Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/t_Oq7DPRltYNOqPaGdW0e9xYBpQ.roa
File: t_Oq7DPRltYNOqPaGdW0e9xYBpQ.roa (raw, json)
Hash identifier: 1WMME0deMChNghwc32rrR3SGPoWTk9ztSDf0Z4U1Py4=
Subject key identifier: B7:F3:AA:EC:33:D1:96:D6:0D:3A:A3:DA:19:D5:B4:7B:DC:58:06:94
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 018636FB0E405268A4661EF5E09CAB9F5152
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/t_Oq7DPRltYNOqPaGdW0e9xYBpQ.roa
Signing time: Thu 09 Feb 2023 16:21:08 +0000
ROA not before: Thu 09 Feb 2023 16:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.167.204.0/24 maxlen: 24
185.167.205.0/24 maxlen: 24
185.167.206.0/24 maxlen: 24
2a0b:b600::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:fb:0e:40:52:68:a4:66:1e:f5:e0:9c:ab:9f:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Feb 9 16:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f3aaec33d196d60d3aa3da19d5b47bdc580694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:3f:e9:7b:db:a9:37:71:70:82:83:42:7d:
42:39:31:cf:3f:78:52:fb:6d:b1:73:fa:80:88:e2:
dc:37:3e:ac:46:ed:b0:5a:bc:f7:7a:ec:e1:05:ed:
a6:f4:8a:01:f1:d8:cc:de:49:a5:0d:a9:51:7c:2a:
af:0e:f4:d9:4b:c7:7f:eb:19:c2:ff:7b:52:46:9b:
f0:66:a6:25:d9:97:41:0f:11:cc:87:07:3a:0d:f0:
68:2c:77:56:0c:b2:71:3e:3a:e2:29:8e:31:94:1c:
30:26:7d:db:d3:f3:10:b0:2f:6b:16:98:eb:f7:81:
31:d3:ba:71:d6:76:0a:59:1e:9a:9e:1f:42:88:45:
6b:df:37:da:f6:3e:76:30:f7:11:32:1b:f3:cd:32:
b3:05:33:08:e9:17:55:32:27:75:93:0f:10:a9:37:
05:37:7d:0d:10:9c:46:d8:b9:db:19:89:5c:65:99:
8c:47:dc:ed:72:47:dd:6f:58:4d:7d:60:18:58:5e:
fa:f6:e2:b7:52:9f:fc:5c:c7:62:20:10:f4:36:47:
a6:f7:a1:55:d9:b7:fb:5d:6f:8a:9a:6f:34:0d:0c:
4c:92:0b:3f:1f:24:07:6c:b4:f8:cd:8c:0e:cd:69:
43:b9:02:a2:53:20:7b:9d:dd:a0:44:07:29:bc:f7:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:AA:EC:33:D1:96:D6:0D:3A:A3:DA:19:D5:B4:7B:DC:58:06:94
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/t_Oq7DPRltYNOqPaGdW0e9xYBpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.204.0-185.167.206.255
IPv6:
2a0b:b600::/48
Signature Algorithm: sha256WithRSAEncryption
60:05:89:5e:de:b8:fa:87:ab:67:6c:17:55:e6:ff:80:5d:51:
3a:91:c5:3e:8b:1a:e2:c6:8e:7c:d8:f1:63:7a:fc:14:3c:46:
b5:1f:b1:77:6a:46:58:62:38:64:cf:34:de:4f:2b:87:7e:0d:
c8:68:ef:82:2f:8b:89:78:0e:0d:fe:03:a7:cb:1d:e2:38:4c:
20:a7:a3:23:46:14:cc:38:1f:8f:4d:18:d1:21:25:88:a8:f6:
02:3f:c1:ce:55:2e:a1:77:86:96:f9:d2:8c:1e:93:3e:e3:cc:
d1:67:87:56:b7:2b:e4:04:d6:ad:85:af:23:c3:43:9b:6b:65:
73:1d:e2:a4:4a:fb:c3:88:b6:12:04:db:5b:c3:8f:b0:4c:8f:
c7:a8:a0:49:d3:1c:1d:01:44:2f:12:8f:6e:eb:c4:b4:43:a2:
4d:a8:c6:bd:e5:d7:aa:bd:1e:00:00:d6:e4:dd:96:cd:91:6d:
56:0c:7b:06:a1:e0:08:2c:a3:11:f7:a2:1a:0e:f7:9a:01:36:
35:1b:3d:1e:33:ca:97:82:72:14:37:ed:03:23:94:e7:b1:1d:
6e:8d:09:a1:14:69:d5:50:0f:b0:6f:59:c5:01:49:ca:a7:26:
a0:5a:32:43:63:33:de:67:48:90:a2:e5:89:fa:39:3b:b4:86:
c0:a5:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org