Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z4IbtWqFQek-CIW1UNaZ6r055_I.roa
File: Z4IbtWqFQek-CIW1UNaZ6r055_I.roa (raw, json)
Hash identifier: Yp2OQVyG49xTvrOWbYfEyC6QtH0niN6rsg8vynoYbR0=
Subject key identifier: 67:82:1B:B5:6A:85:41:E9:3E:08:85:B5:50:D6:99:EA:BD:39:E7:F2
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188AC62700AE2D6E7C02ECEAC939BD816B0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z4IbtWqFQek-CIW1UNaZ6r055_I.roa
Signing time: Sun 11 Jun 2023 21:35:12 +0000
ROA not before: Sun 11 Jun 2023 21:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.57.58.0/23 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 20:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ac:62:70:0a:e2:d6:e7:c0:2e:ce:ac:93:9b:d8:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 11 21:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67821bb56a8541e93e0885b550d699eabd39e7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:0e:63:9a:f7:f6:dd:12:b3:a4:dc:15:95:
04:5f:f9:2f:19:53:63:bc:23:44:ad:b4:57:9d:d3:
33:a2:73:78:8c:63:64:f9:34:3a:a5:27:f7:84:2e:
a7:4e:14:20:c5:03:61:bb:eb:75:f0:66:80:69:6e:
9b:1b:7f:08:ef:02:a4:ce:38:d8:5e:45:a3:69:69:
b0:0d:b0:27:85:3c:56:5d:52:a9:89:cb:3b:86:ff:
a0:67:19:54:05:11:f0:23:37:30:99:6b:7b:4e:28:
50:df:93:4d:c1:24:4d:94:c2:45:0a:36:78:91:a1:
39:70:76:1b:94:bc:b2:78:c6:af:47:52:53:e9:40:
4b:30:41:c9:5b:80:97:6f:be:82:6f:b6:04:1d:1e:
5d:c3:0a:ad:07:0c:4f:04:74:dc:57:7f:52:ee:99:
39:63:da:e7:5d:dc:7d:95:b0:f6:ec:af:cf:66:ef:
00:58:99:c9:81:0c:da:1d:e1:ef:76:d7:b3:35:75:
09:a3:54:12:05:1b:bf:4c:01:f4:f7:3b:c3:28:e0:
09:5b:4b:17:4a:68:44:9b:cf:c3:a9:f9:31:c5:31:
68:67:1f:67:2d:7e:a6:d3:11:c9:64:b8:cf:44:8b:
63:b9:7f:40:af:e7:e2:7c:b7:3b:83:6d:f1:08:89:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:1B:B5:6A:85:41:E9:3E:08:85:B5:50:D6:99:EA:BD:39:E7:F2
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Z4IbtWqFQek-CIW1UNaZ6r055_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.53.0/24
176.57.58.0/23
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:09:ff:1b:3a:01:5e:4e:7c:62:21:9e:18:ab:00:7d:af:26:
20:c4:66:a6:a6:84:1f:5c:bd:ae:34:57:b2:f9:15:5b:0b:70:
3e:87:6d:2e:32:1a:71:2f:17:41:1e:03:5f:00:09:09:1b:84:
30:98:3c:db:13:f3:69:6e:69:23:9a:28:23:53:bf:41:79:d7:
4c:3c:5a:d4:0d:32:91:bb:66:96:71:27:fa:dd:18:d9:e9:23:
b0:eb:82:46:20:8e:96:56:30:57:1e:9c:3e:d4:31:c3:a5:e8:
57:ea:7f:dc:99:0f:65:01:25:96:9f:e9:89:b7:94:ff:24:60:
65:20:ad:ac:b9:09:eb:2b:7d:c2:9b:2a:95:96:74:1f:2f:75:
b8:d5:fb:35:b2:32:9d:82:a7:bd:6f:c8:56:92:d6:b3:58:55:
a4:62:b7:2e:fd:fa:a7:24:3a:52:cb:f6:6c:67:4f:2d:8b:2b:
79:52:53:fe:cf:09:74:88:90:58:52:d8:ab:a7:2e:92:15:ab:
f9:2a:f8:e2:6a:c1:91:7b:03:ac:47:fa:df:81:e6:09:75:ca:
cd:3d:c2:9c:01:ac:99:13:a0:53:e7:26:72:2c:cb:39:e6:45:
26:2e:30:44:09:c7:30:41:f9:d8:b3:92:c6:69:58:96:66:82:
91:ae:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org