Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/r6jQzqf5_d0SSpb0jVwEnbCV7oY.roa
File: r6jQzqf5_d0SSpb0jVwEnbCV7oY.roa (raw, json)
Hash identifier: QksX4FzAuaMZgAWMZXfag6zUhnRuv+CUCWXRtdaGCFA=
Subject key identifier: AF:A8:D0:CE:A7:F9:FD:DD:12:4A:96:F4:8D:5C:04:9D:B0:95:EE:86
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0188D56DD0BAE35DD4DF741ED96580678390
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/r6jQzqf5_d0SSpb0jVwEnbCV7oY.roa
Signing time: Mon 19 Jun 2023 20:52:03 +0000
ROA not before: Mon 19 Jun 2023 20:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 194.76.231.0/24 maxlen: 24
185.44.83.0/24 maxlen: 24
2a12:f340::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jul 2023 15:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:6d:d0:ba:e3:5d:d4:df:74:1e:d9:65:80:67:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jun 19 20:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa8d0cea7f9fddd124a96f48d5c049db095ee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:fe:1e:95:d4:56:93:cf:b0:22:12:16:e3:
44:a8:11:c7:38:54:c7:af:3d:bc:f7:c3:32:68:59:
06:6c:35:ac:cd:b5:74:53:6f:69:02:ef:64:4d:b9:
23:39:dc:a4:f2:40:fa:00:bd:23:35:cb:50:0f:ff:
5f:5a:81:b0:cc:d1:e7:51:58:bf:a3:e4:a4:da:96:
d9:6b:11:31:f4:6e:f2:6a:b4:c0:7e:3d:7a:d8:32:
18:8e:fb:c3:a4:a7:72:a8:18:a9:2a:60:32:b9:57:
25:85:ea:c5:c5:49:4f:a0:7c:18:12:46:50:13:4d:
9c:a9:05:dc:b4:2d:b1:79:d8:0a:29:a9:b5:1b:43:
1f:05:29:cb:94:36:9a:b3:06:d3:02:46:2f:ef:bc:
a3:98:89:f0:7c:2f:10:0d:da:b8:6a:9d:cc:b8:ce:
64:cb:21:da:bf:60:84:30:82:2e:17:ae:6a:da:5d:
0e:0c:ad:56:2e:09:ba:08:3b:85:d3:15:49:99:10:
61:c2:c7:92:ff:de:ee:2b:3b:cb:64:b0:0a:cf:03:
7b:b7:0a:da:43:77:e8:2b:a7:d4:bd:9f:f4:4a:76:
98:44:08:6c:67:91:f7:bc:23:31:41:e4:ff:87:36:
e1:af:6d:f8:20:e2:85:18:c5:e0:03:b1:c6:79:ee:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:D0:CE:A7:F9:FD:DD:12:4A:96:F4:8D:5C:04:9D:B0:95:EE:86
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/r6jQzqf5_d0SSpb0jVwEnbCV7oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.83.0/24
194.76.231.0/24
IPv6:
2a12:f340::/48
Signature Algorithm: sha256WithRSAEncryption
8d:ef:24:8e:63:d4:43:15:5c:e9:13:0e:0a:f9:cb:38:c3:dd:
b9:17:1d:4e:89:a6:ae:57:93:e3:c6:d4:2a:db:9c:6c:23:8b:
88:53:48:eb:73:a5:67:eb:39:2c:8c:0c:73:fc:f8:53:85:b4:
bd:66:e7:2e:9d:7c:03:b6:7c:99:8d:47:17:9f:6d:0f:4b:85:
32:d1:bd:e7:20:70:6d:9e:9c:95:a0:98:fa:c1:8e:c5:f4:bb:
1b:fc:b6:36:04:7d:0e:0d:8c:cd:74:6e:75:2e:af:7f:63:ab:
23:95:0e:e9:88:32:18:22:8c:ce:98:c1:9b:c8:c3:10:85:96:
7c:fb:52:12:3d:c7:fd:4a:22:ab:41:5b:9a:e0:2f:c5:20:6e:
a7:5c:cf:8f:db:8c:56:3f:82:25:5c:99:4b:d9:5d:84:60:0b:
1d:5e:4a:eb:d8:b3:01:5a:38:55:cb:63:2f:71:c5:09:de:c5:
40:64:c9:c0:6d:ad:f1:d6:88:15:11:5a:cd:61:6b:31:77:49:
b2:57:d7:5b:a0:dc:88:a1:4b:68:9d:7b:ae:06:00:54:42:9b:
24:f0:83:52:af:3f:60:30:48:38:03:00:f2:56:55:1b:84:01:
25:b7:e3:18:e8:8c:15:fb:71:0a:88:cb:40:64:4a:b9:1b:4b:
00:60:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:35 2024 by rpki-client on console-ams.rpki-client.org