Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/1-Pg6HLL_C0mXnj6MDpmAWl81I7k.roa
File: 1-Pg6HLL_C0mXnj6MDpmAWl81I7k.roa (raw, json)
Hash identifier: d0/9BX5TU32XFhxDt29uz5KzwelJLQ8NCyapHmfRvdw=
Subject key identifier: F8:F8:3A:1C:B2:FF:0B:49:97:9E:3E:8C:0E:99:80:5A:5F:35:23:B9
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01856DC1A150F4E82B81784BFE1398AD6A2A
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/1-Pg6HLL_C0mXnj6MDpmAWl81I7k.roa
Signing time: Sun 01 Jan 2023 14:34:44 +0000
ROA not before: Sun 01 Jan 2023 14:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 132.76.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Wed 05 Apr 2023 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a1:50:f4:e8:2b:81:78:4b:fe:13:98:ad:6a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jan 1 14:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f83a1cb2ff0b49979e3e8c0e99805a5f3523b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:96:52:32:13:a4:dc:68:00:97:2e:d0:63:
53:c1:92:0d:6e:df:69:93:07:d1:9a:5b:0a:ad:f9:
44:aa:2f:13:bf:cc:ca:de:e2:1a:de:54:ea:22:5d:
14:ca:dd:42:5b:85:2d:f5:5e:97:80:c5:49:9f:25:
ab:83:11:93:22:47:ef:6e:2f:3d:e2:ca:76:23:ae:
df:7d:7e:c7:b7:12:99:e2:97:97:87:fa:46:fb:84:
7d:16:3f:ca:01:2b:1d:a8:39:5b:cb:c8:df:c0:c6:
fa:72:68:5b:4b:d1:6a:8d:6a:4f:3d:31:27:d6:fe:
bd:da:51:29:2d:4b:b1:38:0f:1c:e1:9d:2e:3b:e1:
25:69:4d:8a:a8:fb:d1:2b:c4:c4:87:26:1e:62:51:
75:48:20:90:36:3a:96:d3:a6:e3:fa:f9:c1:d4:6e:
54:bd:93:48:2a:54:06:4c:7f:02:61:e2:38:9d:77:
d1:03:4d:9f:b0:3c:05:2a:68:4b:29:b4:28:e9:d5:
7b:f4:06:ce:df:7d:a4:ef:bd:1c:02:88:18:66:ab:
1c:be:a8:b2:23:98:4e:c7:af:44:42:cc:0f:5a:67:
c0:ff:12:38:13:8d:f8:43:bf:6a:05:42:81:94:30:
02:d1:cd:56:55:11:ce:36:07:e7:23:48:21:72:9b:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:3A:1C:B2:FF:0B:49:97:9E:3E:8C:0E:99:80:5A:5F:35:23:B9
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/1-Pg6HLL_C0mXnj6MDpmAWl81I7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3a:78:b7:34:17:44:76:eb:8c:8a:64:26:9e:91:ba:38:d4:a5:
f6:10:9a:e9:66:ce:d7:31:87:af:2a:d7:98:25:4c:e7:84:90:
e8:f5:bc:84:1e:8b:4c:b6:bf:53:94:34:f2:f9:72:fb:b1:aa:
cf:1f:42:95:f2:b7:67:69:39:49:d7:e8:0b:9c:bf:c2:8c:ec:
bf:aa:a6:8c:55:1e:e7:3b:91:31:6e:0c:f0:af:70:0d:aa:7c:
9d:84:e5:01:00:5a:42:0d:05:67:76:4e:7f:43:5c:6f:fa:82:
68:11:ac:b0:e8:44:23:57:fc:7b:4c:8d:ec:98:a7:5f:7b:e2:
d4:5e:34:df:24:20:be:3c:d8:0c:c3:23:d9:b1:6e:fc:ef:06:
e0:f1:10:5c:ef:9b:e6:0a:0e:59:b1:3e:d0:08:ff:d7:21:10:
bd:6d:6c:3b:2f:26:ad:3d:c0:c7:2f:6a:e9:e0:97:bb:28:8c:
8e:8a:d5:ea:50:bc:75:ed:ce:3f:d9:28:1a:d6:9b:18:4e:0d:
cb:18:fa:a3:6e:22:5d:90:2b:8c:38:6c:0e:72:c5:56:fe:86:
80:a5:e9:bd:7d:93:ad:10:e7:c9:27:c7:ae:b0:a3:ef:37:87:
0a:d5:7f:e6:fe:24:30:d1:10:a2:61:aa:ee:a4:c1:8c:03:be:
e5:93:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:05 2024 by rpki-client on console-ams.rpki-client.org