Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/_oqfixmakJ1xuKKrrE1RGbK48mM.roa
File: _oqfixmakJ1xuKKrrE1RGbK48mM.roa (raw, json)
Hash identifier: VUjgmjYBfj1MeMfw/eucARlcPg4xKM8N9b5ODTFjGHo=
Subject key identifier: FE:8A:9F:8B:19:9A:90:9D:71:B8:A2:AB:AC:4D:51:19:B2:B8:F2:63
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 019261D171AC14F76AF4274CC491EDD13160
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/_oqfixmakJ1xuKKrrE1RGbK48mM.roa
Signing time: Sun 06 Oct 2024 12:32:48 +0000
ROA not before: Sun 06 Oct 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 15:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:d1:71:ac:14:f7:6a:f4:27:4c:c4:91:ed:d1:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Oct 6 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8a9f8b199a909d71b8a2abac4d5119b2b8f263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:a1:0f:ad:f4:0a:43:9f:42:90:d3:44:b3:
3a:74:8c:a1:80:c1:d7:18:2e:7f:08:4c:9a:c1:a5:
18:b6:d3:11:0c:9e:63:f4:fa:a9:2c:57:9d:4f:f2:
02:79:56:a7:c8:a2:b1:b5:39:3c:6e:5f:6e:5e:f6:
54:50:47:03:4d:1d:9c:d0:47:81:6b:ab:29:fc:6e:
77:59:ab:cb:04:31:9c:36:66:73:62:d8:74:a5:68:
97:18:c3:3c:cc:7a:7d:04:13:54:d7:b3:db:8c:52:
00:9e:07:26:fb:c4:83:e2:51:84:68:60:6c:18:e4:
10:4f:fd:76:c7:f2:d6:71:e4:22:db:de:47:0c:8b:
10:e4:ee:67:e6:05:c7:b5:85:f5:62:9d:21:a3:8d:
34:5e:43:a6:07:17:fe:ea:8b:21:91:2e:27:72:c3:
77:39:f5:b1:da:31:7b:5a:e3:20:a3:59:07:e8:e7:
bd:ac:c0:8b:8f:61:d3:21:ec:81:d3:33:eb:e8:ad:
9b:b3:d6:9d:c6:67:8e:4b:df:2a:c7:3f:85:5f:c4:
7e:75:fb:ba:07:42:55:7c:b9:a6:ea:88:08:88:1a:
a9:8f:d5:3a:ae:cf:35:37:6c:21:f4:a5:77:25:53:
47:3b:46:51:e7:0a:bf:71:ea:46:5a:05:0b:54:20:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:9F:8B:19:9A:90:9D:71:B8:A2:AB:AC:4D:51:19:B2:B8:F2:63
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/_oqfixmakJ1xuKKrrE1RGbK48mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:ca:db:c0:6b:2b:86:9d:85:de:e3:f7:d4:9e:3f:b2:ef:
59:62:c4:00:e6:a4:ed:99:2c:38:fe:60:6b:42:04:da:61:16:
3d:02:f7:d0:d0:0b:22:95:d6:e5:cb:01:83:54:bb:22:a5:2c:
1f:9c:f7:61:6b:dc:78:41:d9:87:49:05:18:5c:8a:ea:10:3c:
38:d0:f8:13:d5:8b:60:fc:98:48:d8:e1:14:94:81:6c:87:d0:
47:85:13:83:fc:08:6d:0d:b5:de:28:61:21:82:85:03:84:c0:
fc:66:4d:4f:23:b9:9e:34:0a:02:7a:0c:89:69:32:1f:00:0d:
3b:16:1e:4a:b2:a3:14:26:78:62:04:3b:1d:63:6e:37:a5:42:
82:3a:f6:f4:6c:68:87:55:e3:c5:2b:eb:9a:cb:d3:b0:78:3c:
ef:c5:2c:f9:ae:14:c5:4f:46:19:3d:32:82:1c:76:61:ed:e5:
76:3b:ad:fc:ce:27:22:d3:40:d0:6b:d8:39:32:e9:51:c6:60:
26:fc:3a:c0:1f:5e:09:6a:e1:65:1a:3d:7d:3f:19:d0:6e:33:
50:b5:c5:46:b4:d6:47:72:ce:d8:20:6d:77:0c:06:58:0f:40:
30:f7:72:66:64:fd:ce:46:90:91:9a:0c:e9:09:b7:8e:76:2f:
a4:12:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 19:31:46 2024 by rpki-client on console-fra.rpki-client.org