Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/fK33ijwWLSH3SKOBdmaQkLkjZ80.roa
File: fK33ijwWLSH3SKOBdmaQkLkjZ80.roa (raw, json)
Hash identifier: rb7LN9V1X7mnPHers7KkKmrcOfoIVprs0F5oep0NEvg=
Subject key identifier: 7C:AD:F7:8A:3C:16:2D:21:F7:48:A3:81:76:66:90:90:B9:23:67:CD
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 01904A03FFA3E9B4075C64F5EB4346C295C0
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/fK33ijwWLSH3SKOBdmaQkLkjZ80.roa
Signing time: Mon 24 Jun 2024 11:31:34 +0000
ROA not before: Mon 24 Jun 2024 11:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204105
IP address blocks: 185.188.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 07:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:03:ff:a3:e9:b4:07:5c:64:f5:eb:43:46:c2:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Jun 24 11:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cadf78a3c162d21f748a38176669090b92367cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:2a:49:15:ce:7e:ba:f9:c5:d0:09:49:db:
f6:31:ff:b7:30:74:2e:ac:40:7e:75:52:f7:69:95:
2c:5a:40:2d:6d:a3:36:5b:9e:29:ff:6d:01:aa:21:
93:c0:50:a2:b2:00:f0:88:a3:a6:fb:28:86:63:60:
5c:69:a1:13:fb:94:f0:3b:5b:be:ce:9d:ba:34:3c:
4e:01:fa:2e:b1:f7:55:62:5b:10:4e:77:6f:56:e4:
62:47:c0:95:6d:92:ca:0b:57:2f:8a:bc:f2:43:c2:
8d:16:c1:8d:f5:82:05:b1:f7:ae:83:0c:75:84:19:
33:de:0f:6d:53:6a:a5:76:6c:e5:11:fc:e4:c1:14:
27:81:8d:95:bb:4b:66:76:76:1d:38:24:53:c3:53:
f0:eb:62:2d:4d:31:b9:63:0f:f3:04:dd:b1:0e:e7:
82:ab:32:b1:5c:88:d3:f0:6c:e5:6c:ee:06:a9:d3:
02:5b:f7:7b:37:39:c9:f1:2e:db:d2:a2:11:f1:b5:
8f:19:aa:cb:cc:f0:ba:d0:2b:ed:f1:0c:f0:12:27:
7e:1a:8e:7f:ef:75:bd:e0:b5:6f:92:a7:1d:a0:5d:
31:08:70:07:d6:d3:72:24:93:e7:40:27:94:d8:60:
ff:61:89:74:d7:8f:eb:35:e3:a8:00:60:74:46:4f:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:F7:8A:3C:16:2D:21:F7:48:A3:81:76:66:90:90:B9:23:67:CD
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/fK33ijwWLSH3SKOBdmaQkLkjZ80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:87:5b:c1:d8:b0:d8:59:ff:ac:92:21:f8:04:d2:a6:a4:bb:
2a:a1:07:db:9e:b1:a6:7b:f1:32:a7:7a:8b:6e:86:8c:30:e4:
f7:5d:1f:e4:78:88:cf:fa:08:ad:9a:b2:e3:99:76:04:68:5c:
dd:4a:1d:53:9e:b3:90:81:52:a7:3f:d0:49:02:57:66:3d:9d:
19:47:0e:85:39:fb:78:26:35:9b:f6:f4:56:1f:e8:d7:6f:e1:
e0:4b:95:1d:ba:0b:ed:6c:7f:95:55:e5:db:fa:b0:81:6b:1b:
97:b4:fc:83:09:27:48:15:0c:32:fa:e3:13:25:c2:84:e3:c4:
b1:23:c6:a9:3b:0f:9d:f7:5c:e2:12:d4:33:4f:ca:cc:28:b8:
f6:d3:4e:45:ef:e3:2a:83:be:a0:01:f7:cd:0d:f5:7a:7d:c4:
38:99:52:2d:d8:ef:19:b9:c6:41:54:52:58:a9:2e:34:bd:cc:
68:6b:04:a4:d6:5d:92:a9:ce:ea:6b:3e:d3:28:84:26:f6:57:
50:d2:5f:e0:88:23:20:20:18:79:8c:9b:c7:80:1e:27:1f:4b:
83:b6:d6:50:06:e6:3b:66:6e:1d:68:98:d4:f2:22:50:c8:7f:
9b:fd:e4:8b:71:3e:84:be:98:56:81:7d:c2:ab:f7:12:dd:6d:
52:95:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:07:55 2024 by rpki-client on console-fra.rpki-client.org