Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/yE1W8JYBNiLB_bxyPPl15z08TdA.roa
File: yE1W8JYBNiLB_bxyPPl15z08TdA.roa (raw, json)
Hash identifier: ezW3SE1qBIc3fqEGwQRbBVepT4kM5pDF5ygM44VtRLE=
Subject key identifier: C8:4D:56:F0:96:01:36:22:C1:FD:BC:72:3C:F9:75:E7:3D:3C:4D:D0
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B88AA088C53A3F73CA4FA8140CB6A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/yE1W8JYBNiLB_bxyPPl15z08TdA.roa
Signing time: Sun 01 Jan 2023 21:44:59 +0000
ROA not before: Sun 01 Jan 2023 21:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 176.57.49.0/24 maxlen: 24
176.57.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:88:aa:08:8c:53:a3:f7:3c:a4:fa:81:40:cb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c84d56f096013622c1fdbc723cf975e73d3c4dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:2a:9f:c2:86:a7:d0:74:91:41:8b:49:d9:
35:d4:bc:70:62:db:fe:15:ed:b5:7f:65:e7:06:37:
32:51:98:17:df:9d:9e:93:9c:bc:15:49:7f:0e:c9:
5e:a5:97:09:ca:12:ff:b7:f4:89:ff:9f:8c:86:50:
a1:87:1d:87:08:46:c6:5d:3e:2c:0d:54:53:c4:b2:
e3:fc:99:a4:e9:1b:fe:d4:b9:11:15:3f:8f:4a:9c:
b9:d5:0a:ae:f0:9d:bc:93:a7:40:f2:55:26:c1:67:
b6:8e:59:2e:40:85:97:61:0a:f8:8c:4c:42:4a:95:
26:e3:ec:e0:86:af:0e:96:36:e8:f6:6f:7b:04:46:
cd:f7:5c:c2:dc:6f:26:bf:11:99:20:9a:cf:ad:ff:
21:ad:04:a1:c3:74:e7:b9:5b:7d:4f:40:f7:30:16:
59:89:71:45:81:cb:6c:56:0a:0c:45:57:cd:70:bf:
20:f7:30:85:b5:1c:83:1b:a7:ae:93:9f:e1:2d:65:
46:4d:7f:70:35:06:43:91:1b:5f:d1:19:a9:ba:80:
6e:08:ec:40:1e:52:99:d8:3b:74:55:b7:a6:29:4d:
12:fe:eb:6a:09:a4:4d:57:7e:cd:40:a3:ad:57:1a:
f3:32:45:84:08:0e:c1:a1:29:b3:c1:41:b9:36:1e:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:56:F0:96:01:36:22:C1:FD:BC:72:3C:F9:75:E7:3D:3C:4D:D0
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/yE1W8JYBNiLB_bxyPPl15z08TdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/23
Signature Algorithm: sha256WithRSAEncryption
28:26:a2:6a:ce:a2:ba:07:5b:06:41:c2:eb:55:66:31:cd:03:
cc:65:ca:47:56:8c:d1:67:bb:ab:66:d7:76:7c:7b:02:55:d2:
31:a2:3c:98:67:19:d1:f4:fe:0c:5e:2f:d1:37:7d:5f:ae:55:
30:8a:50:02:a1:03:d3:48:3a:3c:0f:68:2d:b2:61:60:5e:a2:
c6:4f:96:53:fa:e3:d7:b7:8c:5f:15:52:0f:56:97:78:1c:0c:
0c:65:50:8f:2c:af:63:cf:1f:c4:4c:4d:34:3f:ac:d5:a3:0d:
27:9f:91:e6:9c:2b:6f:69:9e:12:5e:1e:9c:98:fb:96:39:42:
e2:f5:39:6f:5f:f1:45:ed:50:63:62:e5:de:f8:a2:e8:ea:e8:
6a:d1:b6:2b:6f:de:4a:d5:9f:dd:d9:e5:10:36:c7:2d:57:93:
9a:aa:13:bf:e8:85:58:13:34:be:88:b8:7b:e4:73:6a:6a:bc:
28:dc:a4:1b:5a:1c:2a:8e:13:3e:77:73:ef:47:21:48:9e:b0:
8d:3b:4c:9f:42:a8:1c:3c:5b:8e:66:60:3d:7b:ff:06:78:b5:
c8:95:93:35:d4:56:62:a8:6b:d5:c5:23:43:79:18:5f:cf:cf:
32:d3:5f:8c:3b:40:c1:5e:c3:ab:9c:75:bd:1b:ed:14:56:e7:
47:e7:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org