Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xPSg841xgZCxn1rPvrZkmKZW2xE.roa
File: xPSg841xgZCxn1rPvrZkmKZW2xE.roa (raw, json)
Hash identifier: E5j7FzpjnbgDJlLyo5G+aHADhfHQ6klbsvWDJff5Pmc=
Subject key identifier: C4:F4:A0:F3:8D:71:81:90:B1:9F:5A:CF:BE:B6:64:98:A6:56:DB:11
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0186125E2E37E902C7D821BE9470757DFA33
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xPSg841xgZCxn1rPvrZkmKZW2xE.roa
Signing time: Thu 02 Feb 2023 13:43:27 +0000
ROA not before: Thu 02 Feb 2023 13:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 176.57.58.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 07:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:5e:2e:37:e9:02:c7:d8:21:be:94:70:75:7d:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 2 13:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4f4a0f38d718190b19f5acfbeb66498a656db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:d3:73:97:22:cc:e6:6d:fa:6b:09:35:68:
3d:1a:05:f5:68:74:06:ce:d6:5b:81:10:3a:be:81:
1d:56:a1:ff:a0:e8:9c:42:63:5f:06:62:88:06:91:
b6:98:4d:bd:b6:02:f9:d9:8e:65:ee:6c:64:bd:0e:
1b:c7:13:40:61:eb:c2:7e:43:6b:51:6b:1b:79:d1:
04:33:f5:e0:cd:ca:dd:3c:21:96:c7:7d:72:43:5e:
35:a3:55:be:7b:d4:9d:d1:31:d0:bf:b5:5c:20:be:
1a:dc:7b:d2:e2:5c:0a:a8:84:af:1e:ae:c3:87:39:
c7:9d:f4:f3:39:70:c6:84:66:0e:d4:e9:c0:54:b2:
91:bd:c3:ba:02:b5:0a:72:57:2f:09:06:ed:6f:a9:
ce:9e:14:9c:72:a7:41:19:b2:46:db:e1:94:83:57:
ee:e9:85:05:a2:f4:31:56:a9:1c:ea:20:b2:41:ce:
31:a8:72:d8:75:29:bb:75:e1:29:c0:3e:6b:68:8d:
94:67:1e:db:67:2a:a1:5c:8f:77:6e:a5:12:e6:11:
8b:52:25:7b:71:ea:48:3c:f1:e1:81:4c:d4:59:b0:
47:3d:bf:5e:c8:d7:7a:2a:56:0f:56:df:3c:82:4e:
29:84:a2:1e:31:05:27:0e:6c:09:75:b3:16:6c:2c:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F4:A0:F3:8D:71:81:90:B1:9F:5A:CF:BE:B6:64:98:A6:56:DB:11
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xPSg841xgZCxn1rPvrZkmKZW2xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b6:6b:8b:23:dd:e2:76:37:8a:18:53:56:72:ec:5d:c7:ba:
bc:0d:b9:0b:b8:1d:3e:fd:8a:bf:e4:fd:30:25:3c:cf:39:88:
a6:43:c3:11:16:03:10:a8:c8:68:77:cf:5d:cb:67:1d:25:1d:
04:4c:49:98:74:cc:c3:ae:6d:55:14:36:93:fa:ba:91:6d:0f:
90:95:ce:72:0e:e0:9a:fb:dd:fa:b8:13:84:40:a1:4a:5b:c4:
ff:16:ad:28:d7:37:28:ab:dc:54:16:79:79:db:d2:62:5b:6f:
4d:27:60:3d:bf:b4:99:3c:37:9b:42:4a:84:a0:a8:6d:de:fb:
15:5c:2f:29:28:3c:67:35:c2:74:31:d4:dc:f9:91:a8:97:92:
4a:02:e7:2b:42:dd:ea:0f:96:f0:0e:1c:77:ba:c3:df:78:a5:
fa:cd:71:d8:9a:45:bb:6b:24:dd:4f:1d:28:b3:69:c5:6b:ad:
03:aa:31:77:28:d5:ff:38:c6:ab:44:ae:c6:2d:b8:34:33:0f:
b7:8d:04:cc:11:a2:4a:7e:68:30:1f:55:c6:64:7e:13:bd:6d:
ef:61:0d:1a:da:39:a0:cd:b9:aa:46:e5:63:2b:53:1f:12:8a:
66:8c:29:f1:5d:ae:23:36:e7:50:07:54:87:bd:2d:96:4e:0a:
31:eb:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org