Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/Tph6fsFQnax3KLgS2Bqfder-FX8.roa
File: Tph6fsFQnax3KLgS2Bqfder-FX8.roa (raw, json)
Hash identifier: rNs82PbsbJc16NTJkhOIJXYhhetEqmVJBAQzJ15TLMc=
Subject key identifier: 4E:98:7A:7E:C1:50:9D:AC:77:28:B8:12:D8:1A:9F:75:EA:FE:15:7F
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 018CC4931CA15B841ABA9F26B8B144CAA168
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/Tph6fsFQnax3KLgS2Bqfder-FX8.roa
Signing time: Mon 01 Jan 2024 10:30:24 +0000
ROA not before: Mon 01 Jan 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56571
IP address blocks: 176.10.79.0/24 maxlen: 24
185.191.41.0/24 maxlen: 24
185.191.40.0/24 maxlen: 24
185.191.40.0/22 maxlen: 22
185.191.42.0/24 maxlen: 24
185.191.43.0/24 maxlen: 24
176.10.64.0/20 maxlen: 20
176.10.64.0/24 maxlen: 24
176.10.69.0/24 maxlen: 24
176.10.70.0/24 maxlen: 24
176.10.67.0/24 maxlen: 24
176.10.68.0/24 maxlen: 24
176.10.65.0/24 maxlen: 24
176.10.66.0/24 maxlen: 24
176.10.71.0/24 maxlen: 24
176.10.76.0/24 maxlen: 24
176.10.77.0/24 maxlen: 24
176.10.74.0/24 maxlen: 24
176.10.75.0/24 maxlen: 24
176.10.72.0/24 maxlen: 24
176.10.73.0/24 maxlen: 24
176.10.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 16:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1c:a1:5b:84:1a:ba:9f:26:b8:b1:44:ca:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e987a7ec1509dac7728b812d81a9f75eafe157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:b8:ba:31:66:c0:d1:30:68:1e:2e:45:f0:
02:37:eb:e2:25:37:a0:47:1b:67:4f:13:2b:90:2a:
21:b6:45:49:2e:44:13:b2:a2:3d:1c:ed:70:1d:1c:
f8:24:89:65:a0:ff:20:0e:31:64:af:b8:bc:0d:7b:
a5:f5:5a:02:48:6d:42:1d:94:b7:cc:30:69:de:ac:
fa:37:d9:66:b3:22:26:ca:4d:ea:65:11:1d:d0:ac:
41:e4:b8:71:03:c5:03:ac:a4:bc:e9:76:96:69:c2:
c8:48:df:4c:38:cd:da:e7:64:26:a2:d0:28:82:07:
ff:09:82:47:f8:b0:be:fc:c9:9a:1f:f1:8a:db:f2:
68:98:0f:24:99:2d:fc:32:29:e0:c8:74:b0:8e:65:
bd:3e:64:58:aa:50:db:75:b0:9a:90:3a:21:0e:c0:
ec:f5:10:7b:b1:7a:5c:15:d7:1e:44:44:d4:a7:44:
1a:aa:dc:9b:01:47:2d:0c:cc:83:a7:89:24:aa:f2:
ca:d1:0b:a4:1f:18:4d:ff:e2:a6:3c:aa:51:0a:0d:
59:ac:52:77:2d:25:e3:2a:cf:c3:4f:01:6a:8f:73:
54:a4:86:71:e9:93:ba:8a:af:30:aa:25:44:51:39:
1f:55:2a:ca:ca:15:97:68:c9:94:2b:37:c0:91:cb:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:7A:7E:C1:50:9D:AC:77:28:B8:12:D8:1A:9F:75:EA:FE:15:7F
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/Tph6fsFQnax3KLgS2Bqfder-FX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.64.0/20
185.191.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:07:7a:6c:8e:ef:70:16:ec:47:e7:d6:57:92:de:d6:f3:e8:
f0:95:0e:2b:4c:71:c0:09:31:ce:34:27:d1:52:79:e0:b3:f2:
35:d9:6e:67:2a:f6:cc:44:20:9b:66:e8:09:d3:6d:0c:e8:58:
42:dd:f3:69:cf:ce:6e:9c:35:1a:c7:b7:85:b4:72:b9:1c:f6:
55:6b:15:41:a6:72:e0:50:0b:32:22:6d:bb:1f:8a:18:8a:4a:
aa:7f:52:89:42:c0:c1:88:00:5a:62:af:25:fc:88:ee:bb:80:
a5:21:08:0c:e9:44:87:9b:93:5a:90:f0:89:76:61:4a:61:1b:
a7:47:38:bf:39:50:6e:86:24:d7:dc:3f:de:f0:12:51:3f:7f:
f1:c7:33:4a:2d:74:d1:6a:0e:f3:49:86:09:cc:61:d6:af:3e:
c7:70:f8:3c:96:a1:54:4c:85:ee:06:ec:e9:38:15:ab:00:cb:
28:15:69:03:de:62:9c:a1:4e:58:b9:91:07:f2:e2:a8:c2:48:
ae:eb:32:10:8d:45:5a:f9:1b:62:f4:6c:2e:7c:63:13:be:30:
a9:7a:82:e4:ca:0f:2a:6d:34:45:bc:3a:fa:64:c3:26:87:ca:
a2:f6:1e:d4:2c:4c:ed:b6:d1:c7:22:ac:4d:5c:69:a1:99:55:
97:43:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 21:56:37 2024 by rpki-client on console.sobornost.net