Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/oEvS91jB4Se_N1j6_MxcPkIzLcI.roa
File: oEvS91jB4Se_N1j6_MxcPkIzLcI.roa (raw, json)
Hash identifier: 5/72rfIfxMLuPHMguoqGbCftDm1dpZaDYZBNE+gNkW4=
Subject key identifier: A0:4B:D2:F7:58:C1:E1:27:BF:37:58:FA:FC:CC:5C:3E:42:33:2D:C2
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 018C6CE21A97B92584A2DDCF6783A4257651
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/oEvS91jB4Se_N1j6_MxcPkIzLcI.roa
Signing time: Fri 15 Dec 2023 09:50:06 +0000
ROA not before: Fri 15 Dec 2023 09:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12676
IP address blocks: 185.172.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:e2:1a:97:b9:25:84:a2:dd:cf:67:83:a4:25:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Dec 15 09:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04bd2f758c1e127bf3758fafccc5c3e42332dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:f4:cd:3e:01:09:cb:6a:4e:a2:4d:b6:c2:
b1:ec:b5:d8:6a:33:3d:e4:1a:f5:00:ac:f5:86:f1:
cd:28:9f:0b:f5:ea:fc:f0:c7:84:a9:e5:a2:6c:94:
5b:fe:3f:df:0b:50:12:a3:b5:0c:a5:e1:ec:1c:5e:
16:cb:c8:c2:cb:e3:54:a9:8a:2f:bb:c8:62:66:55:
2e:c3:e0:f7:f6:03:d2:82:c1:2f:de:c6:8f:ea:ba:
33:c6:8f:65:0a:1e:85:de:bd:c2:a9:71:f5:8a:3e:
df:45:ac:b2:82:fe:7d:89:a0:df:cf:ff:fc:e7:12:
bd:b5:29:0e:b3:2c:53:a2:85:17:d4:4d:47:7a:29:
71:f3:48:31:2b:27:17:0a:ac:fb:1d:2c:2a:3e:b1:
49:96:e0:3c:a4:cc:5f:ef:96:9f:cd:0b:de:05:17:
58:ac:5e:7b:f4:dd:5e:d3:78:90:fa:21:d6:4e:a8:
5f:b6:5f:80:69:35:b6:a6:cf:65:e8:56:4c:a3:5a:
a4:26:ef:cb:5b:54:f0:5a:ce:8f:d0:54:c7:77:9f:
db:ed:c8:dd:42:e4:72:a3:56:30:1d:cc:33:34:75:
c4:a0:ee:0f:97:28:1a:8a:c2:51:98:a4:63:bf:1d:
31:32:27:7e:d3:0b:33:ff:c6:84:41:57:83:3c:36:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:D2:F7:58:C1:E1:27:BF:37:58:FA:FC:CC:5C:3E:42:33:2D:C2
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/oEvS91jB4Se_N1j6_MxcPkIzLcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:59:de:b5:1d:5f:77:42:65:88:d5:fc:74:69:d7:aa:d9:ac:
d0:1d:37:6b:03:84:48:42:34:47:9a:34:3d:04:21:da:ce:3a:
50:a5:b3:a2:47:ea:2a:78:e1:73:56:c3:dc:e4:2e:50:2a:cc:
32:5a:9f:33:4b:25:8d:d5:93:97:9e:44:26:39:6d:e5:29:10:
9e:95:80:88:a4:65:02:34:e5:ed:3d:12:c8:14:38:10:bf:9c:
59:69:d7:7f:7f:30:0a:95:6c:ea:eb:ba:23:c6:26:a5:14:af:
c2:4c:d7:d6:66:e1:a4:81:91:e7:2d:cd:8b:80:0e:ae:de:22:
5f:76:dd:7f:4c:a6:00:4c:4d:01:77:67:64:29:24:db:47:50:
ba:89:7c:b0:97:b3:04:0a:4b:59:fc:c3:59:ad:7d:ca:1b:01:
97:67:a6:d6:a6:4b:88:92:c9:63:50:71:aa:d8:c8:0f:a4:37:
94:71:01:7c:44:ce:96:b9:ff:dc:b8:dc:1a:24:4b:97:30:0e:
83:f9:02:39:f8:6b:c2:57:29:38:d2:e3:3f:f5:80:8f:6d:f9:
8e:a6:a3:55:ec:d5:09:f5:be:06:38:5b:82:58:8a:f5:5d:35:
ab:06:7d:51:57:e4:14:f9:80:1f:ef:eb:07:7d:da:a5:8c:fa:
58:0c:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:33 2024 by rpki-client on console-ams.rpki-client.org