Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/_CAs_e8fXqd953JBF3wYOzJGtrA.roa
File: _CAs_e8fXqd953JBF3wYOzJGtrA.roa (raw, json)
Hash identifier: OrYROPUvFDepDZaTVjVOtqEz2X48EeOb6JiHUUhNalY=
Subject key identifier: FC:20:2C:FD:EF:1F:5E:A7:7D:E7:72:41:17:7C:18:3B:32:46:B6:B0
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 01856DE651E22DE89628A240A81FBEEDC40F
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/_CAs_e8fXqd953JBF3wYOzJGtrA.roa
Signing time: Sun 01 Jan 2023 15:14:48 +0000
ROA not before: Sun 01 Jan 2023 15:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57712
IP address blocks: 176.106.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:51:e2:2d:e8:96:28:a2:40:a8:1f:be:ed:c4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Jan 1 15:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc202cfdef1f5ea77de77241177c183b3246b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:f5:29:72:77:d9:31:f1:5f:49:94:20:cd:
0a:ef:99:58:de:5d:46:80:72:4e:de:c5:12:90:3d:
62:28:1f:f4:2d:a8:ad:7d:36:1c:e1:b0:07:59:b0:
89:82:a2:ce:74:55:13:83:f1:70:19:f0:f9:08:af:
ec:c3:14:e9:dc:58:3e:ba:0b:b8:85:22:f5:9d:9c:
1e:fa:76:8d:9c:df:30:2b:41:47:21:c5:ce:b4:74:
64:97:7c:f1:e4:a8:8f:94:4e:dd:9e:20:c0:92:40:
0f:5f:53:cb:80:4a:46:30:3c:14:0a:12:ee:61:88:
3f:fe:df:24:ce:0b:9b:84:6d:76:87:3f:c7:cd:2f:
83:d1:90:bf:a0:cd:c8:1a:23:b1:a8:a2:b1:0d:fa:
f5:81:5f:67:db:da:8e:09:bc:63:66:01:41:0b:41:
9a:61:66:e2:ad:10:d1:21:9f:a1:ce:67:0c:ba:28:
a2:60:7b:34:61:16:9f:75:1e:d4:aa:10:92:58:0e:
84:48:1a:a6:66:ac:15:16:dc:1b:3a:84:0f:69:02:
b4:e0:20:63:92:5b:d1:45:ac:67:2d:0f:1e:50:bb:
7a:89:87:01:e5:c4:77:59:4b:21:f1:27:7b:8c:99:
51:05:89:b1:e4:ee:21:db:8c:03:14:37:3d:bd:54:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:20:2C:FD:EF:1F:5E:A7:7D:E7:72:41:17:7C:18:3B:32:46:B6:B0
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/_CAs_e8fXqd953JBF3wYOzJGtrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:90:7d:d5:f1:d6:85:c4:db:31:73:ed:51:e6:df:bd:1a:e8:
90:3c:f2:fe:21:38:6b:44:59:71:3a:82:b5:69:73:fa:b2:f7:
16:ff:fd:b8:1e:42:2d:e0:f0:88:11:a1:e5:cd:63:c2:b2:95:
6a:04:c3:63:32:fd:d0:b3:22:1f:23:94:a2:17:0b:ad:cb:ce:
ca:a2:67:a3:80:e5:43:fd:26:de:0d:71:6d:a3:b7:1b:cb:b1:
b5:d5:42:e7:86:d7:b5:bb:31:a9:63:49:dc:43:fb:37:77:83:
f7:6e:62:ea:3e:7c:81:93:39:54:b1:54:c5:0f:6c:cc:59:1f:
92:c4:13:07:7d:e3:fb:aa:fc:e6:0f:09:8d:00:17:ed:b5:8c:
b0:d4:53:e2:86:c4:22:32:99:b7:f2:11:2f:7b:ce:d8:f4:30:
13:69:bd:80:5d:29:72:2e:e2:47:45:14:89:58:0b:f7:eb:00:
9a:db:a8:0b:3e:39:fb:08:c6:f7:fe:ff:be:a3:f5:da:71:41:
1b:0b:4d:41:cc:04:23:17:b9:4e:7a:8b:01:3d:16:df:c8:60:
95:aa:cc:6f:b4:38:71:1d:0d:73:47:fe:73:19:c1:c4:f1:b6:
de:21:0d:4b:7c:20:b0:58:81:87:5b:10:9a:ab:9d:17:62:26:
99:4f:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:36 2024 by rpki-client on console-fra.rpki-client.org