Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa
File: Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa (raw, json)
Hash identifier: sv45OmHIdEHJla5m4D3+rXYzrjYKAYuia2RHiZUzFBg=
Subject key identifier: 4E:BF:E9:03:EA:48:1B:03:B4:F2:F8:BA:72:3E:D3:39:9F:BA:1C:47
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E790AE3CAD611E4123C254A364DECE8
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa
Signing time: Sun 01 Jan 2023 17:55:04 +0000
ROA not before: Sun 01 Jan 2023 17:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396426
IP address blocks: 176.111.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:0a:e3:ca:d6:11:e4:12:3c:25:4a:36:4d:ec:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ebfe903ea481b03b4f2f8ba723ed3399fba1c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:55:4e:ca:d5:10:76:77:80:e1:b4:21:bf:
97:b4:e6:cb:10:09:cb:4c:7a:bf:4c:bd:c6:9e:ba:
5b:63:13:dd:70:db:61:a4:e5:77:fe:ba:73:c0:f8:
7c:fa:7c:07:37:b2:9a:8d:54:4a:b8:e0:c4:a1:60:
cb:a0:5f:23:ce:ef:79:5a:b6:8c:ae:a6:1d:12:b4:
62:50:41:5e:1a:64:2c:e3:d9:c4:c9:24:ce:aa:7e:
ab:14:14:fd:5a:2e:1f:76:34:77:85:09:8d:41:03:
56:49:ab:c3:75:26:22:dc:07:c7:be:56:1b:da:81:
c7:92:cb:f8:e7:98:25:1e:84:b6:f4:cc:0d:fa:d0:
b8:1c:25:93:00:e8:e5:8f:24:c8:05:3c:2e:79:67:
d4:2a:46:5d:c6:32:65:e5:dc:e6:d8:5e:78:07:5c:
58:33:f5:3a:33:71:88:f3:15:20:bb:48:c3:50:d9:
ae:72:23:cf:7a:5c:24:06:27:a8:53:25:79:92:38:
fb:f2:38:4e:72:84:cc:02:03:df:f8:f8:28:08:c6:
65:78:8c:ee:e7:7b:58:34:61:3d:84:55:9e:3b:72:
81:93:13:6f:dc:18:ac:05:58:b3:7a:31:e8:27:65:
3f:eb:55:2f:55:78:c2:b6:aa:00:81:ab:13:f5:c5:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:E9:03:EA:48:1B:03:B4:F2:F8:BA:72:3E:D3:39:9F:BA:1C:47
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7e:d6:d2:b9:12:0a:ab:a9:78:e3:be:be:9f:07:10:e6:38:
08:c8:46:29:3b:0d:90:9e:89:7b:fd:c1:c6:49:cc:26:d3:c7:
c0:2c:74:4f:ea:56:c3:bd:34:2f:cf:cc:0b:e8:e9:62:c2:fd:
76:07:c6:61:1a:cc:52:29:93:04:0a:d8:d4:77:3f:90:86:9a:
f2:8e:e6:8a:46:ae:e5:0f:ff:f8:a7:5b:76:6a:82:95:bb:61:
72:39:09:8b:a5:f2:f9:59:d4:3b:f8:b0:eb:cd:3e:20:1a:e4:
8e:d6:50:08:c5:57:e5:ad:65:5d:71:b7:03:10:e0:a9:2f:a3:
8c:d6:65:55:ae:6d:d6:55:94:fb:85:75:ef:e2:3b:18:58:1f:
a0:02:8f:a1:ae:24:bc:a2:49:43:ac:5d:94:f3:1f:05:47:79:
0c:a1:20:b6:e9:81:64:26:66:d8:6e:b2:36:1c:9e:c0:f2:cc:
dc:e6:23:b7:ab:c4:0b:67:2c:4f:18:3f:7b:6b:cf:03:cf:7a:
46:00:0a:71:68:36:bb:d4:33:ae:03:1c:24:9e:27:ea:e4:df:
8d:d8:32:75:8f:1a:f3:da:de:ae:e3:b9:9e:1d:b6:55:b6:82:
de:93:c0:70:c9:13:a6:66:ea:66:9a:59:7e:e9:e3:c3:63:d0:
0a:a8:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:41 2024 by rpki-client on console-ams.rpki-client.org