Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/s1PpqgqouS7oRAGIo1CkZ7fYAV4.roa
File: s1PpqgqouS7oRAGIo1CkZ7fYAV4.roa (raw, json)
Hash identifier: rMbv4cVwOnzyuuv/XdapGnZKv2uc67tFNM11ASrHiIg=
Subject key identifier: B3:53:E9:AA:0A:A8:B9:2E:E8:44:01:88:A3:50:A4:67:B7:D8:01:5E
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 01856CEF24397ACCBFA79280AB346E8ED17A
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/s1PpqgqouS7oRAGIo1CkZ7fYAV4.roa
Signing time: Sun 01 Jan 2023 10:44:49 +0000
ROA not before: Sun 01 Jan 2023 10:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206123
IP address blocks: 176.10.116.0/24 maxlen: 24
185.32.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:24:39:7a:cc:bf:a7:92:80:ab:34:6e:8e:d1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 1 10:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b353e9aa0aa8b92ee8440188a350a467b7d8015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:9b:c6:f6:82:4c:90:e3:be:19:d2:de:a4:
f9:fe:a8:2c:52:08:df:51:6e:e7:d3:7f:5d:11:21:
0c:55:f6:93:0e:bf:8e:bf:bd:77:6a:b3:75:3b:b0:
29:6b:fa:b2:e8:56:b4:c3:7d:2b:10:99:50:67:6a:
ba:f5:c4:8c:58:14:94:85:aa:35:2c:c9:15:2c:a5:
01:43:9a:c1:68:66:01:02:5b:71:1e:5a:ea:ab:2f:
d2:2a:a8:79:f8:06:7a:6c:8c:18:f9:4c:84:6c:97:
b2:ca:87:1d:aa:2f:ad:ac:be:83:51:bd:e3:e2:06:
d7:08:d9:15:70:86:62:5b:b9:81:70:a3:d4:b3:78:
4d:03:6d:08:c2:c7:01:e6:8b:75:00:24:01:1c:d0:
c1:0b:70:37:f8:b2:60:8b:f2:f6:2b:2d:87:2c:26:
1b:28:7f:12:4a:e4:dd:68:d1:3b:d2:b6:f3:b4:c7:
4d:7e:24:c2:81:d8:78:0e:40:ab:d9:36:22:dd:1e:
4d:9e:d0:52:ae:91:0e:50:9c:27:58:ca:5e:3a:47:
11:0b:0e:ba:25:ff:92:a0:18:6d:82:58:db:90:64:
47:7d:4e:99:19:9b:1a:cc:a3:e7:b5:83:ab:09:7e:
47:52:b0:27:f6:9f:8a:e5:0d:92:1f:5c:25:7a:0a:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:E9:AA:0A:A8:B9:2E:E8:44:01:88:A3:50:A4:67:B7:D8:01:5E
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/s1PpqgqouS7oRAGIo1CkZ7fYAV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.116.0/24
185.32.221.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9f:60:28:70:d4:2d:ab:23:5e:e3:a2:f3:a9:db:73:b7:79:
af:93:70:45:99:fb:ba:7f:77:90:ff:a8:5f:50:c0:75:2b:76:
20:7a:7a:32:94:fe:0e:64:78:a8:f8:67:88:d8:f7:49:7d:cc:
07:c7:3b:ee:dd:a7:30:ac:c2:65:56:f8:28:bd:c8:43:8d:e4:
a0:a8:08:0d:7f:68:fa:2c:a2:38:20:54:d2:0e:fe:e7:bc:53:
7a:17:87:d3:2b:26:aa:c9:8b:b9:a2:dd:7e:0f:f0:42:44:f0:
e1:a2:1f:b3:a4:e0:ae:7d:ac:6b:90:a5:3b:78:40:88:45:08:
28:1c:e1:c3:51:42:de:b1:0f:5d:6d:a9:4e:0c:86:7f:94:4e:
fd:7d:32:d7:05:67:72:22:30:d0:7b:41:fa:85:10:b5:53:60:
04:77:d1:28:b4:6a:e1:80:74:bb:b6:e2:5d:c4:06:d5:c1:80:
86:0b:0a:6b:9c:cf:bf:28:db:1c:07:7c:08:9e:d5:9c:e6:1d:
cf:6c:1e:5f:2f:83:bd:c5:37:51:fe:04:65:97:a9:38:0c:1c:
da:97:c3:a2:17:12:0e:86:c5:73:3e:56:2c:41:06:6d:c4:07:
14:45:6d:2b:60:ff:13:87:64:5f:3f:18:da:d7:95:3f:16:ab:
63:db:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:52 2024 by rpki-client on console-fra.rpki-client.org