Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/89DSBV1vk0uVxSFSlE3wpqFNZmA.roa
File: 89DSBV1vk0uVxSFSlE3wpqFNZmA.roa (raw, json)
Hash identifier: pOa+gXt882v71jXjdhCeZ0S0kosnijVX51rEVQ65+uw=
Subject key identifier: F3:D0:D2:05:5D:6F:93:4B:95:C5:21:52:94:4D:F0:A6:A1:4D:66:60
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188B8274D3C8DD4F3D561906605DFDCB6CB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/89DSBV1vk0uVxSFSlE3wpqFNZmA.roa
Signing time: Wed 14 Jun 2023 04:26:03 +0000
ROA not before: Wed 14 Jun 2023 04:26:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.223.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 16:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:27:4d:3c:8d:d4:f3:d5:61:90:66:05:df:dc:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 14 04:26:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3d0d2055d6f934b95c52152944df0a6a14d6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:c2:e6:5d:80:c3:f2:d6:34:39:11:02:65:
79:bf:18:ab:58:fa:83:0a:37:ea:22:02:6e:58:1b:
72:a3:69:b4:16:a3:c2:c2:80:89:e1:f0:d8:ca:3b:
f6:3e:5f:7d:3c:4d:1b:62:e4:32:a3:a2:f5:83:11:
13:61:61:f9:76:75:9b:4e:51:80:58:8a:91:df:cc:
cb:68:57:22:26:29:2f:66:68:ca:8e:da:ef:f7:52:
8e:d4:9d:d3:c8:b2:aa:0d:b9:91:0b:05:bf:fe:e2:
71:b0:21:64:ce:e8:48:cc:82:29:b7:ab:b3:13:ad:
05:d4:48:3b:ec:8e:50:e1:26:bf:20:2c:bb:11:93:
7f:33:33:00:1b:45:f2:91:79:56:04:fc:4d:77:a3:
15:5f:a0:64:8b:79:b2:58:7c:ac:51:74:b2:23:e9:
e8:41:65:c5:d7:7a:32:ad:ec:5d:f1:3b:2a:4c:16:
0f:c1:07:23:dc:5e:8c:05:4e:d4:56:8d:04:54:b2:
5f:1b:75:c3:ca:40:91:61:16:e2:b8:08:bb:39:de:
cb:d1:c1:c6:ce:19:c5:92:c6:d3:eb:4e:1d:d0:23:
fe:2c:f4:d4:69:04:85:d9:c1:8f:4c:66:a8:6d:9e:
23:d0:50:bb:f5:73:26:cd:54:3a:c0:49:46:c7:9a:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:D2:05:5D:6F:93:4B:95:C5:21:52:94:4D:F0:A6:A1:4D:66:60
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/89DSBV1vk0uVxSFSlE3wpqFNZmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
24:34:72:23:bf:f5:55:24:b9:73:40:7e:ec:28:39:36:55:ca:
28:ce:be:37:69:0f:ff:d6:e4:19:02:d5:4a:df:c6:b5:99:d5:
03:1c:fe:3c:4c:1d:04:4b:73:d4:00:85:d6:0a:48:23:21:3a:
05:b5:14:61:2d:14:e5:dc:48:76:ad:ad:26:8a:bc:c8:19:4f:
4d:61:4f:67:d0:ba:df:ac:30:4f:bf:9a:a7:20:b0:60:eb:db:
6f:38:1d:fc:32:9c:f0:0e:32:80:ec:8f:3e:ac:c7:fc:cd:00:
05:64:19:ee:b2:14:1f:2f:df:c2:3b:a8:40:7a:0e:19:72:d0:
b3:55:53:a7:ca:60:76:9b:aa:de:b2:ca:08:8f:cd:06:51:5c:
0d:87:c4:c6:1d:0c:fb:b9:b8:d9:ed:f2:4e:27:a9:cc:9a:8f:
f0:b7:dd:61:04:f4:e5:f2:f4:b4:b1:b8:91:c6:6e:ea:b3:32:
af:6a:68:fc:b7:79:44:b7:3f:c0:72:4b:19:cf:78:f2:9b:b2:
ab:e5:f2:91:cb:61:bb:92:eb:4b:34:56:19:cd:d7:4b:6c:bb:
28:d5:0d:8f:b3:5e:10:d3:a7:a8:68:9b:26:96:98:1c:cf:1a:
3c:a6:ef:a4:ad:bf:e1:f0:ba:17:ac:05:24:1c:85:27:e0:76:
0d:83:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org