Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7X8HYg_F5P9Bv_ai_CrEDhWc8eA.roa
File: 7X8HYg_F5P9Bv_ai_CrEDhWc8eA.roa (raw, json)
Hash identifier: W/yFJgDtCmsOx2izjnNbrNZW8QBKLbUYOLXYrfZvPZw=
Subject key identifier: ED:7F:07:62:0F:C5:E4:FF:41:BF:F6:A2:FC:2A:C4:0E:15:9C:F1:E0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0185F47E2CF3B16344E7A3E4260D58B72E79
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7X8HYg_F5P9Bv_ai_CrEDhWc8eA.roa
Signing time: Fri 27 Jan 2023 18:29:47 +0000
ROA not before: Fri 27 Jan 2023 18:29:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 13:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:7e:2c:f3:b1:63:44:e7:a3:e4:26:0d:58:b7:2e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 27 18:29:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7f07620fc5e4ff41bff6a2fc2ac40e159cf1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:a6:c5:6a:ea:c0:d1:e1:95:42:86:e1:a2:
26:4a:7e:82:a0:84:1f:ba:03:8c:94:24:5b:1d:93:
17:13:df:68:1c:2a:d1:84:79:f8:08:25:ca:da:ba:
07:fb:c1:79:09:13:f1:43:00:33:b1:8e:93:c5:de:
0d:21:0c:c8:d4:97:05:72:f6:6d:41:ce:2e:24:bc:
32:cc:08:5e:54:62:b0:4b:3a:65:d2:36:d0:75:74:
b1:b2:6c:18:30:ae:47:b7:ee:72:77:5f:aa:18:1e:
51:5f:2e:35:31:19:3e:3b:03:b8:a2:02:52:f3:5f:
b4:e7:2d:a0:92:9d:dd:b4:49:92:fe:22:3b:ab:ff:
49:d1:79:72:ce:e2:6a:36:d4:0e:67:79:99:32:ea:
03:4b:9d:69:40:d9:ec:9b:16:99:35:80:bd:97:2d:
dc:3d:4b:fd:48:7c:d0:f9:d0:e9:2e:5e:6e:6a:87:
a1:e5:c0:0e:63:1f:ce:99:60:29:1a:94:75:4d:35:
b9:d1:60:ca:2f:70:57:21:8e:29:19:22:59:db:a3:
fc:d1:8b:c6:bf:f4:f5:d8:2c:0a:06:41:0f:e3:b8:
5c:7f:59:64:7c:f1:d7:20:71:1c:1e:5e:69:48:f5:
b7:18:ff:bc:bf:fe:e1:8f:c1:0a:32:4c:29:7f:6d:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:07:62:0F:C5:E4:FF:41:BF:F6:A2:FC:2A:C4:0E:15:9C:F1:E0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7X8HYg_F5P9Bv_ai_CrEDhWc8eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b5:bf:14:23:a3:85:ae:48:11:1d:50:c9:65:1c:1d:00:19:
89:8d:ac:a1:4c:a3:53:31:07:d4:0f:13:ff:18:48:85:f1:70:
1d:70:f4:d9:b3:aa:61:62:4a:be:b6:b1:98:67:49:10:c7:b1:
7d:96:cb:08:90:68:b8:74:7d:f5:b6:3f:17:15:92:f5:6f:a7:
a5:b1:dd:df:f6:ce:76:c6:40:d2:c2:24:50:82:41:75:0a:62:
5a:28:58:38:1c:41:55:e3:bb:0b:4d:3a:e4:0a:ef:7c:f9:03:
93:3c:55:c5:96:7a:f4:99:64:50:6a:75:5e:13:e3:55:b8:bb:
e0:7f:09:03:36:dc:8e:0e:9e:c8:d6:a7:14:bb:f5:1c:90:37:
40:c3:3e:e2:37:a5:a8:3d:04:24:17:b8:e2:bd:5e:1c:b4:ab:
0b:24:7a:d0:d6:c7:58:7b:79:13:60:7e:f8:f9:02:e7:5f:6c:
f4:3e:9a:8f:b8:8a:68:0b:8b:08:7d:da:fb:25:37:4a:56:a8:
c8:2d:c9:d2:d0:bd:61:c6:6e:2d:94:91:d7:c4:8e:72:d0:7d:
6b:15:ed:df:ce:c4:a0:16:85:85:a6:7b:49:b9:c1:e2:9b:0a:
b8:54:9b:fb:75:6b:7f:fa:ff:a1:04:1b:5a:e8:f0:38:05:e8:
93:f4:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org