Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa
File: PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa (raw, json)
Hash identifier: GqjJFpKds5DCcU/KG3lRwSiS8L6wsPOpyEplUtqXeTg=
Subject key identifier: 3E:19:4C:E3:FC:E0:72:E1:15:4A:C4:7E:5E:7A:B8:1B:FE:CD:25:17
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01856F5DA36E19DDB0A0A3E117107C753E64
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa
Signing time: Sun 01 Jan 2023 22:04:45 +0000
ROA not before: Sun 01 Jan 2023 22:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 57.190.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a3:6e:19:dd:b0:a0:a3:e1:17:10:7c:75:3e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 1 22:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e194ce3fce072e1154ac47e5e7ab81bfecd2517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:9b:18:5c:5b:a8:42:59:fb:16:c0:f7:77:
cd:36:38:01:22:3c:33:66:25:f9:c2:1d:ea:c4:b2:
cc:2a:52:7e:bf:1a:4d:fe:c1:26:dc:f6:86:ab:45:
8b:95:4c:6d:fb:9d:14:48:f3:33:81:a0:ac:6f:e5:
b4:63:ce:b2:9a:e5:41:7f:84:76:51:35:24:d7:cf:
91:94:62:ee:4b:00:59:07:e2:b6:ce:00:d9:07:04:
79:3f:76:41:0a:86:01:31:40:57:4f:51:59:e2:9c:
e2:03:6f:8b:f9:e1:e8:63:e3:54:bc:5b:ec:1c:b8:
b9:ae:ed:2f:14:5b:ef:aa:69:50:7b:88:0d:e1:9b:
06:ed:31:b6:77:e6:f3:e9:18:b8:5f:53:e9:85:77:
1a:99:a5:23:eb:2d:e0:8a:0e:ef:45:0b:1b:e8:8e:
f9:ab:7f:36:96:5e:ef:db:2c:1a:96:36:1f:20:87:
8e:d6:51:06:1f:dd:1f:d5:e2:c3:8a:12:d2:8d:86:
6c:b4:c6:3e:f3:7c:ca:2c:2a:8f:5a:3f:2f:c2:08:
9b:1d:89:20:10:57:88:c9:58:a1:d3:59:61:4b:da:
0b:fc:7a:58:b0:47:a1:5e:a4:9a:91:b6:cb:e8:84:
5c:d4:38:ef:95:1e:14:b9:d7:3a:4b:f2:fc:b0:d1:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:4C:E3:FC:E0:72:E1:15:4A:C4:7E:5E:7A:B8:1B:FE:CD:25:17
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.190.60.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1c:ab:d6:7f:7c:6b:64:9b:57:ca:16:24:4c:af:6b:9a:06:
0b:6f:a1:f0:d6:58:b2:49:b9:90:85:01:f5:b4:12:ae:ad:b3:
0e:9f:e9:8e:87:44:d8:33:bb:1e:f8:ad:ab:dd:e8:f9:a8:91:
b7:00:18:72:b0:e2:51:5e:34:5e:90:45:9e:d5:0d:71:86:02:
bf:8c:31:42:ed:f2:7a:39:59:cc:9c:e5:81:d2:ea:b9:ed:6c:
ca:4c:24:e0:57:c8:fb:c7:b3:39:f6:f8:a3:80:27:f7:d3:15:
b3:f6:b3:55:e3:70:dd:88:7f:5d:9e:bd:f1:97:b7:ed:fd:57:
a7:b5:5e:80:04:67:91:7a:93:5a:28:cd:1d:6d:71:8b:cf:40:
fe:64:e2:30:d3:d8:54:9b:5b:84:a0:f0:39:5a:a4:54:eb:d6:
e9:67:7d:5c:d6:fc:41:6c:46:64:52:9d:7c:b8:bf:35:e6:e1:
aa:27:e8:a3:4f:16:c8:23:26:8e:36:49:a1:c6:9c:de:c0:c0:
54:88:33:4c:9a:f9:43:b5:bd:19:0b:f9:45:ad:03:ef:06:c0:
db:bf:c3:94:54:fb:bf:2f:46:77:af:85:38:d7:2a:58:d0:ac:
a9:dc:42:34:da:19:7e:20:4e:8f:05:d1:aa:35:af:10:5f:6f:
2f:43:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org