Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/V1MLZvBIZOKkuhTpDqWhjA_9l0k.roa
File: V1MLZvBIZOKkuhTpDqWhjA_9l0k.roa (raw, json)
Hash identifier: qpzUakrZGkWNbO3Pd2r/aZSkDAerNLf0mqj705YDp2c=
Subject key identifier: 57:53:0B:66:F0:48:64:E2:A4:BA:14:E9:0E:A5:A1:8C:0F:FD:97:49
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01856E4B003E23996BFB31DFEB2008A5F268
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/V1MLZvBIZOKkuhTpDqWhjA_9l0k.roa
Signing time: Sun 01 Jan 2023 17:04:46 +0000
ROA not before: Sun 01 Jan 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48276
IP address blocks: 176.96.184.0/22 maxlen: 24
176.96.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4b:00:3e:23:99:6b:fb:31:df:eb:20:08:a5:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57530b66f04864e2a4ba14e90ea5a18c0ffd9749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:86:f0:ad:f8:45:0a:e1:87:24:92:1c:e9:
f9:f7:d5:c4:69:92:42:77:7b:21:1f:c5:31:b8:71:
fa:e7:c7:67:71:fa:c0:20:d3:95:17:3d:da:72:18:
91:3b:49:dd:59:af:2d:96:4d:86:ab:c0:5a:4e:38:
e9:30:92:43:43:ba:dd:58:c1:1a:dc:8c:20:5a:0f:
a8:ab:ef:50:cd:0b:fb:28:c8:a3:fa:fd:90:8b:aa:
d1:ea:c6:7f:56:7f:22:d3:21:30:89:c1:3b:fe:af:
19:b4:91:83:07:f7:e9:0e:e6:fe:1f:5b:34:a7:0f:
e1:90:2d:9c:d5:d9:10:16:3c:05:f6:40:62:76:93:
ca:23:79:5d:8f:6f:97:c0:0d:5c:65:ba:96:4c:42:
ae:34:2c:89:a1:33:5e:fc:5f:b4:1f:af:a1:4b:56:
ae:ba:3f:14:ad:c6:b5:79:d0:5a:68:6f:68:04:ee:
05:cc:f0:32:9f:08:5f:2f:e4:a9:11:d1:3b:f3:b9:
ad:c5:64:ac:4c:05:ba:36:7d:2c:41:4d:2c:15:ef:
10:23:49:bf:5e:80:c0:ff:72:0a:ff:51:a5:5c:87:
cd:de:b9:a2:76:b3:5d:8c:64:3d:58:6f:a8:89:75:
53:5f:e7:18:09:8c:d5:92:b5:29:51:46:5c:da:ff:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:0B:66:F0:48:64:E2:A4:BA:14:E9:0E:A5:A1:8C:0F:FD:97:49
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/V1MLZvBIZOKkuhTpDqWhjA_9l0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.184.0-176.96.188.255
Signature Algorithm: sha256WithRSAEncryption
6b:42:93:8c:aa:2f:41:d6:db:a2:3a:e3:80:22:be:c6:2e:58:
1a:34:d0:c7:80:f4:7e:4d:20:f8:7a:8c:90:25:50:f0:d6:9a:
bb:62:56:15:ae:a7:ab:8e:b4:6b:a7:76:52:68:64:c7:23:34:
ff:a6:2c:1b:fc:63:36:bd:43:5c:c7:ca:40:fd:fd:88:62:d2:
87:31:f1:6a:3a:8f:8c:0b:46:29:dc:74:48:ea:fa:48:f3:75:
b3:ba:3d:e4:18:15:04:18:56:6c:ba:61:d5:26:2c:e2:29:85:
95:52:9e:f3:5b:25:93:c7:40:33:e7:57:09:01:8b:a3:f4:d4:
26:cd:c1:11:3d:b7:ed:3c:0f:e7:3e:cf:31:21:99:12:a2:8a:
77:c3:98:d4:8e:3a:6f:c4:65:d5:08:1c:cb:6f:f2:a2:d4:a4:
78:25:dd:5e:42:1c:53:f7:eb:12:a8:b3:cf:83:b5:63:00:b5:
57:30:41:c0:44:99:a6:b2:4f:09:62:2a:e6:99:b7:f2:de:00:
a8:bf:de:b5:1c:e4:10:f6:9c:3a:bb:3c:c7:8e:31:ba:bd:6b:
d1:0d:b4:95:4d:56:0c:85:67:08:20:ad:d1:91:7d:58:0d:e5:
68:9a:c9:85:1b:92:6e:86:60:e3:84:76:e1:5f:cb:39:a0:69:
bc:bd:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:30 2024 by rpki-client on console-ams.rpki-client.org