Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/ogHHkXxC7PmaF8ADBiaNAfBiV50.roa
File: ogHHkXxC7PmaF8ADBiaNAfBiV50.roa (raw, json)
Hash identifier: gf0Z3/36iOMmiGzBvQS4eZm0L/v+DeBzKdJmNOSaFLA=
Subject key identifier: A2:01:C7:91:7C:42:EC:F9:9A:17:C0:03:06:26:8D:01:F0:62:57:9D
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 018AF5FF4C4D2856BE2F4C0992D60B2374F2
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/ogHHkXxC7PmaF8ADBiaNAfBiV50.roa
Signing time: Tue 03 Oct 2023 14:44:23 +0000
ROA not before: Tue 03 Oct 2023 14:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.234.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 14:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:ff:4c:4d:28:56:be:2f:4c:09:92:d6:0b:23:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Oct 3 14:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a201c7917c42ecf99a17c00306268d01f062579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:86:9b:ba:b0:77:ba:d4:c8:23:ff:0b:b2:
27:4e:f2:79:a1:10:9c:2f:dd:62:da:04:44:64:77:
b1:55:ce:bf:8d:2a:61:e9:8b:62:7b:49:26:7b:12:
93:18:ff:43:43:21:a8:58:5a:be:81:6e:ea:17:4b:
a3:e3:bb:8c:3a:a4:51:a8:30:8a:ac:dd:31:fe:30:
ce:34:99:81:3d:4c:b0:e9:bd:aa:8d:8f:46:44:ea:
a6:1d:35:1d:d6:cd:f5:25:f0:29:5f:cb:e9:81:58:
d5:d3:ea:19:63:c2:1a:42:2e:7d:07:82:b8:49:51:
72:fe:3e:ba:80:85:52:dc:cb:87:1e:e6:51:59:0f:
f4:3f:0a:99:f0:6f:b9:65:b5:97:0f:7b:f6:4f:57:
f9:1a:52:e4:43:11:df:f2:25:98:56:37:bb:04:7c:
6e:f0:b8:da:19:f2:e2:1a:ca:ad:66:b0:28:89:3b:
65:1a:16:a9:10:32:b0:93:ed:55:7a:e0:71:b2:e7:
8d:06:d1:e9:05:44:11:dd:67:9f:00:e0:d2:22:48:
42:21:45:d1:a5:54:d9:27:56:6f:ef:a5:7f:39:44:
73:96:3b:0e:06:58:ae:f6:d8:f6:fc:3e:0f:48:b8:
6b:78:69:8e:db:3f:fd:6f:63:1a:22:40:17:20:e1:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:C7:91:7C:42:EC:F9:9A:17:C0:03:06:26:8D:01:F0:62:57:9D
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/ogHHkXxC7PmaF8ADBiaNAfBiV50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c0:33:ae:df:03:04:27:fa:8c:3a:be:3b:33:72:8e:c8:c7:
f1:84:7a:3d:6f:47:8c:7d:39:d5:fe:05:04:0f:0c:a1:6c:7b:
81:52:b2:49:e2:01:8c:b3:1f:18:a7:e4:ac:0a:14:93:84:85:
75:0d:94:db:41:ad:c4:66:c5:ce:05:31:c6:2b:c6:65:bf:eb:
02:c0:7c:34:b3:24:c1:d3:70:fd:03:8e:6a:8d:b5:3e:d9:fb:
61:e3:23:32:23:f5:2f:34:49:99:76:0d:42:e9:8b:09:76:82:
cf:b6:39:51:60:f5:fb:d8:3c:0f:a3:0e:61:5c:2e:b2:fe:cd:
7f:a9:60:9f:93:17:62:45:b3:ee:41:2f:f1:77:3c:ca:2d:8d:
85:ba:0c:a8:13:cf:a4:f7:b4:82:d0:70:5b:b4:c5:0f:7b:39:
c8:df:4b:ca:88:11:d9:f0:f5:43:c7:a0:6d:af:ad:0d:32:fe:
ec:08:cc:95:61:be:86:92:91:d1:16:e5:f1:d3:7f:b8:a2:dc:
16:bd:22:d4:da:df:8c:88:0f:eb:e2:0d:cd:c0:19:28:24:84:
9d:41:46:64:40:36:6d:d5:2a:ec:1c:6e:30:3c:2e:85:73:46:
8e:d7:0f:90:ea:0d:5e:80:08:1f:cd:ca:0e:44:05:b9:df:1b:
f5:20:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:33 2024 by rpki-client on console-ams.rpki-client.org