Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/UrUT7iMrYYprHjKoBGFx6aidjiE.roa
File: UrUT7iMrYYprHjKoBGFx6aidjiE.roa (raw, json)
Hash identifier: Z8kg8JCWG+f9Gx0gN0pOUMJjmbJvwaS+E9UEOb3bE0A=
Subject key identifier: 52:B5:13:EE:23:2B:61:8A:6B:1E:32:A8:04:61:71:E9:A8:9D:8E:21
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 0185725586A25D2A0A17F1E1CD9692AD4F20
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/UrUT7iMrYYprHjKoBGFx6aidjiE.roa
Signing time: Mon 02 Jan 2023 11:54:45 +0000
ROA not before: Mon 02 Jan 2023 11:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 176.105.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:86:a2:5d:2a:0a:17:f1:e1:cd:96:92:ad:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 2 11:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52b513ee232b618a6b1e32a8046171e9a89d8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:5e:88:eb:01:a1:fb:c5:f8:12:a3:63:be:
39:9f:1b:9d:83:f2:30:9d:37:d9:75:ea:48:9c:6d:
79:99:fe:37:23:df:81:0c:df:c6:5c:69:93:97:0a:
32:fa:f3:13:97:bd:32:32:a2:d8:6c:66:24:6d:4e:
c6:c4:0e:0a:6e:db:c5:d7:f0:ca:c1:ec:4e:57:70:
3c:5b:6f:12:57:8f:4f:e1:78:3b:1d:8b:1a:9e:da:
e7:e8:b4:e5:5f:ff:be:57:99:d3:dd:cd:9a:87:94:
5e:e9:ab:34:9c:cc:12:5d:54:72:28:f9:d0:91:1f:
f8:cb:88:10:d4:8c:b0:f5:bf:13:65:07:80:a9:14:
57:78:64:aa:a6:ef:f3:4a:46:0f:44:1c:cf:d0:d2:
ef:27:b2:91:9f:08:f0:ae:98:0d:78:a5:04:8d:04:
83:a8:5a:bc:3d:48:30:b2:9c:2d:dc:25:e8:f8:83:
8e:02:37:40:52:7e:c3:e5:13:e0:47:66:08:24:40:
25:12:78:27:85:34:08:d1:eb:7c:14:1b:7b:ce:74:
3f:f6:61:38:d5:9b:1a:5e:4d:21:de:3c:f2:a5:74:
c4:e1:8a:ab:13:f8:23:5e:b1:f6:c6:5c:4c:3e:81:
39:15:fd:9c:65:6e:fb:15:80:54:b4:44:0c:fa:11:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B5:13:EE:23:2B:61:8A:6B:1E:32:A8:04:61:71:E9:A8:9D:8E:21
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/UrUT7iMrYYprHjKoBGFx6aidjiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
50:79:b5:83:40:6b:f1:4f:bd:73:d0:e9:b3:50:5e:89:a1:f5:
c5:b5:f9:ba:bf:6a:03:71:74:78:a3:1a:f4:2c:13:e2:7e:d0:
39:34:41:20:41:1a:aa:23:9c:f1:0a:b3:48:72:ac:84:2c:4a:
61:9a:77:51:a7:6c:a1:59:44:7b:21:3d:60:d9:af:a0:fb:6a:
de:f7:e0:67:65:47:0a:1c:b8:64:bf:8f:0a:2a:3d:fa:38:33:
60:60:45:3a:9a:39:00:b2:0e:e2:df:c9:b0:90:2c:d5:6e:97:
d1:26:29:b4:7f:6c:b2:73:b4:45:fa:b3:6a:20:17:70:fd:02:
41:3f:ae:67:65:88:c3:6a:a8:d5:49:4a:76:5c:73:63:ea:9b:
97:80:17:d3:e5:a8:4d:fc:59:0e:72:74:10:ce:f3:be:38:cf:
28:01:93:05:a2:3e:7a:4e:f6:f7:23:61:85:a4:ee:14:32:2d:
5f:df:08:4f:2e:e9:ed:df:66:50:56:07:c4:1f:98:84:d2:f1:
cc:fc:92:12:2c:a8:65:3f:ac:78:38:f3:d7:a9:1d:a3:39:97:
0f:46:6a:6e:17:12:b0:52:c0:c9:3e:2e:c0:7d:f9:25:31:ea:
2f:0f:81:95:fa:a6:cb:91:ae:48:7c:a1:84:14:b8:4c:3f:84:
b8:60:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:06 2024 by rpki-client on console-fra.rpki-client.org