Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/c1UOJFQ0fQOTYp55zapPnOFqHJY.roa
File: c1UOJFQ0fQOTYp55zapPnOFqHJY.roa (raw, json)
Hash identifier: 1swiRuY8UdVKaVsMNWoqJV5aKf56Dge2KbFlXIDmn6I=
Subject key identifier: 73:55:0E:24:54:34:7D:03:93:62:9E:79:CD:AA:4F:9C:E1:6A:1C:96
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018C3FB411EB1F9AA3807CD9F1C9FAFF4A8D
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/c1UOJFQ0fQOTYp55zapPnOFqHJY.roa
Signing time: Wed 06 Dec 2023 15:16:54 +0000
ROA not before: Wed 06 Dec 2023 15:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11868
IP address blocks: 57.191.128.0/22 maxlen: 24
57.250.220.0/24 maxlen: 24
57.250.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:b4:11:eb:1f:9a:a3:80:7c:d9:f1:c9:fa:ff:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Dec 6 15:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73550e2454347d0393629e79cdaa4f9ce16a1c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:94:48:75:91:e8:f2:62:5c:a6:ab:39:b9:5a:
21:38:9e:7d:4a:12:be:b4:0f:13:d2:fc:c4:8b:1e:
02:1b:3d:26:1c:a7:56:dd:86:1d:17:f8:3b:ee:52:
8b:a9:53:1d:c7:7e:f8:24:b0:fc:8b:34:3e:41:b3:
47:3e:aa:1f:1b:64:97:71:93:06:e7:43:f7:41:b0:
e0:44:c6:29:13:0e:38:fd:bd:5c:12:04:8b:a9:9e:
91:ff:fd:be:1e:66:35:48:ce:fe:87:f0:c2:e6:4c:
e4:5e:c3:cf:6b:4b:29:2a:96:0c:98:cd:fb:f7:4a:
0a:5d:b1:ba:4b:79:e1:a3:cc:f8:3c:92:25:d1:47:
17:08:82:6f:64:e4:b7:2d:06:17:34:54:35:6b:6f:
df:9d:f1:31:92:c0:8c:d6:72:f6:25:5e:18:31:e0:
e5:39:98:15:05:c6:23:eb:7f:f7:92:a7:fa:06:e7:
17:6b:78:8b:8c:36:2c:79:79:ac:f7:82:51:e8:a9:
14:26:dc:94:14:89:93:24:fa:34:9a:bb:80:af:1a:
90:6a:74:f5:7e:d8:0e:77:0c:b5:f2:60:0c:59:a9:
79:a0:37:4a:dd:90:e5:6f:5b:c0:1b:ee:c3:e2:30:
88:6f:7a:66:57:82:65:ab:22:1f:f4:72:0e:65:36:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:0E:24:54:34:7D:03:93:62:9E:79:CD:AA:4F:9C:E1:6A:1C:96
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/c1UOJFQ0fQOTYp55zapPnOFqHJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.128.0/22
57.250.220.0/24
57.250.255.0/24
Signature Algorithm: sha256WithRSAEncryption
78:74:a4:f8:2f:4f:9c:07:77:03:1a:c7:e0:6c:08:ec:f5:6f:
21:01:59:39:8f:79:91:4e:28:1c:95:13:f0:f6:70:82:d4:3a:
3c:89:5b:1f:7d:31:a6:ef:7e:e4:78:d5:0d:cb:02:2c:4b:53:
b3:fc:86:ca:7b:9d:39:40:3d:db:24:cf:54:b1:03:71:70:2c:
47:f5:e5:b7:f2:ee:d9:86:43:2f:b0:41:db:68:a2:5a:89:82:
ac:18:a8:e0:f8:90:06:5a:fe:5b:a1:15:70:6d:5e:3a:b6:41:
57:20:df:59:68:c5:85:bb:4b:be:55:3d:52:fb:7b:5a:96:2c:
3c:ad:89:5d:d4:cd:97:c7:0f:48:79:61:ed:e1:50:59:b8:cb:
83:25:b6:97:67:fd:66:f2:5d:63:f7:e7:0d:99:31:6c:26:ab:
0d:d1:19:25:f1:7e:73:eb:fb:f9:31:c5:40:c8:cc:fc:d8:ba:
90:dd:e1:f4:ed:15:13:b7:22:06:98:44:2e:06:0d:09:48:6c:
c0:7e:f8:8b:58:c4:7b:a8:8b:98:c5:a3:13:9c:50:b6:41:cb:
b0:b7:9d:4f:eb:a1:85:ad:6f:f5:0f:43:70:70:c9:93:eb:60:
c5:a2:de:b8:8f:87:33:bf:b8:23:ab:30:86:8e:4a:18:d3:93:
5b:61:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org