Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa
File: xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa (raw, json)
Hash identifier: /pJNKisjRpt2isRILYv8HAKmNACSDiVZUSR3jMsir/E=
Subject key identifier: C5:0C:45:E8:C8:1B:45:48:5A:20:E2:8F:EC:E4:3A:8A:30:D3:7F:28
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018745D1906673C96A4C2AE2186B8F623D98
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa
Signing time: Mon 03 Apr 2023 06:32:54 +0000
ROA not before: Mon 03 Apr 2023 06:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 176.57.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:d1:90:66:73:c9:6a:4c:2a:e2:18:6b:8f:62:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 3 06:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c50c45e8c81b45485a20e28fece43a8a30d37f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:06:22:83:c2:09:c1:37:39:46:9f:eb:e6:
a1:b9:a2:2b:c2:68:2e:dd:e4:fa:a0:63:31:3f:27:
43:c0:3b:a5:a2:c9:25:51:c2:88:c4:c8:48:68:9b:
95:d6:ea:da:57:6f:67:3d:5b:2a:8e:91:64:2a:18:
6d:76:7b:85:04:6f:e0:03:0b:b7:6b:7c:aa:39:e1:
d8:73:9e:db:70:0f:55:79:8d:78:da:38:b3:b7:6a:
42:c5:2a:2f:0d:f7:5d:da:ca:e4:b7:a1:86:7d:75:
e2:33:dd:02:9c:5b:dc:79:5c:4d:92:65:52:cd:c1:
82:00:44:93:c8:31:93:1d:62:1c:f0:40:78:19:b1:
fe:69:9f:39:95:42:23:5c:7b:b7:24:e5:12:68:46:
e1:4e:4b:7f:9e:ff:6b:40:e5:a4:62:e4:c3:db:8d:
38:da:d3:60:94:e7:82:85:ca:3c:a3:33:9b:36:02:
8c:25:35:e6:03:af:21:33:f0:31:f4:8b:a0:69:2c:
1b:39:d3:37:1d:c7:95:0a:2d:90:07:58:f7:0b:7a:
e2:d1:42:e0:29:25:c2:a7:34:84:24:b9:dd:f4:8a:
42:5b:ca:df:6d:a7:61:89:9a:5f:03:80:85:f9:e8:
91:f4:c7:52:40:6a:b8:bc:5a:e2:19:e2:6e:de:45:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:45:E8:C8:1B:45:48:5A:20:E2:8F:EC:E4:3A:8A:30:D3:7F:28
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xQxF6MgbRUhaIOKP7OQ6ijDTfyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ff:fe:cd:f5:4f:44:6e:92:57:a3:35:6d:88:e4:0d:ba:3a:
ed:9e:81:9a:da:6f:37:bb:d3:63:dc:14:3e:5d:2b:6b:8d:9d:
08:ed:f9:02:6e:83:26:cd:9a:72:55:88:79:d2:cf:55:01:2b:
88:e3:22:96:ef:85:7e:16:ac:63:dd:aa:71:2f:62:b6:5d:9d:
b5:fa:36:41:d1:35:2d:34:98:32:3e:75:25:7c:70:ca:d3:e5:
0e:f0:03:71:b6:34:cc:f3:4a:55:4a:af:70:f5:c9:8a:3a:31:
3e:1c:7f:a2:42:53:50:6b:65:12:9e:0a:aa:d7:05:22:89:17:
c8:57:ce:3a:7e:a9:5f:c2:e5:02:cd:3f:81:5b:60:16:d0:0a:
b0:cb:2e:95:fb:28:d0:e8:8b:74:09:2f:dd:68:fd:29:93:cb:
a7:d5:69:25:d1:ef:07:1e:db:37:8d:58:05:42:a5:7f:e8:e0:
be:9f:ea:9a:9b:ac:f3:60:47:44:ef:1e:8b:5a:26:45:02:79:
86:07:de:9c:d2:c8:02:76:53:f1:c5:4a:0d:be:5f:0f:f0:78:
9d:cd:e8:f8:d6:80:a6:9e:2e:c2:5f:aa:ef:3b:3d:d0:a3:dc:
3d:ee:5f:45:d2:24:20:17:a3:4c:4d:b9:cb:0a:01:53:78:fd:
60:d0:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org