Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R7KfE42lSAlc-YdBkrLHrwKPNpU.roa
File: R7KfE42lSAlc-YdBkrLHrwKPNpU.roa (raw, json)
Hash identifier: rN+ab3aXnJTqlLJwbWFioGdIOOAYJZZHowj0OpZMDYU=
Subject key identifier: 47:B2:9F:13:8D:A5:48:09:5C:F9:87:41:92:B2:C7:AF:02:8F:36:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018FE93EA552D92433DB9A6E6A1AFCC4BCB1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R7KfE42lSAlc-YdBkrLHrwKPNpU.roa
Signing time: Wed 05 Jun 2024 16:32:27 +0000
ROA not before: Wed 05 Jun 2024 16:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 176.125.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:3e:a5:52:d9:24:33:db:9a:6e:6a:1a:fc:c4:bc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 5 16:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b29f138da548095cf9874192b2c7af028f3695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:c1:5f:8c:a1:87:65:f2:08:48:9b:f2:2c:
4f:fd:cc:9a:c0:c1:ad:d1:da:60:ae:b3:a6:f5:c5:
4a:44:ce:f7:42:be:16:b1:75:66:9d:2d:af:27:ff:
da:89:51:14:23:5f:7f:08:f2:1c:1e:f7:1c:14:d6:
68:af:9d:d9:60:cc:c4:80:cc:74:2e:8b:04:c8:19:
1c:7b:9b:a4:d9:e8:ef:a4:21:6b:a2:e2:76:fe:3b:
3e:b9:cf:b0:5f:58:d7:9c:f6:4e:a0:33:62:09:3d:
9c:8f:84:8d:a8:8c:8a:0e:16:d8:e6:92:c9:0b:19:
81:d4:10:5a:d5:d0:50:5b:af:49:85:ff:58:06:33:
31:c7:5a:23:9e:80:a8:4e:a4:d5:7e:eb:8e:9c:06:
51:f4:f2:62:80:09:7a:de:7a:42:60:87:88:ec:7f:
cb:f5:f3:7f:a8:3c:30:12:48:eb:86:7d:7d:28:49:
0f:4e:f0:0d:58:cb:cb:6e:16:4f:a6:10:d8:77:e8:
28:5f:d3:43:7e:ad:f6:e9:3b:5c:62:a0:a7:66:49:
3c:36:98:64:19:e5:87:c3:08:fa:18:ff:7c:ae:0b:
ae:d7:ce:84:58:60:e3:10:6a:8c:9d:19:73:0e:da:
5f:fc:9f:c7:d9:48:f3:53:f9:c9:ef:94:5e:31:a3:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:9F:13:8D:A5:48:09:5C:F9:87:41:92:B2:C7:AF:02:8F:36:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R7KfE42lSAlc-YdBkrLHrwKPNpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
Signature Algorithm: sha256WithRSAEncryption
77:45:4c:c5:33:5b:b8:df:19:12:24:96:59:ac:81:74:30:31:
ef:e0:37:c9:83:58:a2:25:0c:f6:88:77:62:f5:e6:2b:0e:2e:
96:a0:c1:52:8e:c1:6a:e0:5d:af:a4:f5:ae:ce:15:dc:f7:d2:
2e:e3:a4:0f:d9:63:ff:05:8d:de:13:4d:c8:2a:f9:75:12:22:
d4:c7:d5:20:e8:bf:be:9d:62:c4:c5:40:07:91:95:66:9e:13:
bd:f2:e4:92:25:95:21:fb:a8:1c:5d:f7:12:c4:c2:3c:14:40:
4c:7d:87:a7:f6:58:3e:56:a1:52:7f:08:61:df:cd:9e:be:b2:
58:d3:27:8b:57:be:34:83:f3:26:7d:aa:f7:80:34:39:ad:53:
e2:be:5a:7e:93:1e:fc:99:b5:86:d6:a2:d4:b5:4e:7f:37:fd:
b1:3e:c2:47:e3:82:9d:88:21:08:bd:2b:a8:7f:e9:f5:43:aa:
c3:6c:61:1c:02:23:b9:1d:6e:de:d0:a0:3f:44:8f:fe:1e:7c:
cc:11:9c:74:de:86:1e:b0:bf:97:3c:68:d4:de:34:37:8f:48:
f7:0b:58:39:85:3f:58:d6:a0:a0:0a:90:e6:9b:ae:74:c5:bd:
a5:a4:bd:1f:5a:3a:81:29:ea:ca:8e:15:cb:88:6c:a9:66:ad:
62:7b:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:48 2024 by rpki-client on console-ams.rpki-client.org