Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/s7WmKtBulfTaBrOILf7t9496-4c.roa
File: s7WmKtBulfTaBrOILf7t9496-4c.roa (raw, json)
Hash identifier: Bc+T39YT/aW8tjpI/raQrfvs9AjHyONpQEajgJHebAk=
Subject key identifier: B3:B5:A6:2A:D0:6E:95:F4:DA:06:B3:88:2D:FE:ED:F7:8F:7A:FB:87
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018CC86F6DB89DCC1934A8A0BACD04B40062
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/s7WmKtBulfTaBrOILf7t9496-4c.roa
Signing time: Tue 02 Jan 2024 04:29:54 +0000
ROA not before: Tue 02 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11868
IP address blocks: 57.191.128.0/22 maxlen: 24
57.250.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 09:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6d:b8:9d:cc:19:34:a8:a0:ba:cd:04:b4:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3b5a62ad06e95f4da06b3882dfeedf78f7afb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:41:7e:b9:b2:3b:72:99:54:aa:6e:dc:04:
26:7a:81:1c:41:0c:fd:90:4f:86:a2:52:ce:29:12:
bb:06:c9:7b:b1:e8:41:ef:58:76:ef:73:99:26:66:
e9:46:88:92:72:c1:09:41:38:84:a8:7f:2b:79:2f:
da:f5:32:01:eb:42:9b:86:2c:22:42:26:31:23:5b:
42:2e:c3:85:d7:e3:2f:02:11:fe:92:da:9f:6f:d0:
10:d8:fe:51:8f:59:05:f7:5e:b9:7c:7b:b3:b9:f3:
b8:f2:49:19:bd:de:07:a1:0c:e0:47:a5:5e:ed:20:
f8:b9:b7:0f:56:9f:e2:c9:86:d6:55:52:67:dc:6b:
ab:82:bd:db:0a:47:e3:ed:9c:59:d4:31:8d:90:d8:
11:c0:8b:d5:9c:78:65:f5:ca:f5:d7:98:c5:6c:2e:
54:b0:71:9c:c9:41:73:db:17:eb:ef:67:24:12:8f:
7e:b0:3a:d6:c3:a6:77:5f:91:3e:87:b4:cf:7c:6f:
cf:02:dd:d8:bd:4b:9c:4b:bc:93:cc:cf:07:ef:41:
77:17:01:62:9e:d7:47:e0:e7:d4:df:ab:46:e1:13:
3c:e0:d9:93:a3:63:17:74:7b:93:1e:80:7f:a3:05:
dc:a9:c4:34:27:25:82:05:31:f9:0f:99:6d:06:2b:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:A6:2A:D0:6E:95:F4:DA:06:B3:88:2D:FE:ED:F7:8F:7A:FB:87
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/s7WmKtBulfTaBrOILf7t9496-4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.128.0/22
57.250.220.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:58:8f:82:e8:58:6c:a8:5a:3d:72:1d:dd:e5:44:ec:c7:e1:
ae:1d:06:96:94:35:59:c6:a5:a2:73:13:02:f2:bd:78:94:0f:
59:9a:c8:5b:9a:cf:29:9a:46:cf:7d:3f:3f:ff:94:be:aa:79:
6c:ac:35:75:e4:d2:4e:41:71:f4:d8:32:e2:ea:6e:60:08:33:
18:69:ed:73:cf:a4:3a:67:5e:f5:5e:06:4b:e5:f5:10:67:33:
15:57:b8:dc:79:5e:a8:96:87:ce:64:0b:1c:5a:ad:61:69:bd:
fd:c9:2e:c3:dd:71:80:1e:1d:16:49:c3:c5:b0:82:c0:9b:fb:
34:98:c3:6d:f4:a3:b8:1c:6b:85:7f:2d:42:a3:31:61:0b:3e:
8f:a0:6f:da:29:7d:65:79:10:e0:19:15:1a:45:47:87:7d:16:
a5:33:3f:b8:88:9b:cc:ae:17:88:ba:86:32:64:2b:5c:f1:33:
0a:e9:48:bc:a1:46:bd:9a:64:8b:90:d6:a3:97:67:9c:d6:af:
57:95:27:e1:9a:6d:d1:22:e7:0e:88:95:d7:ff:cd:50:e7:5c:
06:38:6d:dc:75:bb:af:68:1b:a0:65:b4:d1:2d:ea:aa:ea:b3:
de:52:7d:1d:41:b3:13:f6:01:78:3c:ed:e1:e4:80:7a:df:2c:
2f:bb:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org