7:39:f2:ee:55:f9:4c:dc:d5:8f:77:67:39:1b:
a4:8b:e4:8a:76:cf:11:5b:c2:49:c0:ed:b7:d6:1b:
45:93:b9:01:30:9a:1b:b2:51:24:cc:b8:5d:ea:9e:
72:0a:10:8b:3e:e5:13:3d:a8:0c:e1:45:6c:3d:d0:
7f:f1:32:88:a3:b0:99:1c:55:bf:2c:f3:9b:76:6f:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:A3:11:41:E6:9A:52:29:B4:6E:66:E1:F5:18:C1:C0:9F:3B:79
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/liGjEUHmmlIptG5m4fUYwcCfO3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c3:36:3a:bb:0c:b4:ae:42:6c:9d:75:14:11:01:f7:f6:ae:
bc:ad:73:e9:ea:ac:0f:93:1d:da:f8:c1:7b:06:f9:49:9a:9e:
be:e5:6d:09:1d:83:17:bb:49:9f:81:71:bc:57:82:1f:15:4f:
9b:e1:11:bb:15:b6:20:fb:fb:17:29:c0:b3:f7:cd:c8:8d:85:
86:65:2c:87:15:61:d3:77:9a:a0:d9:86:a3:64:08:c4:8f:c2:
86:64:02:99:1f:ef:df:cd:a9:59:16:74:23:6d:3e:2a:e9:35:
73:57:72:08:3e:41:ae:91:f1:f8:ce:38:1b:cc:42:f3:e9:54:
ca:0b:65:5b:5f:d1:9e:87:53:48:5a:9e:55:fa:b3:b1:70:99:
a2:ab:39:c5:ff:4e:d1:03:d6:78:c8:80:cd:21:7f:ed:c5:75:
b4:72:4c:1a:e2:5f:8c:53:91:e5:b6:8c:3c:38:a9:ba:70:dc:
8e:de:9a:87:08:5b:a1:d9:33:b9:44:14:76:ca:ec:1a:84:14:
51:de:88:fe:c2:e9:b7:32:5d:a0:e1:2d:27:61:2b:99:12:a5:
49:8c:47:ce:e5:a3:fb:15:07:f5:74:a4:51:6d:57:7c:1c:39:
ac:e5:a9:65:53:5c:20:d9:04:b6:a4:ec:c2:32:e7:11:8d:2e:
15:2f:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org