Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/RKAe0EL0wNgJOHpoKPPsD1AP6e0.roa
File: RKAe0EL0wNgJOHpoKPPsD1AP6e0.roa (raw, json)
Hash identifier: aEUL15Qd9jmLtF4mr99E8hGU74Y8BLBphBB8O63ctS0=
Subject key identifier: 44:A0:1E:D0:42:F4:C0:D8:09:38:7A:68:28:F3:EC:0F:50:0F:E9:ED
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0186E4BD28E9BCF431DBF38F51BE5DC4048D
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/RKAe0EL0wNgJOHpoKPPsD1AP6e0.roa
Signing time: Wed 15 Mar 2023 10:07:27 +0000
ROA not before: Wed 15 Mar 2023 10:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212616
IP address blocks: 176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Mar 2023 11:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:bd:28:e9:bc:f4:31:db:f3:8f:51:be:5d:c4:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Mar 15 10:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44a01ed042f4c0d809387a6828f3ec0f500fe9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:4a:ad:78:60:10:6a:ec:c0:cc:7f:53:c2:
8f:38:3c:83:c0:16:cc:f8:6f:53:bb:8e:e4:3f:61:
27:aa:ff:2f:df:49:3b:af:2d:22:6c:d3:ab:83:80:
4f:a2:26:df:fc:d8:83:7c:66:f4:5b:f4:90:f0:bd:
52:28:ea:1f:54:01:e8:77:f2:d0:15:35:c7:15:39:
6c:91:47:04:f2:c3:14:e6:84:91:44:4b:c5:ee:56:
19:fb:d9:36:02:fc:81:2d:98:6f:b3:3b:2d:f4:d6:
73:16:f4:a3:e4:95:73:e6:5d:e3:50:26:3e:eb:4a:
95:f0:3f:8f:4f:91:f2:67:1d:35:f2:64:6f:db:5f:
be:2d:24:55:24:d2:6c:38:98:b4:da:dd:f6:d7:4b:
03:36:db:dc:19:81:dc:5e:4e:bf:68:19:81:35:16:
9b:46:fa:e8:b2:6b:7c:09:73:47:d1:72:29:33:bb:
72:16:60:29:05:34:54:88:26:07:20:1f:67:3b:32:
0d:b7:82:4c:a5:71:57:dd:e9:92:dc:7c:68:0e:21:
98:ec:17:c2:ac:63:46:c2:d3:66:93:bd:c6:90:b3:
69:88:99:fa:ca:db:e3:6a:2d:7d:e5:67:ff:8b:1b:
bd:cc:2e:e3:4a:6c:c6:c1:07:0f:7d:78:53:52:10:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A0:1E:D0:42:F4:C0:D8:09:38:7A:68:28:F3:EC:0F:50:0F:E9:ED
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/RKAe0EL0wNgJOHpoKPPsD1AP6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
08:01:41:21:36:04:e2:8f:53:ab:0f:ac:41:fa:a2:88:3b:37:
5a:7c:f4:95:8c:0f:b9:e5:a0:bf:0c:e0:9d:b8:e9:b5:12:f7:
7c:c4:df:87:cc:6d:b2:87:dd:f8:aa:96:f8:67:f2:8e:23:30:
fe:49:be:4b:77:6f:13:3f:5d:68:5b:6b:ab:80:2a:6d:cb:ce:
4d:50:05:4b:53:66:88:b6:55:7b:b4:4f:7d:43:da:e0:a9:4e:
52:2c:68:c8:29:3b:e3:b3:28:22:de:a6:2f:91:c1:42:28:48:
ba:d2:97:46:31:c0:6e:42:8b:40:b8:d3:fd:21:5e:65:9d:03:
dc:d7:6b:0a:6d:a6:ba:ae:7e:71:40:aa:ea:f0:0a:30:9d:28:
87:b6:c4:34:0b:34:f7:18:05:e5:b7:fd:d5:b0:eb:55:e1:2b:
54:f4:23:00:0f:5a:24:59:f0:50:f7:0a:ba:03:2b:35:46:d4:
f6:6f:2e:0a:f0:9e:dd:7a:ea:b0:2c:73:36:e1:96:4a:f6:13:
8a:dd:90:0e:4a:51:b8:46:25:7e:9a:c1:d0:6e:c9:5f:38:e4:
a2:13:45:6a:b0:46:ec:80:67:d5:0c:0b:df:2e:a8:7c:09:cc:
09:f2:44:a9:75:f6:df:ce:77:15:6c:8d:6b:c0:bd:46:ac:cd:
ca:43:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org