Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/x_lQ2DuoubaO9RArNcPevi2kiA8.roa
File: x_lQ2DuoubaO9RArNcPevi2kiA8.roa (raw, json)
Hash identifier: HKG8fJSacB4q5Uu0dznxQeVfFzYZBtE49XhjPyTYlsY=
Subject key identifier: C7:F9:50:D8:3B:A8:B9:B6:8E:F5:10:2B:35:C3:DE:BE:2D:A4:88:0F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7AD8EB6CFB9ECD278D6AD6C0B149B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/x_lQ2DuoubaO9RArNcPevi2kiA8.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 176.57.48.0/24 maxlen: 24
176.57.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 07:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:8e:b6:cf:b9:ec:d2:78:d6:ad:6c:0b:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7f950d83ba8b9b68ef5102b35c3debe2da4880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:c5:28:e7:4f:1e:88:de:e5:ea:a2:c1:dc:
d8:4a:56:fb:19:92:14:b5:be:24:d0:e2:d2:4e:ed:
5e:d9:7c:35:05:6f:1c:8d:34:77:c6:f3:21:6e:ab:
2d:c8:5c:55:be:f9:21:9c:16:aa:97:67:b3:1f:21:
8a:63:38:4e:ee:a1:35:c1:37:08:35:64:08:f5:08:
f9:40:00:c2:d2:16:20:ef:88:02:c8:71:dc:79:94:
34:4b:f8:cf:e6:74:b3:57:83:97:69:7c:dd:eb:68:
8b:96:6f:6c:0a:d6:a2:27:9f:53:12:c0:24:64:d5:
48:36:fa:ef:1d:be:68:14:dc:22:73:ec:2c:a2:66:
54:80:d8:ed:e2:31:4c:0d:01:8f:7a:01:99:d4:9b:
b1:d0:74:50:03:14:8f:40:59:5a:4d:31:52:e6:a5:
3f:7e:02:d0:31:9a:88:dd:5c:41:76:b3:3a:9b:6e:
ef:32:b1:ac:4f:f0:4a:c4:e7:c3:26:83:af:8f:62:
f1:22:9f:8f:9c:2e:d7:97:c8:e1:0d:c9:0e:f3:af:
5c:7a:58:29:4e:0a:2c:9a:42:52:86:59:9e:eb:2c:
db:c0:31:39:55:81:d6:ff:1c:36:7b:ac:74:cf:96:
e1:3c:05:68:fa:ea:4d:42:9c:98:b8:1b:69:7d:d8:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F9:50:D8:3B:A8:B9:B6:8E:F5:10:2B:35:C3:DE:BE:2D:A4:88:0F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/x_lQ2DuoubaO9RArNcPevi2kiA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:1a:13:fd:97:76:ea:1a:2d:aa:2c:9f:aa:9c:58:c7:bb:78:
d2:35:4d:9f:d5:9b:55:cb:51:4c:f0:bd:75:81:e2:f5:bd:58:
b8:56:00:97:6a:2d:76:7a:01:af:0d:28:2e:a5:9a:44:67:76:
b5:b4:b7:f0:ee:f2:4e:27:29:cb:19:4c:cc:8c:01:4b:14:9d:
d5:4c:c8:a6:4b:30:d3:31:ee:96:bb:70:82:e4:a6:16:38:38:
70:bc:39:15:6f:ee:65:73:07:95:98:63:bc:db:f2:6c:46:72:
2d:8a:41:d1:5d:9a:60:24:98:8c:dc:8c:2f:2c:f9:5e:8e:bd:
ec:3d:b4:e8:61:9e:65:de:b5:fb:f5:04:81:8a:08:c8:54:2a:
55:6d:84:f6:35:ad:ae:d3:82:30:5b:7e:79:03:c0:ff:11:75:
0e:29:7b:8b:30:08:7d:be:ed:ff:aa:65:6b:5a:e2:1c:88:fe:
ad:7e:c3:98:df:fe:01:d1:b3:2d:89:1e:34:54:9f:8e:8c:b8:
c8:3d:10:9a:66:20:67:75:ee:56:47:af:a7:3a:05:6f:bf:ed:
d5:d4:95:d8:ff:56:68:c3:89:4d:8a:35:46:b6:97:58:94:7a:
b5:7b:ef:50:90:c7:41:e7:1a:8b:f6:e2:30:da:b1:3e:93:e2:
75:c5:50:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt62Ots+57NJ41q1sCxSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTAxMjAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2Y5NTBkODNiYThiOWI2OGVmNTEwMmIzNWMzZGViZTJkYTQ4ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGjFKOdPHoje5eqiwdzYSlb7GZIU
tb4k0OLSTu1e2Xw1BW8cjTR3xvMhbqstyFxVvvkhnBaql2ezHyGKYzhO7qE1wTcI
NWQI9Qj5QADC0hYg74gCyHHceZQ0S/jP5nSzV4OXaXzd62iLlm9sCtaiJ59TEsAk
ZNVINvrvHb5oFNwic+wsomZUgNjt4jFMDQGPegGZ1Jux0HRQAxSPQFlaTTFS5qU/
fgLQMZqI3VxBdrM6m27vMrGsT/BKxOfDJoOvj2LxIp+PnC7Xl8jhDckO869celgp
TgosmkJShlme6yzbwDE5VYHW/xw2e6x0z5bhPAVo+upNQpyYuBtpfdi/UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMf5UNg7qLm2jvUQKzXD3r4tpIgPMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEveF9sUTJEdW91YmFPOVJBck5jUGV2aTJraUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDkwMA0G
CSqGSIb3DQEBCwUAA4IBAQAcGhP9l3bqGi2qLJ+qnFjHu3jSNU2f1ZtVy1FM8L11
geL1vVi4VgCXai12egGvDSgupZpEZ3a1tLfw7vJOJynLGUzMjAFLFJ3VTMimSzDT
Me6Wu3CC5KYWODhwvDkVb+5lcweVmGO82/JsRnItikHRXZpgJJiM3IwvLPlejr3s
PbToYZ5l3rX79QSBigjIVCpVbYT2Na2u04IwW355A8D/EXUOKXuLMAh9vu3/qmVr
WuIciP6tfsOY3/4B0bMtiR40VJ+OjLjIPRCaZiBnde5WR6+nOgVvv+3V1JXY/1Zo
w4lNijVGtpdYlHq1e+9QkMdB5xqL9uIw2rE+k+J1xVAO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org