Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/wI7eaUiUxA97oL_PqeFNVxwY80s.roa
File: wI7eaUiUxA97oL_PqeFNVxwY80s.roa (raw, json)
Hash identifier: zKyPYWLpLMMrG1eSzknXPVZ/qTWl5ZXr9cexZILaFNc=
Subject key identifier: C0:8E:DE:69:48:94:C4:0F:7B:A0:BF:CF:A9:E1:4D:57:1C:18:F3:4B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA27009DF186081589A7F98C83DCE47D
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/wI7eaUiUxA97oL_PqeFNVxwY80s.roa
Signing time: Fri 10 Nov 2023 16:53:20 +0000
ROA not before: Fri 10 Nov 2023 16:53:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 185.232.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 20:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:27:00:9d:f1:86:08:15:89:a7:f9:8c:83:dc:e4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c08ede694894c40f7ba0bfcfa9e14d571c18f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:e8:2e:0c:62:60:11:37:30:14:20:44:26:
d2:eb:2e:ae:b9:87:78:0d:27:72:1c:31:47:e2:7a:
f6:6a:c0:b0:16:5e:9a:c2:23:72:89:bc:40:e8:56:
cf:5e:8e:70:7b:04:30:d9:41:03:37:8b:9d:f8:6d:
06:12:92:fc:2a:5d:16:41:cd:91:81:e2:62:92:0f:
af:3a:e9:95:70:e8:18:92:cf:99:a7:0d:e7:21:74:
dc:28:57:23:76:47:71:6b:c8:60:4c:ea:7b:5c:46:
f8:20:62:59:2f:eb:bd:8e:24:f9:82:98:25:9a:36:
2e:5b:f6:c0:98:46:c0:bc:eb:3d:49:43:50:03:39:
c8:89:ae:54:07:f1:a2:87:cf:8c:4a:aa:76:8e:09:
ea:bf:e2:b6:d2:6a:3d:f7:4a:43:af:07:4c:4e:3d:
2b:ab:9a:47:ff:c5:fb:0d:60:e8:d0:2e:23:89:9b:
a5:f8:c2:78:7a:a8:90:4d:a7:58:33:6a:d0:4d:6b:
28:6b:b7:8e:d3:78:e0:37:4f:93:1d:b9:62:83:bf:
27:2b:fd:06:5a:5f:e9:2d:74:eb:77:cf:12:b8:55:
ca:b1:97:77:44:f3:80:53:32:ca:63:25:82:16:87:
f0:c6:02:53:cf:5e:9c:53:1c:ea:79:fe:5b:4b:d7:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:DE:69:48:94:C4:0F:7B:A0:BF:CF:A9:E1:4D:57:1C:18:F3:4B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/wI7eaUiUxA97oL_PqeFNVxwY80s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.167.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6b:ac:69:29:24:30:c0:a7:a7:78:57:1b:3b:87:f9:55:17:
15:f2:a9:ab:e4:91:57:b9:69:6f:e0:03:ab:29:27:9c:0c:a4:
bb:80:c3:b1:f8:54:85:56:44:9a:8a:a3:4a:5c:90:5f:04:b9:
57:de:33:58:22:bd:7a:4a:68:33:d2:15:cf:d0:85:65:64:43:
0e:31:00:e0:ff:87:eb:fe:76:f6:04:98:12:52:a1:d8:2c:6e:
6a:95:1e:a9:7a:f5:b5:92:df:f5:2d:89:ee:a6:1c:dd:45:24:
16:e6:72:09:c6:b8:de:88:aa:8b:68:48:c9:ef:6a:66:7e:de:
9c:e4:f1:a9:ae:09:34:a6:b3:ff:83:c4:46:e4:68:92:40:57:
6d:db:e9:f1:4f:42:f8:ce:7e:df:64:20:5e:ad:5c:2a:68:a1:
78:94:bf:b5:69:96:4f:a3:ca:a5:88:7c:2c:05:ee:f8:4d:16:
70:bf:05:84:ec:4b:f2:0f:e1:57:d8:21:6b:e6:02:4d:29:82:
55:55:8e:5d:b4:63:b6:47:8d:6d:d4:ec:52:e1:f9:b4:22:da:
bf:62:65:38:25:4b:d2:a5:eb:c8:06:4b:62:e9:cc:13:f7:eb:
3b:0e:45:f9:16:19:3f:d8:46:89:fc:0e:57:a9:17:8d:93:08:
a0:ef:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org