Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/y4I8hJOTKtdwqEAUYCabqFpbJDI.roa
File: y4I8hJOTKtdwqEAUYCabqFpbJDI.roa (raw, json)
Hash identifier: BITaCxpVA3yJboSUQOLgKOmDxmVyHLDGJTByyMf38JM=
Subject key identifier: CB:82:3C:84:93:93:2A:D7:70:A8:40:14:60:26:9B:A8:5A:5B:24:32
Certificate issuer: /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial: 01856FC262D9BB9FEC248EC1208E4A66875A
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/y4I8hJOTKtdwqEAUYCabqFpbJDI.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 176.110.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:62:d9:bb:9f:ec:24:8e:c1:20:8e:4a:66:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb823c8493932ad770a8401460269ba85a5b2432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:6b:51:23:3d:2d:e2:24:ba:f8:5b:35:d2:
5f:d6:af:6d:1d:4d:ca:2d:5b:a0:63:5f:18:ff:d9:
63:0e:13:9b:6c:b9:36:82:af:9b:51:1b:e0:7e:fc:
51:9e:58:47:8c:d9:62:00:2b:e0:80:1a:43:74:65:
df:69:13:49:34:8c:f4:0f:a2:f2:59:a7:16:af:ad:
0e:36:15:ba:ae:11:c6:d0:c4:fb:1f:a6:57:7c:d4:
3b:f8:13:76:b1:e3:cc:8e:2a:1f:3f:9e:02:ac:33:
e0:3c:19:ca:62:ee:38:a9:1c:4a:99:26:03:9b:9f:
4a:0f:20:88:cd:03:79:98:98:20:2e:bf:cb:7a:22:
bb:ec:68:59:07:cf:05:fd:8b:45:92:5e:49:26:a5:
e6:a0:c7:52:e7:6d:d4:37:a0:d0:e7:bc:60:11:b5:
c4:92:72:af:51:25:22:d2:8b:61:21:67:0a:6f:0c:
31:c1:98:a7:70:e8:10:dd:cc:99:d2:a2:f0:15:65:
91:a5:f7:f0:14:e6:fb:04:cb:7a:65:a1:8f:cc:3a:
a6:90:2c:e8:67:d0:05:4c:3d:1a:df:b6:90:0c:35:
78:e5:57:44:68:b7:74:e1:c0:cd:9c:6d:29:ba:f9:
47:1f:97:6b:09:5c:dd:ec:25:b2:c3:83:95:83:7e:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:3C:84:93:93:2A:D7:70:A8:40:14:60:26:9B:A8:5A:5B:24:32
X509v3 Authority Key Identifier:
keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/y4I8hJOTKtdwqEAUYCabqFpbJDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ae:bc:92:8e:1b:43:43:86:b3:3c:2d:2c:b6:8d:04:06:99:
ee:1c:76:b8:fe:14:ce:22:b6:b7:e4:60:4a:9c:71:c6:97:3a:
a7:45:bb:0a:28:95:97:d4:1a:1c:46:bd:4f:29:1e:50:cc:e4:
bf:84:8b:78:e7:29:a8:6f:28:bc:ca:05:3d:37:84:b4:9b:9a:
3c:e6:e9:ce:0c:4d:44:a3:27:61:0d:b7:ec:50:30:ac:97:62:
47:16:e1:78:ca:66:67:67:bb:33:0a:78:43:ba:0e:07:6c:f9:
12:4c:2a:ec:0a:f9:91:be:0a:4a:60:2f:a2:48:c5:a7:dc:53:
71:07:3f:6a:fd:1c:d3:ab:5f:88:af:66:df:eb:48:bf:5d:e8:
10:05:af:38:a6:b6:e5:f0:ad:6b:0c:fe:19:02:b1:2e:0c:d4:
cd:8b:8d:7d:07:2b:dd:18:1a:f0:06:02:db:5d:3f:48:8f:62:
8f:9b:a1:61:6e:4e:66:73:a9:e2:68:d5:2d:cf:20:ee:04:3d:
f8:c9:01:93:03:76:b3:e3:55:9b:a6:ae:73:8a:53:c9:c2:da:
d0:bd:7e:9d:63:44:77:bd:71:9f:2e:d0:96:30:69:8d:c4:ab:
a9:98:1b:5d:a6:0e:2f:70:33:9a:e0:3b:25:60:48:52:b8:09:
a0:1b:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:05 2024 by rpki-client on console-ams.rpki-client.org