Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/tk_e0CK9fuJUYTm7SzuDFNLevYY.roa
File: tk_e0CK9fuJUYTm7SzuDFNLevYY.roa (raw, json)
Hash identifier: 5g+nkDWYFLSB4ukwYg1kms9HEfnnYGg4CxLCU3cPyXg=
Subject key identifier: B6:4F:DE:D0:22:BD:7E:E2:54:61:39:BB:4B:3B:83:14:D2:DE:BD:86
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500B3CA0E91DF5F9039F7859BB47B69
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/tk_e0CK9fuJUYTm7SzuDFNLevYY.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200415
IP address blocks: 176.105.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 19:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b3:ca:0e:91:df:5f:90:39:f7:85:9b:b4:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b64fded022bd7ee2546139bb4b3b8314d2debd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:5e:95:c4:b3:f3:2f:63:32:f9:1a:ca:68:
89:71:e3:b0:2a:ee:4a:33:1c:f8:1e:2b:c7:41:35:
5c:a7:88:be:2e:20:28:64:9e:30:8b:b5:92:83:3d:
40:2d:ef:36:80:b2:84:0c:55:94:ca:62:ac:15:74:
b1:3a:d6:22:81:64:26:2e:71:e6:18:9a:b5:dc:15:
2d:64:de:6d:0f:59:a2:a5:fb:4b:47:3f:e8:17:9f:
f3:6e:a3:df:63:91:b6:fc:92:49:2e:77:50:17:af:
33:00:53:be:09:89:9d:46:f2:d7:0c:ba:32:b4:a1:
e3:d2:fd:64:bc:bc:f9:c9:40:58:97:98:58:cf:c9:
53:89:41:69:18:e4:f2:97:87:60:87:1e:fd:2d:19:
76:da:a8:7a:e6:b8:a3:9a:35:f4:68:9b:2e:6d:7b:
2c:08:17:c8:e0:c0:2a:3c:73:90:f9:72:26:04:35:
d2:a3:81:e9:02:a3:9f:c4:bd:c1:7e:c0:5a:7e:5f:
10:66:a8:e4:f9:1e:3e:ef:37:4b:fe:4f:4d:63:44:
62:f4:26:4a:3c:b1:95:f9:13:89:f3:7e:a6:b6:ae:
b5:0d:52:78:3d:33:6e:69:98:03:7a:85:ee:7f:66:
84:11:36:75:e1:56:11:4a:e2:03:46:65:76:c8:75:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:DE:D0:22:BD:7E:E2:54:61:39:BB:4B:3B:83:14:D2:DE:BD:86
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/tk_e0CK9fuJUYTm7SzuDFNLevYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:fa:44:8f:c4:3f:b2:ea:36:f1:6c:2d:c8:f0:ce:de:4f:39:
98:31:9f:ca:57:f9:3d:32:b8:5e:79:d7:dc:0a:e9:91:29:64:
04:26:db:c1:48:07:56:98:e9:37:97:2e:57:d9:1e:14:07:62:
a2:8c:39:00:b9:ef:75:db:9e:9e:e3:d0:f0:97:bf:a6:a7:3e:
9f:a8:2b:a2:69:71:a5:6e:57:49:60:fa:e7:e1:80:73:38:36:
63:db:36:a9:f5:85:85:13:40:4e:49:37:13:5c:0d:c3:2d:d3:
22:46:0a:72:6e:8e:9a:1d:a9:4b:6c:75:35:24:2d:89:53:c9:
1c:96:e4:da:9d:95:ad:e8:41:29:7e:77:df:fb:91:36:19:62:
4b:68:a6:df:64:9f:4d:93:7e:f0:d4:9a:ef:00:f0:2e:60:ab:
c1:04:dc:d1:28:6b:ed:cc:07:c4:d9:e7:ad:b9:22:19:a8:b2:
31:c8:40:71:2f:4d:84:ac:6b:17:18:ee:03:16:76:e4:57:03:
46:47:e7:91:84:6f:2d:bc:22:ee:c3:fa:bf:f6:66:41:7e:b5:
b0:4f:a2:c2:a1:ba:6e:d1:16:4a:fb:90:25:c3:66:34:26:7a:
6a:a7:6f:47:8d:5f:96:11:93:be:1a:cb:66:f8:f4:2c:4e:b4:
78:de:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org