Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/0FhzkfyykAS29seTa09HCYPr27c.roa
File: 0FhzkfyykAS29seTa09HCYPr27c.roa (raw, json)
Hash identifier: pPW+R6sv/NhSTsnscnBstGbrU2EwzxtxVS6OAmQX2pY=
Subject key identifier: D0:58:73:91:FC:B2:90:04:B6:F6:C7:93:6B:4F:47:09:83:EB:DB:B7
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 01940FC9EBFAB0729129068976E311567027
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/0FhzkfyykAS29seTa09HCYPr27c.roa
Signing time: Sun 29 Dec 2024 00:21:18 +0000
ROA not before: Sun 29 Dec 2024 00:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198360
IP address blocks: 176.103.216.0/23 maxlen: 23
176.103.216.0/24 maxlen: 24
176.103.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0f:c9:eb:fa:b0:72:91:29:06:89:76:e3:11:56:70:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Dec 29 00:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0587391fcb29004b6f6c7936b4f470983ebdbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:28:11:ca:8f:14:0a:af:7d:02:4a:12:05:
72:33:e2:80:80:20:f2:bb:8f:ca:2f:25:5b:00:80:
5a:b0:71:a4:80:d5:17:21:3e:ea:58:d6:69:9b:df:
44:a3:b6:0f:cd:de:b8:a6:bb:10:ea:1a:0d:de:e9:
77:49:9f:4f:9d:73:2f:33:60:d3:37:ab:e7:a1:dc:
a2:9a:8d:f8:1d:2e:07:8f:1d:8a:2f:83:99:40:43:
f9:bd:69:dd:dc:fc:b5:30:f1:e6:99:7d:fb:db:6c:
34:f3:4e:32:b6:9d:71:a2:3f:f9:3d:3f:1b:70:52:
2d:5d:c9:48:aa:38:b8:1a:fe:55:72:f9:b5:fe:55:
38:1c:bd:f7:c6:48:72:3e:fd:19:6f:79:e2:a2:b9:
a3:62:f8:d8:65:62:86:92:e3:51:d6:ab:88:44:42:
5a:a5:8d:c9:cf:01:e0:c2:57:a6:71:7b:91:d2:c8:
ad:b6:f1:a0:db:87:74:2e:bb:49:50:49:77:fb:18:
d7:65:6e:a5:f9:9c:db:fb:fe:df:f2:62:51:45:a6:
66:48:16:8a:41:3c:1a:b5:d5:41:c5:63:88:cc:b0:
08:0d:18:ca:d6:50:d5:5d:9a:2e:3c:9d:b4:65:50:
da:c1:18:d9:ae:5b:8c:f1:d4:d1:79:8f:8a:9f:48:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:73:91:FC:B2:90:04:B6:F6:C7:93:6B:4F:47:09:83:EB:DB:B7
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/0FhzkfyykAS29seTa09HCYPr27c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:98:c5:dd:b0:f3:7b:92:93:88:f8:0d:48:19:0a:f7:19:90:
03:bb:2e:33:69:27:cc:47:48:90:42:25:80:a5:4b:3f:92:f5:
9b:14:68:6b:23:ad:19:e9:b5:8f:7c:b1:1d:50:4e:7c:ca:b3:
bd:e6:b6:52:c9:ad:f2:a2:ad:60:76:ff:d8:2f:ad:17:7a:e4:
25:47:54:a3:52:63:e4:93:0a:3c:a5:26:90:97:c7:79:bf:f3:
37:1e:e6:42:b5:89:2a:6a:94:cc:c0:69:4d:0f:79:f1:7d:d1:
9b:6a:f0:fc:d8:f9:fd:ac:73:56:45:89:af:b3:d4:bf:47:a4:
84:2a:01:dc:82:ca:00:b4:23:20:67:1f:02:7e:aa:64:ce:66:
21:fd:61:bb:51:ac:c0:09:1b:42:b9:e1:b3:be:ad:3b:de:bf:
33:51:a3:a3:e1:db:71:50:47:a6:3b:cb:a8:46:01:d4:ad:60:
6f:3e:99:91:8a:ca:31:9c:a0:b3:ac:3e:b2:01:01:c5:19:4f:
42:10:82:af:33:e1:aa:f9:d2:d4:4d:bb:45:57:dc:73:20:35:
d7:d0:82:cc:06:e1:2c:b2:27:aa:7d:2a:f1:36:77:23:7c:32:
65:e0:40:46:f5:4d:e7:cc:fe:01:ba:31:95:af:18:06:c9:43:
3d:ff:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:40:46 2025 by rpki-client