Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-ZUQbeZ-w3BxmG5SsDabS8XXPYg.roa
File: 1-ZUQbeZ-w3BxmG5SsDabS8XXPYg.roa (raw, json)
Hash identifier: K+kKGZNnAr5A2Xy7mNc8xJWQyMXDG3RiGH0gXtnWRRg=
Subject key identifier: F9:95:10:6D:E6:7E:C3:70:71:98:6E:52:B0:36:9B:4B:C5:D7:3D:88
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C86C488CFA7EFB62BE15AC436A7E84AE0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-ZUQbeZ-w3BxmG5SsDabS8XXPYg.roa
Signing time: Wed 20 Dec 2023 10:27:56 +0000
ROA not before: Wed 20 Dec 2023 10:27:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142561
IP address blocks: 176.57.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:c4:88:cf:a7:ef:b6:2b:e1:5a:c4:36:a7:e8:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 20 10:27:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f995106de67ec37071986e52b0369b4bc5d73d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:ad:31:b0:d1:c9:9e:56:0a:46:24:86:b5:
6b:57:99:c5:f2:1a:ac:8d:7b:74:9c:8d:88:a9:ec:
dd:67:fc:e7:4f:55:49:bc:7f:25:67:a5:dd:ce:be:
1c:df:ec:fd:30:e2:2f:4c:c4:3c:31:5b:77:7b:bf:
7d:41:b1:c1:35:c0:95:06:f1:ce:bb:a9:df:1b:6a:
27:b3:d0:bd:45:ae:d2:e5:1c:92:f7:0e:4c:3f:61:
27:52:68:e5:a7:2f:f8:77:50:79:7d:10:cc:fc:94:
a7:46:93:99:2f:2a:59:e9:45:65:09:3b:77:8f:5c:
fe:34:16:d3:f0:2a:8c:a9:7b:db:da:89:e7:9d:b8:
8d:d7:a8:d6:ec:e2:d2:94:38:aa:d8:dd:82:96:85:
d7:eb:b6:66:f8:af:76:83:ba:77:ff:1d:6f:b5:18:
57:b8:ca:8a:ab:71:96:da:70:07:03:19:68:67:69:
98:df:34:93:ea:5c:fa:04:38:b4:86:a2:95:fb:24:
b9:3d:1e:24:d8:da:ce:15:d1:d1:1d:77:b8:a8:7e:
e0:a9:10:cb:bd:f2:29:27:ea:eb:1e:af:e2:59:ef:
bc:5d:aa:97:88:75:b3:31:31:de:06:99:a6:48:22:
31:91:35:65:52:2e:2f:97:57:50:c3:01:35:07:d4:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:10:6D:E6:7E:C3:70:71:98:6E:52:B0:36:9B:4B:C5:D7:3D:88
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-ZUQbeZ-w3BxmG5SsDabS8XXPYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
02:66:d6:17:cf:1d:99:45:5d:c1:e5:c3:30:77:e4:78:78:8b:
e0:42:e5:9b:19:71:38:b6:bf:b3:64:cd:49:8e:5d:83:d3:f2:
fb:b5:9a:3d:b7:d5:c8:4c:dd:40:89:70:f4:70:53:41:a7:4e:
69:16:68:76:c5:fd:18:4f:87:d1:d8:90:26:11:f7:5e:d9:98:
c9:ba:79:2b:2a:c5:57:ab:08:83:ce:df:dc:1d:ce:8b:d4:87:
fa:79:08:15:07:05:60:42:42:25:5f:0c:94:db:ee:6f:a2:e9:
4e:5d:bf:61:aa:98:c6:98:83:1c:92:44:f8:ef:6f:c4:71:ed:
0e:e1:7e:51:8f:7f:94:32:81:ac:64:d6:2c:ff:33:fc:25:1e:
ca:bf:86:2b:ca:46:94:a5:44:0d:8f:fb:14:c1:59:36:64:2f:
e2:ed:e1:07:65:ed:7c:75:23:a3:3d:9a:c5:63:14:5f:e7:8c:
31:fa:85:3a:8c:cc:68:1a:b0:3c:44:5a:13:97:99:5d:8c:9f:
9e:9a:84:50:7a:85:ae:63:82:a1:db:92:d8:b3:2e:36:47:b2:
79:fd:b2:a1:7b:09:32:dc:6a:86:b2:a9:91:2f:85:bc:9e:5c:
60:57:df:b5:f1:1e:ef:7e:77:34:a4:da:16:fa:dd:13:5e:0d:
cd:45:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org