Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/V8ORfIo38ftWKdQlV7Cmvf9D3zs.roa
File: V8ORfIo38ftWKdQlV7Cmvf9D3zs.roa (raw, json)
Hash identifier: TcQlvFFTyHzO8oVlGqstHu4izIo8mOtS+Lc2WCOUCmg=
Subject key identifier: 57:C3:91:7C:8A:37:F1:FB:56:29:D4:25:57:B0:A6:BD:FF:43:DF:3B
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018570B983627911A92484920C71C90D37EB
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/V8ORfIo38ftWKdQlV7Cmvf9D3zs.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12085
IP address blocks: 176.121.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:83:62:79:11:a9:24:84:92:0c:71:c9:0d:37:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57c3917c8a37f1fb5629d42557b0a6bdff43df3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:b4:a6:68:52:09:ed:74:8f:6f:8c:8e:83:
5d:ea:3a:89:7a:46:9a:f2:fc:92:94:42:48:aa:66:
0b:da:8a:73:ba:d3:c1:6e:b0:27:df:10:1f:f2:5b:
ac:51:15:8a:84:94:b9:0d:f8:e2:20:f5:e7:8e:33:
c8:10:66:ac:7e:8e:d5:3d:65:b6:71:a1:45:2a:14:
cd:93:65:32:d2:f8:ee:14:da:14:6a:55:b4:fa:a0:
22:7f:4a:9c:86:97:ea:a0:e5:49:57:14:0d:22:00:
3c:7a:01:b3:96:ab:e9:56:77:c8:c0:55:cb:14:63:
49:c6:1d:f4:18:6f:24:ba:a5:3e:bc:97:ca:13:67:
d8:fd:84:ce:a5:70:c8:76:9f:a9:af:da:21:39:cc:
a9:a5:20:35:ea:79:dc:34:e8:fc:19:33:9c:d0:b9:
95:6c:d3:da:4f:b6:dc:b2:93:d4:cd:70:71:78:78:
6c:a5:18:f2:5e:ad:e5:1a:3e:81:a7:2a:28:ec:39:
d1:7b:ef:86:94:85:2f:46:21:cd:b7:a4:9d:f0:43:
31:f0:83:bf:11:eb:c5:2f:44:2e:a3:28:09:ab:6c:
92:2c:ff:af:f7:8d:e8:5f:dc:d2:cc:fb:9b:d3:b6:
6f:af:5c:61:34:5f:6a:75:44:41:c0:98:8f:e9:4e:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:91:7C:8A:37:F1:FB:56:29:D4:25:57:B0:A6:BD:FF:43:DF:3B
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/V8ORfIo38ftWKdQlV7Cmvf9D3zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.88.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4b:0e:30:b6:61:09:ea:bd:cc:67:50:f8:cd:2e:28:80:26:
bb:4e:43:9a:bb:47:57:ad:99:8b:bf:ac:35:8a:dd:3d:ae:80:
0a:82:b8:fc:b2:32:65:f7:e4:67:88:77:5c:8b:2c:ad:ef:65:
eb:07:da:2d:e1:c8:4f:aa:c4:1b:5d:d8:10:70:53:f9:23:07:
b1:45:6a:20:85:e2:ed:13:59:31:e6:06:58:65:99:f4:43:9e:
e2:ac:e8:d2:7f:64:92:9b:7a:95:aa:d9:d9:c6:80:ba:80:ce:
de:e8:a9:f8:d2:9e:6a:bf:29:eb:79:8a:b6:d5:4d:50:a3:79:
5b:d1:8c:af:0d:b1:76:6e:a5:8f:c8:0a:c2:83:3d:07:6e:7b:
6f:3a:3a:62:d3:eb:39:c4:6b:52:87:f8:7f:4c:66:1b:88:01:
6b:bf:f3:43:55:25:1a:00:d7:34:be:b8:71:ce:e9:d4:34:3b:
c8:59:82:6e:85:7c:99:82:3e:82:67:2e:d9:11:9d:4d:f8:8e:
40:89:46:6b:c0:d0:4c:0b:c1:dd:38:71:53:6f:fc:4d:b5:59:
24:30:ce:60:cb:7d:5b:55:e4:1b:ed:82:92:32:fa:f8:02:1a:
be:19:22:ec:37:4a:46:ee:9f:69:25:37:31:5a:17:2d:e1:51:
a8:e5:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:59 2024 by rpki-client on console-fra.rpki-client.org