Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V1xD2p6t1t-X1Oq6BSsJPW2857E.roa
File: V1xD2p6t1t-X1Oq6BSsJPW2857E.roa (raw, json)
Hash identifier: fIpz/xvMjgyyHT3xT0JEdoSlLwd05eHVFMmaihGrj8I=
Subject key identifier: 57:5C:43:DA:9E:AD:D6:DF:97:D4:EA:BA:05:2B:09:3D:6D:BC:E7:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C690729F0F969C9B8570FD992E3151763
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V1xD2p6t1t-X1Oq6BSsJPW2857E.roa
Signing time: Thu 14 Dec 2023 15:52:06 +0000
ROA not before: Thu 14 Dec 2023 15:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 2.57.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:07:29:f0:f9:69:c9:b8:57:0f:d9:92:e3:15:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 14 15:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=575c43da9eadd6df97d4eaba052b093d6dbce7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:02:f3:cf:c5:21:24:83:60:61:c2:11:05:
3b:49:90:44:17:08:da:14:22:a1:f4:8d:a1:15:67:
5c:68:0e:88:37:7f:c5:f6:1a:f9:d0:7f:1e:08:ad:
24:d4:79:91:6a:7c:88:6a:da:65:11:56:cf:f9:3d:
53:28:21:c7:03:11:9e:ec:fc:51:d3:4e:54:3d:39:
3f:ab:50:ce:01:6c:ca:0a:71:bb:b3:92:83:aa:e5:
5b:d1:11:77:64:91:c1:ab:d9:54:17:30:6b:6b:a2:
f6:fb:b7:2a:30:8c:c7:44:b2:c3:ed:dc:87:73:4d:
e2:b9:a1:59:6e:da:dc:32:4a:94:43:97:18:ac:75:
22:97:2a:cc:49:96:fb:93:b4:f7:e6:5c:0a:9c:89:
e1:2e:5a:bf:22:78:07:2b:9d:68:e6:e8:9e:6a:28:
ca:c8:ba:a4:f7:4b:e9:de:16:b6:1a:85:a2:85:4c:
26:e9:ed:f9:31:30:da:52:b9:dc:c6:46:22:98:48:
b2:10:e3:00:22:fe:63:26:34:f1:a2:38:64:19:2a:
a9:56:e8:7b:ae:8a:3e:e7:6c:ec:56:79:e8:60:38:
dd:b8:85:91:8c:9c:06:b2:d4:f0:8c:e6:85:51:16:
d6:63:81:34:21:e7:95:b6:de:8d:f8:86:f9:51:cc:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:43:DA:9E:AD:D6:DF:97:D4:EA:BA:05:2B:09:3D:6D:BC:E7:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V1xD2p6t1t-X1Oq6BSsJPW2857E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a1:ec:d2:9b:97:df:be:2d:d6:da:af:cc:44:ae:b1:37:62:
f6:ac:58:93:0a:5f:68:34:0b:60:52:51:ce:b0:e0:bc:08:7b:
8a:8b:f2:a0:86:47:12:9a:d0:f0:ef:8f:7f:88:93:04:c5:68:
f5:d1:67:aa:f8:75:93:d5:83:b1:2b:20:63:39:78:2b:c2:1c:
00:82:48:69:79:de:ab:0a:dc:4d:31:dd:65:57:9b:05:68:77:
8b:a5:28:c4:5c:4b:73:69:9d:f9:db:03:22:e5:e0:d4:66:29:
80:4c:5c:ec:d5:d9:03:ec:78:e4:e4:43:46:b9:ee:31:56:7a:
98:b2:45:1f:22:68:a8:6e:91:18:82:38:be:d5:91:0a:bd:d5:
e7:5d:a7:57:94:52:35:6b:d0:d6:d8:c5:cc:11:e3:0e:a4:b0:
56:cd:ee:c8:50:d2:52:c4:6d:0c:9e:0e:05:89:13:e5:c2:54:
2d:f4:2c:ca:e4:b2:a1:09:cb:2d:32:91:62:f4:b7:04:ff:cc:
ea:8e:a7:26:a1:33:21:7a:4d:34:d2:38:66:f1:82:d2:00:e6:
3c:f3:3b:ef:9b:b4:8c:34:49:30:cb:ca:f1:af:9f:34:2c:ba:
f1:f0:f1:ce:95:9f:ca:b7:53:73:bc:6c:9f:76:8f:9b:c3:67:
5b:ec:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org