Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/66_9crKJsWDPetacNRyiW95MKKs.roa
File: 66_9crKJsWDPetacNRyiW95MKKs.roa (raw, json)
Hash identifier: 0xqv6CsriPXeyRxh13dNf2Sw7c5flR1FiiizXV815dg=
Subject key identifier: EB:AF:FD:72:B2:89:B1:60:CF:7A:D6:9C:35:1C:A2:5B:DE:4C:28:AB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7AD44AF842818ADEBBA6C726CA8C4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/66_9crKJsWDPetacNRyiW95MKKs.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 176.57.49.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 12:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:44:af:84:28:18:ad:eb:ba:6c:72:6c:a8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebaffd72b289b160cf7ad69c351ca25bde4c28ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:1f:14:5f:a4:22:f2:4e:31:11:32:a0:b0:
97:12:b5:93:c7:9f:b6:08:51:f3:90:15:dc:f3:fc:
e4:3a:72:af:0d:19:47:80:87:99:13:63:a0:a2:ab:
79:15:72:62:0c:41:70:34:b9:59:b6:5c:e0:c2:06:
f5:50:94:11:27:91:92:af:72:99:85:7a:1c:d6:3e:
0d:fa:e1:d9:40:e8:34:db:ee:cd:7f:e6:41:3d:c9:
67:7c:28:b9:80:b0:ab:23:6b:cc:7f:9e:9b:84:c4:
6b:bd:7a:68:3a:f7:96:12:8a:58:79:0c:4f:db:3e:
0e:63:b0:11:98:55:9b:03:c4:39:d0:08:3a:81:85:
c8:72:f0:e3:93:59:58:91:b2:e0:0a:17:68:89:d4:
8b:74:4d:71:b3:15:cb:13:a6:ed:d4:3e:81:fc:dd:
90:71:65:b9:2b:63:97:fb:5e:cd:1f:e2:4e:8d:25:
1a:1e:01:fd:12:7d:6d:62:73:02:34:bf:bb:dc:bd:
37:f7:94:ef:ac:f4:70:15:be:31:85:12:1c:aa:93:
a8:9e:92:26:3f:76:87:99:79:4f:87:c9:31:bd:95:
1d:e3:e8:0b:34:10:ea:5a:d1:72:5b:c2:cf:f0:1a:
68:28:12:a8:c0:50:6c:b4:47:3a:39:55:68:5e:27:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AF:FD:72:B2:89:B1:60:CF:7A:D6:9C:35:1C:A2:5B:DE:4C:28:AB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/66_9crKJsWDPetacNRyiW95MKKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:08:d5:42:c0:1f:ff:10:f6:ba:56:ba:3f:21:30:52:bf:e5:
0a:ae:54:f9:20:ec:ac:25:3b:95:3b:cd:93:76:69:84:5d:e4:
0c:91:0a:56:e4:c2:ac:f8:ee:8d:3e:e3:11:8e:fa:b1:f9:5e:
7f:d9:cc:36:6e:26:1e:64:5f:1e:a6:17:c7:ab:c6:a1:df:61:
a7:4b:22:06:60:f7:bd:f0:dc:64:e2:4e:df:60:b5:67:4e:2a:
11:59:68:74:8c:60:80:f0:ed:6b:7c:f8:89:fb:ba:91:5a:df:
10:0d:51:d7:e2:1e:90:8e:b5:d2:8d:44:b8:bf:18:2e:44:6d:
b5:66:21:de:46:a9:b6:f7:46:1b:cd:06:4c:96:a8:37:c5:fb:
23:d0:40:96:f7:b9:7f:92:b3:26:55:e3:95:d0:1d:b1:cf:bd:
a7:05:f6:ac:18:7b:aa:65:68:d7:30:73:8a:e6:45:02:1f:44:
14:a2:0a:5e:d9:e1:f6:fb:58:3b:40:88:31:0c:46:be:28:53:
0e:b5:d5:62:86:f4:c1:52:80:02:3f:88:dc:ea:86:bb:1b:3c:
9b:da:2e:70:db:67:a8:63:34:b8:39:31:73:16:e4:8c:cd:91:
6c:de:64:54:1e:13:dd:7e:8a:d0:f6:d0:3e:fa:c0:4e:06:46:
6f:c5:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:53 2024 by rpki-client on console-fra.rpki-client.org