Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-4hgFHfQbcN1qgnbR7hgFut0DRg.roa
File: 1-4hgFHfQbcN1qgnbR7hgFut0DRg.roa (raw, json)
Hash identifier: ggIHaNiAGJmcKHh7fl6UeZUc2nNYOGYnKOrD2Cq92RM=
Subject key identifier: FB:88:60:14:77:D0:6D:C3:75:AA:09:DB:47:B8:60:16:EB:74:0D:18
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C9765C545462163DBF943FE361ED81DE9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-4hgFHfQbcN1qgnbR7hgFut0DRg.roa
Signing time: Sat 23 Dec 2023 15:57:58 +0000
ROA not before: Sat 23 Dec 2023 15:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 176.57.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:65:c5:45:46:21:63:db:f9:43:fe:36:1e:d8:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 23 15:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb88601477d06dc375aa09db47b86016eb740d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:75:40:fb:a6:d2:0e:fc:df:92:f7:90:57:
cf:45:84:75:9b:f0:a4:c8:01:3a:43:89:8d:7e:5e:
8e:d0:53:09:69:cd:bd:18:de:7e:ab:10:61:90:3e:
a9:60:1b:25:82:85:da:ca:d7:c4:27:6c:a5:50:a0:
61:9d:2c:78:10:50:8e:3f:8a:b1:ac:20:3b:56:72:
6c:85:53:73:b0:38:d2:39:53:b3:35:47:15:a5:81:
70:ec:21:ef:6e:b2:9d:60:28:29:6f:c9:c6:da:f1:
a8:23:f3:fe:61:99:da:4a:82:d2:aa:c4:c2:cd:51:
9e:ac:ca:55:8c:df:92:37:61:54:91:c1:1c:42:55:
32:11:63:5e:8d:31:ab:f2:1a:6b:56:a3:1f:e2:8a:
92:be:77:ac:29:13:aa:bb:60:c0:05:78:2c:aa:e0:
76:35:08:73:59:de:ad:9b:cf:8e:33:4b:89:79:50:
39:48:f3:8d:44:0f:45:3e:7e:32:7e:44:07:51:35:
75:66:93:35:25:8c:08:82:ee:56:b6:1b:64:53:e1:
6f:aa:b7:14:7f:5d:dd:9e:a3:f4:fe:6f:3f:52:28:
a1:1a:45:1a:78:97:91:f3:6c:92:ff:03:b3:c0:12:
e5:e6:4f:c5:23:bd:f5:54:84:f1:60:fc:e2:d7:4d:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:60:14:77:D0:6D:C3:75:AA:09:DB:47:B8:60:16:EB:74:0D:18
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-4hgFHfQbcN1qgnbR7hgFut0DRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:5f:3e:59:04:74:1e:0a:3b:97:c1:98:a1:97:ae:80:bc:b0:
61:88:38:11:9b:db:74:45:d9:45:b0:66:86:c1:b3:ec:91:28:
5e:ab:11:37:62:fd:b9:c3:68:51:2a:40:e8:22:4b:35:aa:a8:
a7:76:be:c4:cd:33:ce:49:e3:a2:77:ae:22:f2:d9:17:df:df:
c4:61:fb:57:11:c7:a8:ac:81:4f:ea:f1:3d:7a:b4:9c:12:17:
91:73:e4:22:d0:3c:5d:58:c5:5a:a2:44:cf:80:53:42:a8:2b:
50:86:b7:34:8f:ac:21:04:cc:f1:f6:de:a0:97:72:9a:56:7a:
55:0e:17:45:cd:24:a6:d8:cb:94:31:02:6f:e0:53:40:91:51:
aa:d3:53:5b:15:4e:c2:e7:1c:da:03:e4:6d:61:8e:df:84:b1:
3f:93:8e:1c:e5:8d:46:5a:b5:28:d0:30:56:09:a5:c9:17:7c:
2c:3c:05:98:00:f1:f4:52:ff:7b:4a:cc:ca:87:3a:92:b2:80:
a6:0f:ea:0e:57:6b:99:35:60:e1:78:fc:b5:77:ab:a9:a5:df:
35:75:7a:e8:50:f1:4a:ea:bb:84:19:aa:f7:30:3a:8d:97:50:
5d:40:19:63:9e:01:e7:9a:83:93:9c:a9:19:32:d0:ef:79:3a:
25:b4:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org