Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/U49GQoSi9D9yPP7Mbymu1tEACNs.roa
File: U49GQoSi9D9yPP7Mbymu1tEACNs.roa (raw, json)
Hash identifier: 51S59zh3pGAFmQgy9QfcGVpAluhyQckkImLljoVweWA=
Subject key identifier: 53:8F:46:42:84:A2:F4:3F:72:3C:FE:CC:6F:29:AE:D6:D1:00:08:DB
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0185704BF7A9D2AB48D28360E9725A93252B
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/U49GQoSi9D9yPP7Mbymu1tEACNs.roa
Signing time: Mon 02 Jan 2023 02:25:04 +0000
ROA not before: Mon 02 Jan 2023 02:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61358
IP address blocks: 176.113.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:f7:a9:d2:ab:48:d2:83:60:e9:72:5a:93:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Jan 2 02:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=538f464284a2f43f723cfecc6f29aed6d10008db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:8b:37:0f:45:b2:63:48:13:29:2d:15:a7:
fc:4f:4e:98:fb:eb:ad:10:0e:bc:c4:4b:59:5e:b4:
e4:b6:a9:20:fa:01:d3:e9:19:9a:c6:56:79:db:f7:
4e:ad:ee:f5:29:1d:44:49:26:17:74:18:50:22:6c:
88:12:68:ab:8a:e9:be:b3:73:16:a7:f9:48:09:6a:
9d:92:5f:9b:e7:61:a2:72:ba:84:d7:19:c5:77:78:
6a:86:70:e0:b2:4b:2f:4d:21:58:bf:b1:21:ef:f5:
c1:2a:29:c8:91:14:11:05:a1:02:c5:c0:83:33:56:
d2:94:46:b0:53:f1:25:18:a2:80:09:11:7a:f4:7a:
10:c6:b2:d0:d2:6b:2f:fc:96:bc:e7:2e:c5:96:b8:
3a:60:2d:23:59:06:7c:95:db:ff:07:d0:af:f3:0d:
72:c8:0c:c2:6d:dd:05:51:d1:cf:29:94:32:64:5b:
80:bc:4e:5a:f0:59:fd:82:44:49:f7:7b:28:be:7f:
45:f1:06:f0:4a:00:83:98:52:11:70:a9:03:09:0c:
be:09:3d:5c:bf:f9:85:47:d7:2a:2d:ce:0f:09:de:
a2:cc:46:c6:ad:41:2f:b4:cb:9b:d4:21:67:be:5c:
d8:1c:a8:e2:a8:a7:7f:c2:a0:7c:d9:e7:17:d2:15:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:46:42:84:A2:F4:3F:72:3C:FE:CC:6F:29:AE:D6:D1:00:08:DB
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/U49GQoSi9D9yPP7Mbymu1tEACNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:99:25:85:9a:c2:e0:ed:97:90:2e:3f:c5:88:e8:88:75:81:
4f:60:ea:73:87:9d:f9:77:e6:70:74:5f:7b:70:93:fa:74:e7:
7b:d9:13:d7:a4:3b:3d:43:71:07:ff:40:9a:ea:49:8d:88:38:
eb:7b:4a:07:5f:93:bb:d0:fb:73:9f:f4:50:3e:77:d4:59:c2:
26:07:72:20:3e:3d:14:2d:d5:94:1a:27:9e:3b:ea:e7:a1:01:
bd:bf:b5:4f:ca:c9:ad:1f:e6:40:dd:fa:7d:88:76:57:d9:f6:
97:b8:10:47:41:f8:3c:71:9c:8d:0c:a1:38:7a:0a:75:4f:b8:
9f:9d:00:29:3a:6a:7d:6b:61:f0:05:d3:9b:8d:b3:4d:49:39:
2e:9d:ad:61:e7:17:ca:ec:a5:6b:1c:ea:bf:05:fa:52:fe:77:
d9:30:ca:18:c8:3c:4e:cf:7a:9a:02:e1:2e:f7:b1:5f:88:fb:
fa:fe:2d:f0:58:5b:36:79:d6:12:a6:90:82:c0:d3:ba:7a:0f:
b2:fe:5a:42:03:48:2e:f5:3b:a9:68:4f:c0:85:c6:05:68:c1:
6a:e4:69:c5:66:a2:49:12:a3:80:70:84:bd:26:ac:42:1c:aa:
03:77:01:1d:46:46:37:da:75:18:ca:2c:a0:92:f4:e2:d5:77:
96:17:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org