Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iNqWOGHM3r4ZZsvvKhzN91BC90k.roa
File: iNqWOGHM3r4ZZsvvKhzN91BC90k.roa (raw, json)
Hash identifier: bbB3/L0dgi1N7LWpTMYZ7KT7QqFo+KJRBAtHRyVS7SA=
Subject key identifier: 88:DA:96:38:61:CC:DE:BE:19:66:CB:EF:2A:1C:CD:F7:50:42:F7:49
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018809C7D09AB8AD65297D35328CF8BBD779
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iNqWOGHM3r4ZZsvvKhzN91BC90k.roa
Signing time: Thu 11 May 2023 07:47:49 +0000
ROA not before: Thu 11 May 2023 07:47:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:c7:d0:9a:b8:ad:65:29:7d:35:32:8c:f8:bb:d7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 11 07:47:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88da963861ccdebe1966cbef2a1ccdf75042f749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:eb:9e:d9:b3:ae:84:55:b7:e2:e3:c7:64:42:
c4:67:37:a6:7b:aa:d5:13:78:39:da:6e:d4:9e:1c:
32:26:93:0c:c7:4f:17:82:26:c3:4b:4d:10:ad:10:
31:6b:47:f9:7f:37:ea:57:f5:2e:b7:83:cf:07:7f:
f6:bc:07:8d:58:b4:de:11:51:27:08:5c:92:3c:8f:
94:ac:a1:c0:e2:e5:db:b6:9f:85:16:9f:f0:ea:fd:
8f:e7:e4:d4:fc:65:f3:9f:97:be:ce:9f:fc:a6:b1:
0a:e6:61:f3:4e:a0:5a:31:42:98:43:a6:b4:12:9e:
a1:53:f4:1f:cc:69:11:db:23:30:5e:42:4b:2d:84:
86:0c:a3:33:bb:a3:22:bf:cc:df:f0:db:2b:21:d7:
4d:47:7e:44:2f:f6:7b:94:17:70:16:74:4c:2e:4c:
05:4f:e7:15:b8:7e:f7:24:57:70:15:fc:22:cb:34:
8d:c0:7d:83:86:e1:41:1f:39:7d:8b:64:4e:d5:68:
5f:c0:43:c3:04:0b:ea:b2:c6:f2:62:2d:60:a1:90:
68:a6:a3:77:74:ba:c8:c6:b7:73:30:e1:5e:11:c9:
91:cd:2d:11:6d:f5:d2:f8:04:63:f6:40:8b:35:40:
2e:85:c0:6a:42:c7:b0:13:74:f7:84:2d:40:3c:58:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DA:96:38:61:CC:DE:BE:19:66:CB:EF:2A:1C:CD:F7:50:42:F7:49
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iNqWOGHM3r4ZZsvvKhzN91BC90k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
64:bb:e5:9e:aa:47:8e:b6:e0:f5:16:89:73:66:df:97:37:ca:
79:b6:47:6d:da:aa:72:55:ad:e5:38:20:8c:52:ff:dc:6e:ca:
22:98:90:0d:e5:21:67:8d:56:37:ce:3f:aa:11:60:47:2e:5a:
bb:f9:ac:95:26:6c:5a:f9:41:82:db:a5:31:76:28:3e:f1:f3:
df:3b:a2:a0:d4:fb:3a:5e:74:cd:18:62:ff:a4:e2:c1:7c:18:
42:10:3d:42:e5:57:4c:b5:02:fe:ee:a4:6c:61:e4:8a:d4:6c:
bc:ff:19:a0:d6:98:e9:68:79:96:12:36:a1:7f:55:20:35:36:
f8:40:6e:51:b2:51:ef:8c:5b:f4:a7:6b:fd:9b:2d:f7:e5:08:
64:7b:df:13:63:81:a9:98:9e:ff:9c:fd:65:43:14:07:63:d1:
aa:7b:a9:00:33:68:fa:c4:26:29:5b:38:d2:ab:cf:3a:53:31:
3f:90:e5:10:f0:9a:41:72:42:cd:23:ea:d9:7c:77:f1:ef:18:
b6:02:8f:60:6b:c9:b4:f9:94:50:d3:b2:a6:3f:ba:b4:b1:2d:
94:cf:f8:52:5d:50:60:45:e2:8e:27:2c:63:74:4c:f8:a9:73:
d2:ae:ab:2d:d9:cc:e8:09:35:be:74:42:7d:86:b0:2b:33:23:
d3:a0:02:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org