Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/l8ZerY7rPqEvskPmXlBOSWCNjwo.roa
File: l8ZerY7rPqEvskPmXlBOSWCNjwo.roa (raw, json)
Hash identifier: wL4F026Sim2oHPoP+iEk7SfZaCq1aWY/Bukjajo6pD0=
Subject key identifier: 97:C6:5E:AD:8E:EB:3E:A1:2F:B2:43:E6:5E:50:4E:49:60:8D:8F:0A
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785F24B7A6E629EB16FB8105484E6F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/l8ZerY7rPqEvskPmXlBOSWCNjwo.roa
Signing time: Sun 01 Jan 2023 08:35:05 +0000
ROA not before: Sun 01 Jan 2023 08:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 176.105.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 04:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5f:24:b7:a6:e6:29:eb:16:fb:81:05:48:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c65ead8eeb3ea12fb243e65e504e49608d8f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9d:ef:59:31:60:bd:b9:d8:5e:e8:ea:32:55:
9c:7a:ff:78:bd:76:a9:b2:33:e2:6e:35:de:a7:0d:
b0:28:df:08:00:e1:39:e0:62:f0:5c:8b:db:7f:79:
81:5a:93:c2:e8:13:20:4c:aa:33:a1:1e:6d:e7:79:
6d:0d:d1:b7:46:4d:cd:99:3b:ef:03:00:29:32:4a:
17:81:56:f8:ad:97:20:69:11:56:ba:10:5d:bf:be:
1a:51:d1:79:ec:02:44:d0:6d:7c:8f:fd:43:28:37:
b5:7b:19:33:63:1f:d9:b8:25:ca:f5:e9:3c:19:cf:
e6:09:07:91:86:3a:e6:0b:3d:9c:3f:47:3b:b9:2c:
64:f5:eb:67:ab:b3:f3:29:b6:df:af:48:5a:37:eb:
ec:b7:57:e3:dd:21:4d:d3:bb:a3:5a:a9:08:89:7c:
bf:a5:2b:2c:4d:d9:03:af:57:88:44:2d:ca:20:54:
9e:b7:7d:73:4c:f3:2c:80:8e:9a:17:1f:12:d7:9d:
e6:a9:e6:2a:67:1e:cf:f4:87:34:39:46:1a:72:ea:
61:a3:1c:82:38:76:fa:26:0f:b4:57:6a:73:88:b8:
c2:07:e8:1b:03:99:90:58:f4:bb:01:a4:e5:80:af:
78:5b:b6:f5:38:ae:cf:0e:f1:45:e0:39:a4:5a:75:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:5E:AD:8E:EB:3E:A1:2F:B2:43:E6:5E:50:4E:49:60:8D:8F:0A
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/l8ZerY7rPqEvskPmXlBOSWCNjwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7c:cd:40:98:d3:3a:e5:8e:d7:ff:54:26:4d:c8:27:64:da:
a6:71:e2:c5:fd:c8:4f:9f:d4:12:7b:9c:a5:75:66:e1:1a:59:
5c:4d:2e:43:7a:80:eb:de:cf:18:a6:a1:af:74:ca:1a:04:f8:
d8:6a:96:85:16:db:ce:c5:18:ef:8d:2b:f4:1a:95:de:6c:54:
18:81:e3:4e:dc:3e:15:00:a8:66:bd:60:c2:f3:d8:7b:8c:23:
6c:44:45:d4:96:41:2f:e0:ef:75:88:68:ce:d0:29:a9:4e:85:
b5:16:b6:7c:c3:78:4f:75:0c:70:de:7d:6c:ef:6d:93:ac:c4:
8e:70:b9:0d:ec:18:90:74:f6:1b:f2:36:0e:5e:81:a2:12:6b:
7a:9a:9d:bb:66:bc:b0:c7:f1:7e:09:74:68:94:73:08:80:60:
e9:90:a6:c0:89:54:c7:57:fd:6a:96:20:be:25:66:b7:c6:e7:
4b:59:be:39:39:c1:1b:ac:de:ca:86:01:be:6d:31:6f:5d:d1:
7f:20:67:3a:c2:77:bc:cd:c5:df:99:6b:13:2b:b8:09:26:a0:
1a:17:e0:16:33:88:76:81:27:6e:dd:c3:af:f6:c6:38:ae:e3:
a5:0a:22:ed:3e:d2:40:d5:54:c0:5f:33:86:63:10:30:17:75:
8d:8c:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org