Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/0nuiBqKmZpGuvNncldDfRIkhjZo.roa
File: 0nuiBqKmZpGuvNncldDfRIkhjZo.roa (raw, json)
Hash identifier: e8ACgLDdOt8LphdLXKYbLO87+lvVQs8tgAatktl/yTc=
Subject key identifier: D2:7B:A2:06:A2:A6:66:91:AE:BC:D9:DC:95:D0:DF:44:89:21:8D:9A
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0191E1DAF5098C99F994B6227F8EE9038FD2
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/0nuiBqKmZpGuvNncldDfRIkhjZo.roa
Signing time: Wed 11 Sep 2024 16:11:48 +0000
ROA not before: Wed 11 Sep 2024 16:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 185.162.178.0/24 maxlen: 24
185.162.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 08:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:da:f5:09:8c:99:f9:94:b6:22:7f:8e:e9:03:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Sep 11 16:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d27ba206a2a66691aebcd9dc95d0df4489218d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:85:36:40:88:54:24:0f:a0:30:ca:fe:d8:
9f:12:88:63:de:ab:a9:6a:75:07:a0:92:b4:cb:7e:
60:59:0b:f0:70:07:f0:44:86:9c:da:bb:e8:9f:07:
e8:5d:27:40:a4:24:83:9e:5e:dd:81:7a:83:3e:24:
55:da:86:ef:8b:b8:22:99:26:02:84:7b:c2:a4:e7:
70:6c:9c:fb:10:f2:ec:62:6a:d7:80:69:94:cd:21:
02:af:29:de:80:ee:fc:36:66:89:3a:c8:01:fd:3c:
71:6e:e2:e9:d8:f6:bc:64:4c:09:bd:47:55:c8:c2:
40:60:05:52:8f:97:2b:80:c9:17:2e:3a:3b:90:00:
ad:bd:02:e1:32:64:2a:c4:44:a1:53:76:6d:33:e5:
dd:f4:60:1e:5b:da:00:e4:04:dd:42:f4:9b:77:9d:
f5:18:c5:75:73:8a:de:b3:d9:0f:a2:74:9a:ac:92:
4f:ac:2e:89:2f:14:e0:a6:98:cf:c4:3e:52:32:f9:
0b:56:3f:60:b9:e5:72:6a:d2:8b:49:8e:73:08:97:
73:38:ff:b0:ad:67:d3:33:a2:c3:49:65:0c:3d:89:
56:a8:87:61:0f:9c:ae:c0:54:7a:50:44:b9:b5:9f:
1f:d7:f3:e8:1d:22:a2:34:55:af:e2:9f:bc:96:32:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:A2:06:A2:A6:66:91:AE:BC:D9:DC:95:D0:DF:44:89:21:8D:9A
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/0nuiBqKmZpGuvNncldDfRIkhjZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.178.0/23
Signature Algorithm: sha256WithRSAEncryption
75:9b:03:0f:62:17:b4:10:30:b6:f0:84:c4:84:04:99:ff:e3:
ce:11:8a:fa:7b:7d:8f:f6:4c:63:46:15:a6:b1:7f:7b:b7:a5:
20:a2:da:7c:5a:af:41:a1:28:86:28:97:8e:98:6c:1f:11:42:
34:a3:31:c3:3a:fc:ab:1d:20:c6:bf:80:d5:3f:65:be:0c:95:
81:45:19:96:16:c4:22:9b:14:10:14:ac:0b:16:a6:3b:ea:9d:
c4:43:0e:e3:78:4f:12:f9:10:2d:19:2c:dd:b5:b0:4f:8f:ca:
ad:59:80:1a:3c:13:0a:ea:5d:33:aa:53:22:f8:29:e3:6e:31:
ed:37:9c:b2:7c:23:03:80:fd:18:f3:c1:f8:1b:14:03:3a:79:
0c:e1:ff:be:dd:c8:e4:2c:9b:68:d1:41:fe:d4:81:a3:08:5e:
95:fb:e0:04:96:41:fb:32:26:9f:49:9c:ec:cb:80:5b:40:25:
7d:f6:47:8b:4c:7c:65:3c:b0:51:8e:a5:ce:d1:4a:43:61:64:
92:98:da:35:c0:ba:ed:59:5b:c4:26:71:9d:a6:1c:0a:46:4a:
df:ce:75:f7:c4:13:19:a3:88:aa:e1:ef:1f:ef:80:07:89:26:
e3:ba:fc:bc:df:28:6d:fd:7f:c9:0f:52:3c:67:5b:b7:3c:68:
e9:e9:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 10:56:32 2024 by rpki-client on console-fra.rpki-client.org