Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1-_vxvwh-XwLXegE0t3r1gFx1Xdc.roa
File: 1-_vxvwh-XwLXegE0t3r1gFx1Xdc.roa (raw, json)
Hash identifier: DUfgwWyKsaH0nHnB5Ihm5ejAMUK/2Oc1GAOASu8rURM=
Subject key identifier: FB:FB:F1:BF:08:7E:5F:02:D7:7A:01:34:B7:7A:F5:80:5C:75:5D:D7
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 01857070827B9AE38A5B7F401A5C388452F1
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1-_vxvwh-XwLXegE0t3r1gFx1Xdc.roa
Signing time: Mon 02 Jan 2023 03:04:59 +0000
ROA not before: Mon 02 Jan 2023 03:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10282
IP address blocks: 57.90.0.0/16 maxlen: 32
57.66.0.0/15 maxlen: 32
57.87.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:82:7b:9a:e3:8a:5b:7f:40:1a:5c:38:84:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 03:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbfbf1bf087e5f02d77a0134b77af5805c755dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:36:ef:7f:00:92:b0:1b:7c:e9:09:50:19:79:
34:75:fe:97:09:7e:2f:8f:83:cb:5b:7f:8b:f2:e4:
db:03:1a:fc:f0:51:11:21:d7:0f:b5:60:62:38:8d:
1f:ed:6e:c9:bb:21:e7:46:9c:d4:4b:86:c7:36:9e:
08:99:3b:28:9c:4b:33:9a:9f:d0:24:34:56:e4:db:
69:55:12:5e:c5:f6:0b:06:fe:8d:d3:84:83:64:b4:
1c:ce:0f:a0:50:8b:af:45:14:49:f3:fb:24:e0:16:
0a:26:7c:1a:42:90:13:cd:09:68:6e:3a:4a:d2:29:
c1:ca:e3:2f:16:f4:b4:5e:d4:a2:6d:81:d4:1f:11:
87:79:22:01:4d:bd:df:19:f7:8a:64:3c:e9:85:63:
f0:87:a1:49:15:a4:30:75:94:40:37:86:35:3f:9c:
86:b3:5f:b1:a3:28:57:5a:0d:a3:15:4c:2e:bf:b3:
c1:61:53:ef:99:80:37:35:4c:f1:fa:c2:4e:b1:2f:
4a:d9:0c:3f:d3:cb:05:91:d3:46:d5:a2:a3:1a:84:
99:2a:f4:15:2d:e8:b9:d3:8e:5a:cc:bf:43:72:56:
45:81:07:e0:28:37:fa:5e:7a:8c:d2:1c:f4:0a:ab:
3a:2d:54:8e:9e:1b:f3:36:83:e0:2e:06:4c:8b:6d:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:F1:BF:08:7E:5F:02:D7:7A:01:34:B7:7A:F5:80:5C:75:5D:D7
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1-_vxvwh-XwLXegE0t3r1gFx1Xdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.87.82.0/24
57.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:21:69:cd:6b:7a:16:55:d5:4e:3d:aa:53:1f:76:af:2e:a0:
76:85:84:f9:e8:3a:ff:51:a3:13:9e:35:ee:6c:f3:f4:f4:73:
67:a6:f8:e6:d3:0d:a2:69:97:d8:1d:82:52:e5:89:c7:30:c5:
fd:0b:a6:b7:c5:02:7b:d7:22:df:bf:67:3a:bd:ed:d4:c1:67:
77:d5:3d:41:80:84:b0:bf:36:0c:e1:e6:7d:a7:8e:af:79:32:
27:5c:a7:97:e9:8a:f2:4a:ec:e1:e4:c0:b5:fd:6c:54:5f:c5:
75:c1:9f:aa:98:65:ce:8e:2f:4c:ca:42:ce:8f:14:c2:96:2f:
82:bb:bd:a2:be:27:b8:9e:c1:33:4e:54:31:08:ed:76:39:a5:
44:68:74:74:e0:21:3a:65:56:23:86:30:28:43:a5:1c:e2:12:
5c:89:d0:cf:4b:7d:5b:8f:d3:70:29:bf:a9:21:11:4e:cb:57:
65:4e:c8:94:26:df:83:03:f0:d0:57:f4:54:64:1d:4d:f9:ca:
0a:b6:b1:18:2e:1e:c1:d2:8d:21:a4:95:ad:75:16:42:62:77:
d7:b3:5a:ce:18:f7:9a:5d:10:ff:a1:7d:3a:bb:1e:32:53:55:
50:3e:57:03:88:fd:3e:14:09:7c:a4:96:36:47:52:c5:b6:57:
cf:3b:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org