Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6FKObOHIsuFmd6fQkLDBK7OKqPI.roa
File: 6FKObOHIsuFmd6fQkLDBK7OKqPI.roa (raw, json)
Hash identifier: 7zv00Y0VDcScQgEj5uOzb+G+SPlBY37gqKLXZfJT44I=
Subject key identifier: E8:52:8E:6C:E1:C8:B2:E1:66:77:A7:D0:90:B0:C1:2B:B3:8A:A8:F2
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018C349C1AE5DF2B9190C11FC79D227F4F16
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6FKObOHIsuFmd6fQkLDBK7OKqPI.roa
Signing time: Mon 04 Dec 2023 11:34:54 +0000
ROA not before: Mon 04 Dec 2023 11:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216078
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:9c:1a:e5:df:2b:91:90:c1:1f:c7:9d:22:7f:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 4 11:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8528e6ce1c8b2e16677a7d090b0c12bb38aa8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:ba:b3:99:49:eb:5f:3b:94:61:fa:00:4a:
92:cd:d1:32:60:bb:3f:c4:24:42:51:36:d2:fd:da:
02:7d:54:31:75:85:fc:40:23:52:2a:41:36:64:51:
cf:35:20:44:d2:88:61:3b:0f:4f:6d:3a:36:e9:61:
11:6c:f1:fd:e0:fa:08:fd:e6:db:27:7f:b5:6a:ed:
b0:a8:84:d2:7a:a0:09:d4:71:e6:d4:b2:c3:aa:d0:
9c:da:b7:81:82:d3:a9:78:d7:00:83:83:aa:6c:e7:
85:03:7d:22:f1:21:71:f1:cc:db:1a:b9:08:e0:45:
66:2e:ae:d3:34:1c:a6:66:11:3e:2d:d5:4f:37:38:
2e:48:7e:f5:6b:68:31:f7:36:a5:04:af:a4:a7:8d:
c4:4e:1c:05:98:14:4f:46:e1:36:21:e5:83:37:97:
23:a1:2d:c0:d9:c4:5d:c7:a5:6d:1e:16:c7:6a:27:
d4:9a:92:b0:51:8b:49:74:58:f3:96:9d:ac:98:55:
d9:2c:16:3b:dd:9f:62:0b:9b:f5:38:a2:b5:74:c1:
34:b5:8e:ec:4d:35:57:31:61:17:2e:da:f3:d7:10:
bd:d9:fe:a8:62:38:de:d0:9d:18:5a:98:1e:9e:cb:
5c:81:b0:cc:31:c5:63:16:c6:62:ec:05:c5:5c:7b:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:52:8E:6C:E1:C8:B2:E1:66:77:A7:D0:90:B0:C1:2B:B3:8A:A8:F2
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6FKObOHIsuFmd6fQkLDBK7OKqPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
74:50:cb:41:68:cc:b0:62:6e:35:1d:73:ca:93:4d:0f:00:55:
53:fa:50:e2:13:1f:c2:d0:0c:ce:c1:25:61:2d:45:1c:96:4c:
b3:30:a1:79:2e:f3:72:f9:a3:4a:2b:62:00:72:32:ab:dc:07:
de:18:f0:94:1b:6a:ab:bb:bd:8c:1f:ad:1d:4a:6e:63:da:49:
24:b8:3d:df:e7:09:e1:7b:4c:a9:b8:c4:1a:26:0b:62:a4:8f:
5c:02:37:d7:f4:3d:af:b9:80:d2:fa:c1:49:66:2b:cb:7d:3b:
04:99:ed:75:5f:02:66:7f:27:58:a7:93:2e:59:ed:81:22:7c:
dd:34:b6:95:d1:17:cc:25:87:06:f9:1e:66:43:e3:bf:66:09:
ab:28:2f:42:92:01:73:30:4b:4a:b0:da:0c:fa:eb:e1:bc:47:
21:73:85:21:d0:04:60:04:c3:6a:23:06:df:bd:d4:fc:a9:cd:
88:82:9c:e3:07:82:34:28:4e:9d:ed:d6:11:a6:e5:de:5a:8b:
d0:af:47:24:cf:c7:e6:c8:de:8d:6d:7c:04:69:41:b7:62:01:
eb:78:99:5c:ad:29:c8:6b:09:f6:dc:99:cb:d8:15:21:81:06:
5f:d7:a0:2b:aa:35:c2:21:2a:ed:49:4e:54:e1:80:83:3e:4c:
85:ac:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 09:07:11 2023 by rpki-client on console-ams.rpki-client.org