Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/tLpvd41aNNwc47g2sgTOjq_MeIU.roa
File: tLpvd41aNNwc47g2sgTOjq_MeIU.roa (raw, json)
Hash identifier: 6fYokyjoW9UnbRYYr9dm9uA/pznKWZHK7IrRhnTxmMY=
Subject key identifier: B4:BA:6F:77:8D:5A:34:DC:1C:E3:B8:36:B2:04:CE:8E:AF:CC:78:85
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B81D5C3E92D7C7DC9C8F20108F6F3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/tLpvd41aNNwc47g2sgTOjq_MeIU.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.57.48.0/24 maxlen: 24
176.57.54.0/24 maxlen: 24
176.57.57.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 06:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:81:d5:c3:e9:2d:7c:7d:c9:c8:f2:01:08:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4ba6f778d5a34dc1ce3b836b204ce8eafcc7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:7b:1f:a5:dd:db:b6:77:7a:a2:89:67:45:
0c:a9:8d:7d:f6:68:ae:36:f0:f2:3f:22:2a:99:ab:
d5:8d:19:09:22:ed:b4:63:a6:0c:53:b6:be:2c:47:
84:cd:f9:26:7b:7d:f7:00:60:ae:7d:0b:39:fa:8d:
92:5f:88:7a:75:85:a2:d2:42:07:61:70:dd:5f:1b:
84:ab:aa:39:61:8c:40:f8:cf:41:87:6c:71:18:f3:
d0:f5:49:20:48:8b:a1:3e:d7:11:7c:fe:d3:d0:ba:
ec:13:ee:30:c3:26:03:6f:99:d0:ac:0c:5b:4c:3d:
6d:a5:04:73:9b:43:d9:b8:5b:13:a3:74:00:ea:2f:
95:78:49:3c:d9:96:26:f5:e3:dd:80:37:c0:26:96:
fe:49:57:63:83:fa:8a:40:27:98:95:9d:83:54:38:
66:ea:fd:23:75:d3:41:b9:8b:a2:dc:b2:85:f7:67:
5f:40:90:58:91:1f:9d:e3:69:fe:34:4b:0b:f1:68:
91:17:09:38:12:94:0b:a8:fc:8c:5a:64:23:c6:d4:
fb:ff:c1:b0:58:f1:f2:cf:38:ca:32:06:44:89:c6:
99:97:f5:c2:23:36:51:e3:44:c0:35:d2:c6:c0:cd:
0a:f8:22:c1:5d:76:9c:14:55:09:58:88:00:e4:45:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:6F:77:8D:5A:34:DC:1C:E3:B8:36:B2:04:CE:8E:AF:CC:78:85
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/tLpvd41aNNwc47g2sgTOjq_MeIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/24
176.57.54.0/24
176.57.56.0/23
Signature Algorithm: sha256WithRSAEncryption
84:b1:27:cb:f9:55:d4:3a:c8:98:0c:a8:ee:7a:b5:c6:d7:21:
65:da:9b:6f:57:cc:01:fa:61:77:02:50:e8:e2:fe:a7:05:5a:
aa:31:42:5b:52:97:d1:a8:39:82:8c:25:a4:66:b8:1a:e3:1a:
22:ce:7c:4f:ea:1b:b8:de:ad:17:0f:d0:62:5b:98:c4:4d:44:
af:1e:c7:b3:54:22:2b:76:b1:26:20:41:d5:f4:57:b7:d7:96:
08:de:19:34:3a:53:f9:91:7c:d8:6d:81:0e:de:2f:bb:d2:64:
85:7a:81:4c:42:51:7f:78:e2:94:c8:2f:7d:ea:b6:1c:c5:e3:
f4:19:59:b6:75:2c:74:17:d7:cf:d4:20:45:35:8e:7a:7c:8d:
85:16:43:39:59:8d:cb:96:96:eb:42:b7:65:42:b7:52:64:e3:
eb:eb:1b:50:d0:12:66:98:5a:dd:84:11:d6:e8:2d:3b:a1:12:
e5:8e:f4:c2:d0:89:b1:15:29:a8:32:60:3f:2b:9a:6b:8f:11:
53:d4:df:25:d7:f3:65:78:b9:36:e9:3f:35:bf:50:e9:8f:b1:
6d:3f:24:54:f4:86:d0:7a:e7:7a:a6:34:71:d6:e7:b5:43:a5:
cb:56:93:b8:31:c9:4a:59:39:bf:30:e0:0e:43:7f:78:76:d1:
5d:7c:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org