Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T0k4hWm1e_tQvxv2ktc0zyqEtE0.roa
File: T0k4hWm1e_tQvxv2ktc0zyqEtE0.roa (raw, json)
Hash identifier: Tqh12xiK1iHJVtllppGerLDvlNNCl4NzdV384LKDS0g=
Subject key identifier: 4F:49:38:85:69:B5:7B:FB:50:BF:1B:F6:92:D7:34:CF:2A:84:B4:4D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A15E91E91B4CD7959CDEC728AFAC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T0k4hWm1e_tQvxv2ktc0zyqEtE0.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a1:5e:91:e9:1b:4c:d7:95:9c:de:c7:28:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f49388569b57bfb50bf1bf692d734cf2a84b44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:b9:a0:e1:24:cf:8c:8d:13:dc:aa:5c:67:
d8:44:a3:ad:f4:90:64:28:e4:ef:dc:bb:3e:07:cb:
b0:b1:14:e4:bc:1c:5c:d8:37:45:f5:71:91:90:c5:
8c:2c:a4:4c:73:4b:6a:ff:55:56:ec:fe:47:db:00:
d3:e6:84:88:ad:47:e2:4e:c4:29:9e:cc:99:63:ba:
34:d1:ac:80:81:6f:a4:9d:56:11:ba:ea:11:af:25:
9d:98:61:d7:3c:5e:f4:b0:2d:a1:ff:b7:82:1d:f3:
ec:e3:31:e1:11:a4:fe:51:2e:ea:9a:64:2f:cd:ca:
d0:57:4b:76:ac:4e:8a:1d:ef:30:3e:ba:bf:f3:f9:
ff:78:c3:14:50:49:c4:8b:c8:6d:a8:be:5d:e4:e8:
25:22:30:28:5a:e7:5d:c0:0a:17:f8:e0:59:8e:d6:
58:c1:33:f0:0f:c0:0e:7a:a9:88:db:10:39:5a:0d:
9e:f9:0b:85:e5:33:ad:8f:59:e3:89:c9:24:1c:f1:
b7:85:8f:e3:cb:1a:87:56:73:17:85:31:04:df:e8:
11:b0:3a:23:93:d2:37:33:f4:df:6f:eb:f1:96:1a:
b8:87:a7:dd:37:20:a3:4b:16:9b:f4:1c:33:91:2d:
78:ee:1a:2d:8c:2f:60:d5:27:5d:3c:b0:1b:06:8f:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:38:85:69:B5:7B:FB:50:BF:1B:F6:92:D7:34:CF:2A:84:B4:4D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/T0k4hWm1e_tQvxv2ktc0zyqEtE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:06:5a:60:3d:43:f3:c0:ac:58:a5:c1:1e:27:df:90:34:5e:
b8:e4:b3:46:e9:bd:d5:ff:35:ef:ef:a4:53:c0:fa:7b:40:fe:
03:81:b8:a3:da:37:1c:ac:24:9a:6d:41:c2:17:e1:e1:dd:85:
05:f0:59:ba:31:45:e2:da:f2:31:ac:01:80:32:b7:bd:c6:32:
41:7c:4b:6c:dd:a7:17:55:11:47:6d:fa:a7:ec:c2:84:74:1e:
74:a0:a2:a4:39:b0:0e:36:25:f5:1c:7c:8e:0a:59:b9:9c:c3:
38:bd:5d:9c:d4:47:c1:f9:f8:67:1c:b9:4c:dc:8e:92:00:7c:
a9:7b:f6:57:11:6e:6b:35:e1:20:f2:ac:b8:96:5f:78:b4:f9:
31:27:2f:58:b3:b5:f0:8e:25:58:56:64:14:44:02:61:d4:a7:
4c:22:ec:2c:eb:36:26:fd:89:a5:f2:e1:8b:4e:0a:2b:b6:93:
42:6d:f9:b6:7f:cc:3f:1d:b2:2b:cb:08:59:2e:7d:b0:cc:e6:
53:93:f6:75:73:ca:13:5f:52:f8:e0:8e:67:a9:fd:39:cf:df:
ef:1a:db:cb:ff:dc:56:d3:5d:70:bb:46:14:06:be:58:f2:8e:
cc:4d:bf:65:a5:51:8c:44:11:09:44:da:e8:9d:39:33:db:fd:
ab:f4:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org