Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/B6pFlVizolO9GLxHICtxYwS65BE.roa
File: B6pFlVizolO9GLxHICtxYwS65BE.roa (raw, json)
Hash identifier: hiwnBWh1BMNhBmNIoJSOA4ah307daL/XI02hTM1L76g=
Subject key identifier: 07:AA:45:95:58:B3:A2:53:BD:18:BC:47:20:2B:71:63:04:BA:E4:11
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF83F9ACDFEFEDBFE2C1FB3CF5C03
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/B6pFlVizolO9GLxHICtxYwS65BE.roa
Signing time: Tue 02 Jan 2024 04:30:30 +0000
ROA not before: Tue 02 Jan 2024 04:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208916
IP address blocks: 176.236.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f8:3f:9a:cd:fe:fe:db:fe:2c:1f:b3:cf:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07aa459558b3a253bd18bc47202b716304bae411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:ab:5a:59:13:3a:a5:2b:ab:00:27:77:72:
9a:c9:c8:ba:fd:fd:31:30:df:0d:20:69:c7:d2:a9:
c6:83:8e:dd:be:95:29:9a:35:92:6b:cb:3b:f3:83:
69:82:8a:54:25:26:2e:d2:6b:b7:39:d5:32:15:51:
43:01:b1:8f:76:5f:9e:04:aa:42:68:dd:06:2f:23:
11:e9:20:45:23:ab:5c:df:94:15:0b:36:f0:f2:88:
e4:75:8c:f5:e7:c0:2d:43:88:c2:ac:fb:cb:ae:c8:
af:7a:2b:0f:5d:cd:3a:77:a2:e3:ea:70:5f:bf:a4:
eb:cd:66:49:58:de:0e:67:b9:9d:4d:ac:53:5a:24:
ed:76:24:39:c3:b5:bc:51:a4:42:5a:30:f8:bc:22:
30:20:63:eb:f1:6a:f1:d6:fe:af:ab:6b:09:a2:53:
bf:1b:23:61:cd:f9:b9:ec:69:3a:5b:5a:a7:91:40:
5d:4f:8c:c6:21:0f:5b:02:b6:a8:be:f2:4a:ad:e5:
cf:5d:4b:38:9d:71:3d:6f:5c:10:cd:06:47:2e:1c:
1b:6f:49:9d:2b:2d:3b:2d:ba:ce:84:fa:b2:b5:3f:
d4:8a:e0:2b:7b:18:6b:2a:96:d8:9f:9d:fc:4c:bd:
1c:6e:f7:8a:1c:4b:c7:31:d9:22:e3:2e:a7:2e:4b:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:45:95:58:B3:A2:53:BD:18:BC:47:20:2B:71:63:04:BA:E4:11
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/B6pFlVizolO9GLxHICtxYwS65BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.236.246.0/24
Signature Algorithm: sha256WithRSAEncryption
28:02:ba:8b:a5:e2:e7:2e:54:2d:be:fa:a7:71:4e:81:ad:77:
11:45:bb:5f:06:41:54:1f:4c:5c:83:24:ba:a3:8b:ae:d3:14:
80:fa:57:7f:0e:9b:e8:c3:fa:82:2b:c7:72:de:f4:05:65:e5:
23:c1:e7:03:ff:7f:42:9e:10:5a:6f:6c:51:7f:c9:a3:14:c3:
f0:be:ac:b7:a3:9c:ab:da:95:ef:e7:1c:f5:af:56:b2:4a:cd:
1b:8b:62:61:87:94:5c:90:43:46:21:bf:31:3f:ba:73:06:81:
08:4e:95:01:38:5e:49:e3:7d:40:86:83:d6:88:4e:54:71:5b:
b8:b2:ea:2a:c4:7d:59:58:84:da:61:3a:d1:0e:c3:0e:56:a1:
bd:8d:85:16:29:63:af:3f:af:5f:b8:1a:98:12:1f:86:42:bd:
4a:34:47:dd:7e:fc:1d:7f:ff:28:a1:80:12:d3:5c:a5:37:f8:
ba:bf:a4:d9:76:7a:8d:f6:65:3b:d9:e3:cd:15:1a:e0:e6:55:
c3:4d:37:ec:59:18:ea:ec:45:c8:c6:2a:d2:d5:53:5f:1a:23:
fd:fb:d5:1d:7e:3d:de:f3:6f:54:65:98:84:0f:d0:4a:1b:0c:
5a:e7:da:82:f2:6e:56:1a:68:b0:09:84:c7:5a:5d:95:26:2a:
d5:df:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:37:47 2025 by rpki-client