Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/erqIiKxL-1_MfUYLgKp_e7s3-7U.roa
File: erqIiKxL-1_MfUYLgKp_e7s3-7U.roa (raw, json)
Hash identifier: UFGaF9bFICV5AuJyzSmBGMYOdT65QT6G6Q1s6xiHeCI=
Subject key identifier: 7A:BA:88:88:AC:4B:FB:5F:CC:7D:46:0B:80:AA:7F:7B:BB:37:FB:B5
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D303FCF0D96E3C9B28033F925CBD3A367
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/erqIiKxL-1_MfUYLgKp_e7s3-7U.roa
Signing time: Mon 22 Jan 2024 08:18:24 +0000
ROA not before: Mon 22 Jan 2024 08:18:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:3f:cf:0d:96:e3:c9:b2:80:33:f9:25:cb:d3:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 22 08:18:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aba8888ac4bfb5fcc7d460b80aa7f7bbb37fbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:58:76:bc:18:f1:2e:57:23:a6:32:0a:fe:
f7:c3:64:38:a8:bd:19:66:9f:fb:c5:98:d2:a0:59:
ab:55:3b:52:79:a4:bf:80:dc:8f:ed:b0:7e:a1:c4:
7b:8e:c7:6c:32:6f:42:54:40:80:93:fa:13:b0:a7:
f1:3c:57:08:ce:43:5d:07:e2:b1:83:1f:9d:63:37:
cd:29:8d:97:31:44:12:d2:a1:88:4d:ea:4e:ad:d2:
00:bd:c3:3a:74:6e:ec:ca:af:0e:de:17:5a:23:c7:
b4:d4:28:67:14:6f:87:6d:d5:1d:6f:fe:67:ae:e6:
f0:a6:a1:a6:72:19:d1:e3:88:7b:53:66:a4:6d:95:
47:d4:29:f9:b6:25:cf:9f:81:69:9c:b7:1f:b9:5c:
33:af:9e:c2:30:c0:2a:6c:81:f2:86:f8:99:2a:ed:
a7:e0:3d:0f:f4:ca:78:74:cb:5d:8b:5f:f1:5b:08:
a0:42:3a:cf:98:7e:79:80:ad:45:af:82:2f:5c:a2:
81:d4:14:11:b3:ab:c4:02:8a:96:67:d8:bd:4a:97:
15:b5:32:15:85:5a:62:fd:58:5a:c4:cf:80:67:7f:
b9:3d:00:bf:e6:7a:55:14:14:95:2e:e9:62:d0:7b:
6f:a4:44:3d:4c:a7:93:79:11:30:9c:d8:5a:a5:9b:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:88:88:AC:4B:FB:5F:CC:7D:46:0B:80:AA:7F:7B:BB:37:FB:B5
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/erqIiKxL-1_MfUYLgKp_e7s3-7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a6:57:66:ca:6c:b5:b2:78:13:bc:f9:51:d0:20:a1:da:1f:
66:60:d5:dd:d6:40:ef:77:ef:a2:64:40:2c:84:7a:7d:b3:76:
f3:e5:95:39:62:c5:1f:02:ff:2b:54:5e:bc:cb:61:23:93:cc:
3d:c3:e2:12:9b:9e:c0:c5:0c:af:c4:bc:3d:31:33:96:7a:0d:
2d:4d:fa:d3:b7:e9:f7:bc:a8:d7:77:cb:03:9e:61:a4:b5:fc:
60:6d:28:1f:6d:55:64:5e:26:9c:64:23:b1:11:54:ab:42:0b:
0c:dc:20:12:06:8e:db:f1:94:bd:d3:50:65:84:28:02:a3:7b:
fc:8a:6a:d2:62:a9:10:53:26:a9:ef:b0:88:76:4c:2b:70:42:
fa:5d:39:80:5b:3c:f9:44:a7:ab:82:7d:cf:8b:df:ae:66:8a:
bd:9a:34:99:fa:65:01:20:f3:b8:7b:25:11:b3:12:04:85:d1:
fe:1b:6c:8b:22:1f:f2:eb:8f:86:6f:44:81:72:2d:0b:26:8c:
0b:7c:ff:04:57:35:e0:6a:4c:06:1d:3e:34:c4:2c:32:ec:3b:
ea:46:7b:ed:97:0f:a0:1f:32:45:7e:2e:58:cc:51:84:b7:44:
10:00:5f:09:f8:7d:1a:b1:ea:32:5c:a9:cf:09:62:65:bb:e3:
61:2a:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org