Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/3x5YqdhI6BCO4xlx6FdZI9nlISo.roa
File: 3x5YqdhI6BCO4xlx6FdZI9nlISo.roa (raw, json)
Hash identifier: wl5KJxSLyzNSKZQtZdQN9VTCShNaZd/0MG+NQlpsX/Q=
Subject key identifier: DF:1E:58:A9:D8:48:E8:10:8E:E3:19:71:E8:57:59:23:D9:E5:21:2A
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 018654321353548FDB5B98B1E2F8C66D23FC
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/3x5YqdhI6BCO4xlx6FdZI9nlISo.roa
Signing time: Wed 15 Feb 2023 08:30:13 +0000
ROA not before: Wed 15 Feb 2023 08:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 37002
IP address blocks: 185.161.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:32:13:53:54:8f:db:5b:98:b1:e2:f8:c6:6d:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Feb 15 08:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df1e58a9d848e8108ee31971e8575923d9e5212a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:95:72:65:b8:2a:40:76:72:fc:9f:e6:17:
3b:4d:4f:de:b1:a6:f3:37:fc:a9:47:92:43:cd:71:
50:eb:54:0f:78:fc:74:99:7b:dc:bd:2e:23:6b:17:
28:89:9f:ec:4a:fd:16:eb:03:62:24:5c:92:b9:d0:
da:81:d6:c4:39:d5:72:5c:92:a3:86:a8:83:a6:63:
b7:c6:96:c7:57:d3:6c:7e:29:0b:77:2e:70:29:e7:
b4:83:61:a1:ec:62:3b:e5:b6:e7:0e:60:ed:3e:3b:
52:b2:ea:02:c9:3e:24:a8:02:8f:bc:25:80:f0:ba:
05:46:7e:ff:53:83:6f:c0:82:b5:61:a6:fd:55:02:
55:01:3b:e5:d6:2f:7d:bc:dc:a4:4b:ac:57:2e:95:
0b:05:e5:84:79:70:c1:93:c2:1c:08:6b:98:b3:bb:
93:0d:cc:bd:c8:fb:b4:df:6b:4f:f0:5a:c2:fc:28:
11:c3:f9:36:e7:c7:4e:5f:5f:ef:f9:54:72:24:f5:
53:78:aa:b5:c4:d7:b6:85:38:1c:93:06:9a:69:f1:
54:c0:12:f5:4b:3d:64:a5:6e:84:1e:ae:de:83:a3:
7c:b9:1e:9f:0a:db:3b:ad:cb:50:88:9e:83:68:0a:
c6:a9:76:aa:27:3f:1a:74:16:c0:e8:e4:a2:20:87:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:58:A9:D8:48:E8:10:8E:E3:19:71:E8:57:59:23:D9:E5:21:2A
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/3x5YqdhI6BCO4xlx6FdZI9nlISo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.10.0/24
Signature Algorithm: sha256WithRSAEncryption
15:90:e6:37:38:46:8a:a0:e8:05:4d:03:1b:f5:d2:02:9f:75:
10:e5:94:03:03:ac:a4:ff:43:d6:e5:23:99:2a:2d:59:a9:7a:
e0:6a:4f:0c:8c:5d:a2:48:8f:e3:05:92:93:c4:fb:9f:d5:4a:
79:76:a1:ec:7a:7a:f3:bf:3f:9d:26:3e:9f:71:98:d4:29:d4:
29:a2:cb:c2:a7:a4:2a:80:1f:2c:67:66:b5:f9:0c:65:bf:1f:
40:a8:b0:ed:ae:80:07:da:f1:75:05:9e:c6:45:e3:cb:24:0d:
5b:85:48:b8:5b:1d:0a:ba:63:6e:b2:00:ff:05:52:ca:a3:b4:
3a:b6:5f:32:6c:b0:f2:84:4f:fb:c8:a9:1b:89:0b:cd:1b:a1:
1c:23:f3:f5:ef:82:00:f4:f7:91:75:2b:41:1c:07:ef:ea:b7:
10:db:8e:b8:b1:44:f7:6c:3a:03:06:50:d6:7f:f6:9b:8d:70:
ff:e3:39:4d:04:bf:48:38:44:fa:ed:29:2f:96:3a:0f:c7:c6:
5c:a0:30:d4:42:67:52:f2:b4:c7:95:82:08:85:2c:25:26:4e:
48:43:30:8c:32:a1:79:31:3e:7e:76:01:02:7b:d3:c5:bf:84:
cc:ef:48:82:89:5d:e7:e0:89:0d:0d:5d:a8:39:ab:3e:58:f2:
db:f5:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org