Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tc4zUpV0ChWFAycG6P56LY2vKiI.roa
File: tc4zUpV0ChWFAycG6P56LY2vKiI.roa (raw, json)
Hash identifier: 25mV/A0yFKPYfi1AJBivwBR4YO7HQyNwDMx769fZx7I=
Subject key identifier: B5:CE:33:52:95:74:0A:15:85:03:27:06:E8:FE:7A:2D:8D:AF:2A:22
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DD116B653B052EF48BD1A1F8E254E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tc4zUpV0ChWFAycG6P56LY2vKiI.roa
Signing time: Sun 01 Jan 2023 23:14:51 +0000
ROA not before: Sun 01 Jan 2023 23:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206595
IP address blocks: 176.235.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d1:16:b6:53:b0:52:ef:48:bd:1a:1f:8e:25:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ce335295740a1585032706e8fe7a2d8daf2a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:53:85:e1:2a:c0:33:93:38:73:02:bf:9e:
28:e9:99:b2:7f:c2:68:b9:33:e0:82:a2:b4:50:db:
90:13:1b:95:0b:e9:0e:05:f6:fa:fb:70:c2:51:b5:
54:ee:35:86:e7:ad:3b:0b:c3:70:e2:6a:7c:72:4b:
cc:e2:1b:60:51:24:46:6c:cb:78:1c:cb:f1:a5:af:
6b:3a:5b:ff:42:cb:0b:0f:9a:a4:39:15:1e:03:50:
2a:82:4e:cf:28:cd:b9:ce:de:83:bc:87:3f:b7:bd:
20:19:6f:14:86:1a:ca:ae:0c:d4:99:e3:40:59:cd:
c7:50:69:13:c2:75:48:4a:8f:01:48:9c:ff:c4:ab:
5d:8d:cb:e9:90:e3:19:43:8f:5c:24:2b:b5:51:d1:
69:f1:e8:8a:93:48:01:b0:db:d2:af:03:57:29:59:
92:34:c7:f9:93:92:63:a0:c8:93:8c:66:cf:04:1e:
d3:0c:9b:c4:49:87:2c:33:9e:15:78:86:b1:a5:95:
32:e3:94:67:d3:14:3c:ad:e7:39:4e:64:b3:3a:12:
b3:09:87:b1:ff:61:da:eb:74:14:4e:73:bc:6a:c2:
52:25:ef:87:20:b5:bd:c1:20:2e:72:9b:87:ac:f5:
d4:3c:49:d0:7c:a6:9e:c9:69:dc:06:d5:12:ee:5c:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:33:52:95:74:0A:15:85:03:27:06:E8:FE:7A:2D:8D:AF:2A:22
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tc4zUpV0ChWFAycG6P56LY2vKiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.235.96.0/24
Signature Algorithm: sha256WithRSAEncryption
64:24:45:85:48:76:19:1a:b3:a6:56:dc:cc:73:6b:a6:36:00:
b3:e2:ad:14:89:aa:5e:d2:c8:8b:64:fa:4a:fb:c4:87:83:59:
c8:7e:fb:9b:4a:96:7a:93:6d:cd:91:38:d4:e1:9d:5c:36:bc:
8e:f3:62:14:c8:6d:17:b7:d4:97:d2:0f:08:03:af:86:c6:06:
ba:3f:06:8d:5c:70:04:50:1e:83:8e:30:4d:33:30:fb:23:13:
85:26:d9:e1:ff:19:7a:36:86:f3:61:ef:d9:50:11:25:7c:db:
9f:21:49:ee:bb:8f:7a:ef:34:be:8a:e4:93:d1:ea:e9:7c:2f:
10:47:08:55:d2:67:38:bb:4a:af:1d:44:68:31:dc:0f:d3:9d:
cc:bb:be:be:95:ca:20:46:63:e5:b3:78:4d:06:2c:1d:3d:49:
18:03:ac:7c:85:b7:c9:2d:65:08:ac:55:38:20:76:25:a1:aa:
19:e2:d1:42:cd:67:e9:6c:a9:c1:b7:a8:85:c7:70:15:a3:42:
1e:d4:40:74:f8:12:28:7e:a2:3d:77:b2:9f:4b:08:2c:31:37:
0c:5d:ad:1a:d5:2f:68:7f:67:6a:3a:37:25:37:42:50:db:42:
b0:8d:da:24:21:bb:d8:04:59:9a:d3:dc:66:21:21:c2:39:34:
0f:12:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org