Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/anfISlDyf1Lsht_Mpn8SDDsHk5M.roa
File: anfISlDyf1Lsht_Mpn8SDDsHk5M.roa (raw, json)
Hash identifier: Nul1G8XAyz+Vp/zsdYEVC7F/ivRvAQr+mhyEbNWhXVQ=
Subject key identifier: 6A:77:C8:4A:50:F2:7F:52:EC:86:DF:CC:A6:7F:12:0C:3B:07:93:93
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019050CDABBC7F960A46843E126AAA26EFC9
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/anfISlDyf1Lsht_Mpn8SDDsHk5M.roa
Signing time: Tue 25 Jun 2024 19:09:34 +0000
ROA not before: Tue 25 Jun 2024 19:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 176.103.224.0/24 maxlen: 24
176.103.225.0/24 maxlen: 24
176.103.226.0/24 maxlen: 24
176.103.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 15:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:cd:ab:bc:7f:96:0a:46:84:3e:12:6a:aa:26:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 25 19:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a77c84a50f27f52ec86dfcca67f120c3b079393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:28:37:be:1f:8c:eb:10:93:9e:f7:6f:26:
c0:25:a9:a3:a5:08:0b:96:59:15:16:d1:79:c7:67:
71:48:24:f7:76:60:b7:0c:b4:d5:6a:05:e9:88:38:
10:d2:05:ba:4d:f9:9b:07:18:fa:4b:93:3c:2f:e2:
20:34:d3:52:ce:86:48:b8:1e:20:c3:ca:ad:2c:92:
4a:7d:d0:85:19:ff:d5:57:0c:17:ae:e5:39:79:90:
d7:42:54:c2:3c:61:43:03:5c:d6:51:ea:6f:d1:0e:
ba:85:45:fd:88:12:85:8f:2e:47:d3:07:b5:45:03:
25:a0:3a:77:26:80:f3:ce:1c:8a:dd:c3:ed:34:84:
c3:7c:90:c6:0f:b8:c0:4b:07:13:21:f4:17:00:77:
90:4b:89:17:92:f5:74:d4:4b:5e:91:01:ee:44:83:
75:09:24:1d:86:a5:08:bb:67:e8:db:c8:13:9d:40:
4a:87:e1:ff:3b:b4:0a:db:6f:65:97:68:15:15:ca:
da:17:e8:b9:79:0f:56:45:b1:68:f1:3f:80:b4:82:
19:2e:cb:69:d3:79:97:6d:76:98:69:a3:be:81:69:
08:de:08:bf:71:af:38:91:10:a6:2a:d5:2f:4a:09:
3c:a8:46:46:a3:88:65:aa:5d:e4:23:2f:11:df:77:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:C8:4A:50:F2:7F:52:EC:86:DF:CC:A6:7F:12:0C:3B:07:93:93
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/anfISlDyf1Lsht_Mpn8SDDsHk5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.224.0/22
Signature Algorithm: sha256WithRSAEncryption
00:38:22:07:b3:f7:4b:9c:08:97:16:c6:82:3b:2c:df:23:2f:
f9:c8:7f:b8:65:4c:87:0d:69:2e:cb:35:c2:98:a6:29:8d:22:
06:70:65:8e:72:0b:fd:ff:48:70:a4:eb:7b:2d:00:9b:c5:ba:
50:39:6a:e4:b2:96:84:4a:66:6a:dc:fd:34:99:a5:ef:fc:77:
19:07:d6:7d:9b:ff:05:bd:03:e6:92:15:5b:60:52:7e:45:37:
44:8c:e8:1a:b3:e4:70:52:4a:97:5d:37:5f:95:71:31:5b:6a:
1a:0c:53:c0:ef:fc:fa:00:ef:e0:9d:94:ef:48:04:5f:6d:75:
b3:eb:4a:2d:b1:e8:67:23:85:48:dc:8e:ed:08:18:47:ee:c4:
da:59:a9:4a:70:b4:e1:1f:ef:8a:3c:fa:a1:e3:4f:0d:fa:99:
3d:fc:0a:64:db:7d:1e:2e:fe:bf:00:7f:69:04:e2:d5:4e:28:
60:31:68:83:85:ad:6a:88:75:2e:cc:57:62:3d:c3:c7:f9:fd:
91:c0:f8:a5:78:10:70:c3:a8:0c:5b:e4:59:67:73:6d:dc:fb:
b2:1e:93:95:76:dc:7c:35:04:2a:3f:4b:38:8c:da:97:d3:79:
2a:3f:4a:0c:84:24:04:ae:66:1f:5b:49:37:57:f5:fc:ad:94:
ad:34:2b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 17:36:11 2024 by rpki-client on console-ams.rpki-client.org