Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fTRrzpuBR0a4YnBaXmRiKD22Lv0.roa
File: fTRrzpuBR0a4YnBaXmRiKD22Lv0.roa (raw, json)
Hash identifier: y2ri/JDMbrwwycPVZz04+2KN6xOVUgyzFWIgXsPpKik=
Subject key identifier: 7D:34:6B:CE:9B:81:47:46:B8:62:70:5A:5E:64:62:28:3D:B6:2E:FD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3D5668DCCF7B39D56430F61102A5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fTRrzpuBR0a4YnBaXmRiKD22Lv0.roa
Signing time: Mon 02 Jan 2023 05:55:05 +0000
ROA not before: Mon 02 Jan 2023 05:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209592
IP address blocks: 176.118.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3d:56:68:dc:cf:7b:39:d5:64:30:f6:11:02:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d346bce9b814746b862705a5e6462283db62efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:06:5a:87:08:d0:0a:50:bb:c1:fd:ba:ca:
48:ac:a1:27:d6:45:5d:d6:22:6f:5c:cd:44:70:df:
bd:8f:63:81:a9:32:ee:99:b6:85:10:d3:18:60:68:
a5:24:97:c1:4d:7c:74:29:f6:05:66:8f:74:57:e3:
06:fc:bf:da:2f:00:69:0d:2e:20:ed:c7:b1:5f:3b:
2d:0d:16:41:73:ef:50:23:c7:04:fa:44:33:c3:22:
0d:98:7a:ed:f7:ea:2d:5f:77:ff:29:3f:b3:b9:d1:
0f:0c:01:32:4a:0a:12:e1:70:68:3f:c3:45:00:79:
44:c9:c0:44:ba:f7:3a:ab:2e:9a:d8:fc:74:1c:39:
89:e0:37:c6:38:a9:84:e7:aa:ce:ae:d3:d9:2b:dc:
22:f8:b4:02:33:12:62:e2:cb:42:ec:89:6a:1b:94:
88:d3:23:c6:99:ee:da:61:70:77:6d:e3:2c:29:9d:
bc:1b:da:82:da:76:3f:54:f2:24:cc:58:85:0f:d6:
b3:ed:bf:42:14:05:37:a1:dd:bb:03:d4:4e:64:44:
a8:b4:d6:5e:1b:38:ea:12:b4:d4:f3:30:f6:11:84:
9c:a0:93:13:46:20:76:2d:56:47:22:99:2a:3a:e1:
ed:ca:ea:7b:cf:4a:07:b8:b9:68:d4:27:f7:10:eb:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:6B:CE:9B:81:47:46:B8:62:70:5A:5E:64:62:28:3D:B6:2E:FD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fTRrzpuBR0a4YnBaXmRiKD22Lv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.197.0/24
Signature Algorithm: sha256WithRSAEncryption
94:04:dd:ae:d9:b6:9e:70:92:33:64:a0:d3:34:0e:47:f7:c2:
2d:ba:5a:d0:5c:42:1c:f2:95:e3:d2:4f:1b:06:66:a0:5e:8a:
73:7b:fe:be:b0:81:bc:e2:e8:c2:6f:71:0d:a9:2a:5e:dd:a2:
88:16:79:d0:c9:c0:5a:12:71:11:e9:73:93:a6:47:a0:e4:1d:
b1:5a:b0:22:9a:b5:eb:7d:88:21:17:d7:36:d4:59:b0:75:54:
44:78:3c:dd:4c:cb:29:4f:2b:fb:10:11:9f:14:32:ea:56:3a:
de:99:b9:bc:b7:e9:bd:04:53:85:d4:3a:09:d3:e4:0a:eb:64:
4b:5a:83:46:c6:29:1d:62:a7:ec:4b:cb:e1:3c:f2:11:f0:0f:
eb:ce:f9:2e:55:8c:79:5f:1d:33:53:4b:27:38:4a:4d:7a:ec:
b6:e2:8b:f0:bc:ad:c9:66:e5:95:e6:d4:d2:6f:16:d4:03:b7:
1f:56:04:5a:9b:55:d7:af:e6:a6:d0:76:97:90:bb:6a:e2:c4:
77:ef:63:cd:69:16:3c:28:5b:1e:be:e5:89:24:30:50:e8:c4:
10:2a:28:85:f7:28:de:c2:9a:38:f5:d2:81:52:71:dc:2f:a8:
3e:fc:ca:7c:02:c1:29:86:90:ba:5b:59:21:0d:89:6a:a5:f9:
38:06:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org