Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WMbZXMaYgMmKSWvSJGM-csRaHcc.roa
File: WMbZXMaYgMmKSWvSJGM-csRaHcc.roa (raw, json)
Hash identifier: Ul9YGuwadeTS/sNVhf5Jaa8OVOAqPXYgnQs1CHwc1dE=
Subject key identifier: 58:C6:D9:5C:C6:98:80:C9:8A:49:6B:D2:24:63:3E:72:C4:5A:1D:C7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7ADD4F46BDDF267ACE458908CEF67
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WMbZXMaYgMmKSWvSJGM-csRaHcc.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212886
IP address blocks: 176.57.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 05:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:d4:f4:6b:dd:f2:67:ac:e4:58:90:8c:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58c6d95cc69880c98a496bd224633e72c45a1dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:5d:1c:8b:a3:aa:08:69:1e:cf:0b:a2:04:
3f:6f:9b:39:54:21:90:35:cf:f4:68:da:8d:7d:89:
96:df:45:bd:7c:91:ce:eb:2b:99:35:f4:4a:36:18:
8d:b3:64:da:f1:a3:0c:ea:f0:b7:20:34:f3:67:a7:
aa:b5:70:c4:06:44:e8:e0:d4:9d:0f:31:08:e6:30:
1c:fe:f3:a0:34:ae:be:5c:7a:65:c0:35:0d:76:e3:
5a:d7:04:c0:d5:37:ef:b6:5f:17:9b:14:b4:53:18:
ba:b0:27:16:bb:1a:5d:e3:0b:57:62:05:ec:55:00:
a0:5e:5f:f8:a6:f8:31:6c:ef:ca:4c:16:4b:2c:d0:
6b:90:c2:d1:75:0e:0c:5e:10:d6:3f:60:62:fd:67:
94:4b:01:33:cc:e9:56:93:9e:a3:47:33:71:aa:7d:
53:61:8a:b0:45:5d:3e:d5:6a:e3:1e:ee:07:bd:fc:
b7:2f:6f:a4:3f:66:4a:97:53:bb:ba:90:4b:a0:e4:
67:6a:32:65:72:4c:1e:45:28:24:c8:2e:e6:66:6b:
37:cf:1c:39:7a:39:b0:c6:6d:fd:2b:94:f0:c7:ca:
6d:c1:78:cd:ff:69:56:19:95:45:a4:23:f5:d5:e6:
54:e2:96:44:d5:c1:ed:53:ef:3a:06:29:93:4a:98:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:D9:5C:C6:98:80:C9:8A:49:6B:D2:24:63:3E:72:C4:5A:1D:C7
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WMbZXMaYgMmKSWvSJGM-csRaHcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.52.0/24
Signature Algorithm: sha256WithRSAEncryption
09:63:14:42:07:52:ba:ee:25:0b:d0:4a:0b:e9:78:bb:d1:0d:
d7:68:ee:ad:62:7e:be:55:2d:28:06:2d:ab:c9:67:50:89:46:
14:83:d8:0b:6f:51:56:0e:da:1a:1e:78:12:61:d4:4a:86:7a:
02:f0:ec:34:3e:18:e3:24:b9:0a:d5:b4:a5:e8:29:2f:52:05:
3d:77:85:8d:c9:01:32:24:ac:a4:c9:cf:5a:5b:b8:29:0b:41:
1d:c5:c8:e8:35:cb:4a:6b:09:c8:1a:ce:11:a4:5d:f8:e1:c1:
a8:76:31:4a:2e:c1:0e:33:65:87:8e:0a:62:1d:73:9f:09:7f:
55:ca:40:27:a5:42:03:3e:77:ab:db:98:05:88:11:b3:90:39:
a1:5e:2d:ab:af:31:5e:10:a3:e6:1e:7f:17:cc:f6:50:99:9f:
ca:07:08:68:e8:10:e9:53:e9:c3:0f:25:5d:06:c1:77:7d:4e:
09:01:fc:eb:45:5d:35:b5:7c:77:c8:e7:32:4e:94:c0:49:8e:
9e:8b:e5:c0:80:3c:ad:8f:e8:cc:28:52:d4:70:74:6b:26:eb:
9a:6b:b1:7e:61:ec:8a:d0:28:99:5b:aa:a7:36:48:15:4e:7d:
56:05:0e:3f:72:61:0f:d8:ad:13:0e:09:8f:3c:a3:36:c4:5d:
ac:3d:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org