Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/ZY4t2b0IrKVeakbYZD3J6ZaskBg.roa
File: ZY4t2b0IrKVeakbYZD3J6ZaskBg.roa (raw, json)
Hash identifier: HR7D3MGSNxu/pyT9uKpvbSIcvmLmsgyqYO+mH88mfPg=
Subject key identifier: 65:8E:2D:D9:BD:08:AC:A5:5E:6A:46:D8:64:3D:C9:E9:96:AC:90:18
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 01856F66F46D8B8728E2F4E101B21BB2D441
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/ZY4t2b0IrKVeakbYZD3J6ZaskBg.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210479
IP address blocks: 176.116.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f4:6d:8b:87:28:e2:f4:e1:01:b2:1b:b2:d4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658e2dd9bd08aca55e6a46d8643dc9e996ac9018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:c4:6c:73:ff:a8:e2:24:c6:31:9b:de:d6:
75:e4:d0:68:a4:fc:8a:99:b7:ac:20:92:85:c9:de:
b5:cb:bf:4c:a6:4c:7e:65:e6:c8:5d:a3:b9:ea:66:
9f:1e:9b:46:b7:5f:0f:79:96:3e:6f:ac:d3:20:5b:
04:20:cf:d4:6b:e1:b6:b8:49:8a:41:c0:33:bc:2a:
94:63:86:22:82:07:cf:01:46:4a:31:f0:79:9c:de:
a8:2c:f9:6e:4c:6f:fb:fb:d7:bb:f7:61:fc:37:f0:
16:63:be:6d:87:c2:d1:5c:14:8a:fa:cd:0f:9b:f0:
8e:55:a4:0f:04:66:a0:46:a2:e0:c0:72:a6:2d:c5:
49:3d:e9:f5:7b:fe:24:a1:8a:e3:d3:0a:0a:49:48:
05:8b:69:ca:8e:9a:e2:69:3c:98:02:17:b4:ad:72:
bf:48:93:a2:d5:4e:28:fb:ec:b8:af:ed:b6:43:53:
86:38:ba:1e:72:91:59:66:67:03:43:47:00:72:ac:
7e:b1:7c:0f:d9:5a:44:67:b3:a0:e9:59:01:16:69:
c9:12:d0:e0:56:a5:80:3c:cb:39:95:3c:43:74:17:
88:03:02:95:4d:a0:b3:c0:a6:8a:4b:98:4a:4d:e4:
be:26:d9:01:54:df:6c:17:31:7f:a2:9c:6c:97:3d:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:2D:D9:BD:08:AC:A5:5E:6A:46:D8:64:3D:C9:E9:96:AC:90:18
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/ZY4t2b0IrKVeakbYZD3J6ZaskBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.16.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a1:4e:7e:49:42:f6:d3:f0:55:2a:f7:f9:ef:19:03:f1:b7:
c8:8a:30:e7:3b:ff:1d:d9:71:5d:31:14:0d:8b:bc:08:14:42:
5d:ca:06:7b:5e:5b:ef:03:bf:ab:8c:ec:90:f7:2a:45:9e:60:
0f:0e:e2:14:a3:ab:0f:f7:9b:4d:9a:c8:54:5b:02:d5:cc:4f:
f2:1e:55:36:2f:7a:73:13:d6:61:d8:6f:8a:ef:ac:3e:80:41:
c2:06:1e:82:96:49:ba:09:21:4a:63:50:4b:b7:61:60:32:11:
97:04:69:26:7d:e5:3b:f9:fb:71:5c:bc:28:c4:bd:18:ae:b2:
c8:60:51:7e:33:28:cd:c5:fc:20:77:bc:42:b0:36:c3:8f:84:
1c:17:a8:62:f9:51:3e:0c:b1:26:14:67:72:3b:bf:fd:e2:27:
f7:cc:b8:26:4c:53:5a:95:14:4a:61:0f:14:7f:55:49:1d:04:
11:9b:e3:b2:15:3a:81:79:e1:4a:52:56:e1:b3:41:d4:e9:40:
b1:93:db:0f:c2:41:fb:65:18:18:84:c9:ed:d2:2d:0f:bf:7a:
c4:65:7c:b0:a4:fa:f3:55:9b:2a:44:60:1f:75:e2:08:79:56:
0a:85:90:92:11:70:70:54:d4:ef:20:89:4a:57:b1:93:56:52:
06:5a:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:19 2024 by rpki-client on console-ams.rpki-client.org