Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/FYKD9HRA5htRCd58LEaAhVQZrDQ.roa
File: FYKD9HRA5htRCd58LEaAhVQZrDQ.roa (raw, json)
Hash identifier: jeEQC5b1b2a/AqpBjfLALxCPPqPdr/t7Bv4JgVmSJW4=
Subject key identifier: 15:82:83:F4:74:40:E6:1B:51:09:DE:7C:2C:46:80:85:54:19:AC:34
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 018570705488554668EA3F5FC8B7C081D18E
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/FYKD9HRA5htRCd58LEaAhVQZrDQ.roa
Signing time: Mon 02 Jan 2023 03:04:47 +0000
ROA not before: Mon 02 Jan 2023 03:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199199
IP address blocks: 176.97.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:54:88:55:46:68:ea:3f:5f:c8:b7:c0:81:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Jan 2 03:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=158283f47440e61b5109de7c2c4680855419ac34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:82:63:a3:f7:78:93:8b:29:93:9b:22:dd:
45:96:97:d1:ed:ea:65:19:0b:8c:f6:e4:b5:dc:82:
d8:48:26:14:44:e7:24:a8:19:7a:a7:23:cc:ad:fc:
81:61:9d:4a:39:1c:0b:61:5b:6a:59:f1:93:58:bb:
32:9a:b5:b3:86:ac:e2:b7:7f:70:5a:c8:4b:04:67:
32:95:78:18:ff:3a:f4:40:07:0f:0f:00:bf:6c:79:
4c:1c:66:c4:78:b2:8d:5f:7a:d8:14:3e:9e:05:95:
e6:fb:65:06:ef:68:94:85:9a:99:29:5d:8e:5d:dd:
17:01:77:b0:3e:eb:9f:92:b0:c6:7c:7d:3d:8a:39:
89:60:d7:55:65:12:f5:cf:fe:26:94:b6:3c:af:b2:
bf:51:ea:8c:eb:35:c5:18:47:42:e1:51:4a:35:48:
1b:0e:06:13:d2:62:d9:9c:fa:78:52:2a:a6:06:b8:
b1:9e:bc:46:0d:bc:b7:68:26:e9:ac:92:ec:44:88:
c3:fd:b0:91:bc:79:4b:0e:0f:5c:7c:6b:ca:7d:88:
c9:57:ac:8d:3c:fe:fd:94:28:fc:ab:2b:83:c1:13:
98:ee:cc:fe:03:29:22:ae:a7:b6:8d:5a:01:b2:8b:
40:d4:09:bc:72:fb:eb:cb:7c:5f:cb:eb:04:52:bd:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:83:F4:74:40:E6:1B:51:09:DE:7C:2C:46:80:85:54:19:AC:34
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/FYKD9HRA5htRCd58LEaAhVQZrDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.159.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e4:ce:6d:bf:4b:0e:0e:28:77:f2:b8:40:10:37:30:d8:76:
b5:5f:62:7e:4b:82:fc:02:0a:36:c7:d6:ac:fb:10:4c:66:cb:
5f:ca:2f:1a:26:27:db:b6:cf:5f:a1:21:22:08:53:01:ef:ae:
19:0f:6f:51:f0:06:c7:51:c9:b0:33:a0:58:83:b3:32:92:8d:
de:88:f5:cd:72:e0:39:fd:3e:c4:bd:16:f8:d3:f6:97:24:1e:
b9:67:61:22:a6:28:f9:ed:dc:7b:03:ff:f9:1a:98:20:34:68:
fc:54:81:f4:c1:0e:e0:d0:5b:c2:36:dd:4b:b1:ec:cf:4e:57:
1c:df:aa:da:e2:c6:8d:af:aa:db:36:39:4c:3e:eb:22:4b:8a:
87:92:f5:46:29:cd:02:54:28:e7:5b:32:4c:b9:f1:6f:f6:ce:
7f:3e:bc:75:66:29:72:42:16:b1:c4:45:d5:13:22:ea:43:34:
98:9b:9e:f0:ca:26:aa:96:4a:1a:79:62:4c:d1:8b:ba:40:25:
c0:35:45:26:0b:3e:07:8d:81:61:06:76:c2:ee:b3:dd:00:40:
d3:4e:e3:6b:eb:b8:91:a2:6e:55:59:ee:48:57:6c:e4:6d:0f:
4e:1f:9c:32:e1:b5:1f:32:ec:95:9d:30:ed:74:6f:ee:27:08:
60:ed:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org