Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/5IyNwFKRYqA5StoM1M5ZRazCDmA.roa
File: 5IyNwFKRYqA5StoM1M5ZRazCDmA.roa (raw, json)
Hash identifier: bEU4Ao3WP5vA+kDv+fORMKxDrizeIpO5VvDygLXzE9w=
Subject key identifier: E4:8C:8D:C0:52:91:62:A0:39:4A:DA:0C:D4:CE:59:45:AC:C2:0E:60
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0191793DB1E2BF254D614000DBA070EEA8D0
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/5IyNwFKRYqA5StoM1M5ZRazCDmA.roa
Signing time: Thu 22 Aug 2024 08:39:31 +0000
ROA not before: Thu 22 Aug 2024 08:39:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 176.116.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:3d:b1:e2:bf:25:4d:61:40:00:db:a0:70:ee:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Aug 22 08:39:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e48c8dc0529162a0394ada0cd4ce5945acc20e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:99:01:f3:b9:00:20:dd:9e:46:90:87:fe:c3:
c7:2f:f5:9e:9c:b4:4e:3f:c3:60:8b:64:fc:7e:1e:
2b:c7:95:20:fd:7e:a4:b9:29:91:fc:64:b7:89:94:
7d:21:55:34:ff:55:2f:6c:7c:ba:17:3a:67:68:32:
7f:dc:2a:d6:99:80:34:40:1e:66:06:cb:a9:e4:88:
27:e7:5d:4e:93:74:11:4a:f5:c5:f7:ce:d3:25:18:
c0:ec:6b:25:80:ce:8f:2b:d5:6c:b7:0d:38:bb:d5:
b4:75:3f:8f:80:a8:85:ea:99:4c:54:f7:c3:e4:42:
3c:2a:ee:18:87:a6:59:01:03:c6:bb:ce:97:8b:df:
04:a2:74:ea:2f:89:79:88:14:af:c4:8c:82:1e:a3:
93:56:44:f2:f7:c4:e7:45:65:ee:65:a5:1a:b2:9f:
bc:37:96:88:72:5e:bc:8a:4e:26:f2:d5:d2:5e:65:
8d:b7:d0:ea:64:04:bd:04:9d:b3:f1:53:d7:60:52:
f3:eb:c2:2e:0a:3a:dd:fa:7b:b3:8c:80:2a:2e:0a:
c9:8d:fd:64:b5:db:07:12:35:05:b3:da:b0:b2:a7:
00:d4:6f:9a:09:58:5d:d5:51:37:6d:a4:5d:05:e5:
7c:74:56:55:37:d4:9d:b8:b2:f6:7c:2f:27:61:4d:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:8D:C0:52:91:62:A0:39:4A:DA:0C:D4:CE:59:45:AC:C2:0E:60
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/5IyNwFKRYqA5StoM1M5ZRazCDmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.16.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fa:be:73:78:82:c4:46:a6:f6:f3:14:1d:30:75:ef:89:9d:
d4:1c:00:3a:19:61:5e:3c:d7:2b:5f:6b:20:1b:f5:96:b1:2e:
42:02:f5:b3:ab:2a:13:8e:44:1a:cb:1c:99:41:dc:a9:e7:f9:
5c:32:6f:36:19:c4:87:56:f6:da:d1:1f:3c:62:17:27:22:0f:
50:a3:d4:0e:f4:65:cf:42:6f:da:dc:9e:a5:e0:9f:d8:c1:8b:
c3:66:d5:eb:ff:8f:cf:b4:03:90:bd:35:d1:3d:91:ca:c0:6e:
6d:ba:61:8f:87:9b:00:fa:35:bf:5b:b0:70:3f:94:05:80:49:
3a:bc:f4:b9:8a:92:46:38:c7:6e:c0:f7:31:e8:d8:7b:93:98:
0f:b9:01:a0:90:28:b3:62:9c:82:28:9f:51:36:bc:40:e4:0d:
21:32:39:b5:3f:e1:2b:8b:04:6a:f0:64:b6:c9:a7:30:71:c5:
f0:73:8f:6d:93:20:52:29:b1:6b:c6:fc:81:24:65:fc:b6:a9:
14:2f:b8:75:b1:3f:41:29:d2:b0:30:97:71:8e:16:52:ca:b8:
e8:dd:f1:68:66:dd:ff:26:ab:65:be:78:1d:07:e0:1c:b9:ba:
ab:e0:89:e0:b7:a7:c2:f5:2b:38:f1:01:df:49:a0:17:5f:ea:
14:d0:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:00 2025 by rpki-client