Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/f10fP8x3Uskq1a8_BWJN8WY-eos.roa
File: f10fP8x3Uskq1a8_BWJN8WY-eos.roa (raw, json)
Hash identifier: A0Y0K6ftD02UDIjoJsUVFT10CLPzUE2nPprZYOTwJY0=
Subject key identifier: 7F:5D:1F:3F:CC:77:52:C9:2A:D5:AF:3F:05:62:4D:F1:66:3E:7A:8B
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 018CC349297FFFE3119674957659DC170744
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/f10fP8x3Uskq1a8_BWJN8WY-eos.roa
Signing time: Mon 01 Jan 2024 04:30:01 +0000
ROA not before: Mon 01 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204770
IP address blocks: 185.8.106.0/23 maxlen: 32
2a02:ae02::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 17 Jan 2024 10:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:29:7f:ff:e3:11:96:74:95:76:59:dc:17:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5d1f3fcc7752c92ad5af3f05624df1663e7a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:1d:ec:d0:fc:c3:a0:b9:81:3d:1d:d3:fe:
f8:ca:e6:2f:5f:d9:47:1b:3a:fe:bc:36:d2:29:f0:
b8:c7:5f:92:b6:17:9d:3f:af:34:6c:ac:ed:09:5f:
4b:f9:93:34:b5:65:66:d2:ed:1f:9f:f4:33:54:61:
ab:0f:75:db:69:22:9c:ca:1e:cb:5a:84:90:e2:16:
ba:cb:ba:b6:fd:54:26:28:79:00:fa:c7:7f:22:0c:
56:1f:f1:15:8b:6d:5c:b3:a0:e2:42:38:f6:8e:2f:
99:c0:6d:32:5d:b8:b9:5f:7b:ec:28:0d:79:fe:15:
04:61:88:93:c6:c8:8e:1e:75:0f:20:6f:4f:38:1f:
b3:eb:f6:f8:d2:72:d0:78:24:a9:97:1c:ff:8d:d8:
c1:a2:e2:2c:99:0c:d5:7d:40:87:b6:a6:18:7b:a1:
9c:b0:27:ff:19:3c:58:da:a7:ca:93:b9:25:a3:46:
83:29:6e:bf:4c:d1:35:07:a4:b6:42:11:60:8f:22:
c6:35:1b:89:04:97:37:bf:a5:ff:ee:69:78:57:62:
0f:a2:f8:11:0b:fe:b3:3b:c5:93:b6:8d:6d:16:af:
b0:3b:21:1c:26:2a:94:32:ee:7b:99:d4:7b:bf:93:
ef:67:f8:f2:5f:cf:87:5f:a4:7a:c2:f7:10:cf:17:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:1F:3F:CC:77:52:C9:2A:D5:AF:3F:05:62:4D:F1:66:3E:7A:8B
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/f10fP8x3Uskq1a8_BWJN8WY-eos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.106.0/23
IPv6:
2a02:ae02::/36
Signature Algorithm: sha256WithRSAEncryption
73:ce:db:42:a7:03:28:2d:33:3a:bd:72:d7:ee:a4:31:54:0a:
b5:40:dd:f2:fe:ef:9d:7d:de:36:02:ea:aa:d0:24:75:2c:47:
3f:f4:b4:70:43:36:45:53:c7:f2:9b:63:f2:ce:03:ca:0c:26:
93:cc:e8:67:ae:61:50:ef:2a:69:5a:af:ef:ec:96:5b:dc:a8:
1c:0c:11:70:3c:75:65:36:45:ab:fd:c0:81:29:70:2f:f3:16:
1b:7a:4c:82:f1:f7:cb:a9:62:f4:42:1c:ec:d7:f2:40:1d:2e:
64:57:b3:e9:ad:56:6f:6f:e5:fe:d4:82:51:da:65:3b:99:22:
33:1d:24:79:51:dc:d7:be:a7:6f:97:a9:c8:f3:7d:23:d8:c8:
93:5e:e1:1e:fe:e3:2e:e3:43:cc:34:0e:4e:0a:54:1c:c7:20:
a1:7e:7e:44:71:cb:24:b8:5d:5e:34:aa:e7:e2:21:3a:40:6e:
4d:14:96:44:98:c1:98:81:45:7a:12:bf:f9:45:22:50:aa:22:
45:89:73:f6:6c:06:92:bd:5f:a7:11:98:e2:04:5b:68:61:95:
cf:15:36:db:21:16:4c:40:91:5e:a1:2a:7c:a8:58:a0:e3:9c:
fd:f3:92:ef:c4:1d:60:c0:e9:26:eb:b7:0a:86:09:90:e6:63:
07:cd:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:36 2024 by rpki-client on console-ams.rpki-client.org