Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/Fo4XdJzRcPnC4JF76MmWrM3o8TA.roa
File: Fo4XdJzRcPnC4JF76MmWrM3o8TA.roa (raw, json)
Hash identifier: 6MxxgNW6ZvmXkzFFG7nmdxjn724J/DKiIRMGn5OAgyI=
Subject key identifier: 16:8E:17:74:9C:D1:70:F9:C2:E0:91:7B:E8:C9:96:AC:CD:E8:F1:30
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01880B52B3AC89E9ECEB9AFF3101B5CFED12
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/Fo4XdJzRcPnC4JF76MmWrM3o8TA.roa
Signing time: Thu 11 May 2023 14:59:09 +0000
ROA not before: Thu 11 May 2023 14:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.195.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:52:b3:ac:89:e9:ec:eb:9a:ff:31:01:b5:cf:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: May 11 14:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=168e17749cd170f9c2e0917be8c996accde8f130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:97:49:d3:58:fd:05:66:02:c7:de:0e:80:
eb:1a:2d:9b:21:ef:d0:58:2a:2b:42:b4:04:ef:38:
09:19:26:d9:2e:31:49:0d:63:34:72:fe:48:75:f1:
73:6e:55:45:d6:43:e4:7a:51:74:16:a9:ba:49:b4:
06:4f:03:01:e6:64:c0:b6:60:8d:dd:f9:6b:43:b9:
04:34:e3:1c:72:1c:ac:f4:22:a5:b0:69:9d:9a:cd:
0b:97:dc:cd:16:81:29:07:97:da:79:17:ba:3e:d2:
05:da:ac:57:75:98:94:88:8e:2a:2d:a6:89:aa:89:
d6:ed:f9:46:05:22:f0:db:c8:2a:61:8c:40:62:0e:
b7:ec:8e:d5:9d:a0:13:de:06:a9:5b:e9:7a:98:5d:
e5:be:be:b3:e9:4e:71:41:6c:b7:bd:35:5a:fe:de:
fd:a6:81:f5:4d:db:93:ab:ce:3c:28:f1:e8:4d:c9:
cb:dc:08:c0:9a:b3:a6:1c:b6:df:e6:d0:01:a2:31:
4b:d2:db:9e:c0:07:5f:39:3f:9d:f4:ad:fb:9b:74:
ee:44:ab:79:28:e4:e7:ee:33:32:a9:74:5a:9f:0c:
d5:53:1c:c5:61:95:da:7c:72:58:7d:d3:1e:18:cf:
22:b1:15:e5:a5:dc:23:39:0c:70:ac:27:df:4a:2f:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8E:17:74:9C:D1:70:F9:C2:E0:91:7B:E8:C9:96:AC:CD:E8:F1:30
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/Fo4XdJzRcPnC4JF76MmWrM3o8TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:34:f0:33:22:0e:c4:dc:bd:7c:4c:12:9f:1d:f0:15:86:aa:
89:e6:39:78:c0:f9:28:5e:cf:c8:63:1d:7f:e5:2c:e0:2e:87:
56:18:34:e4:46:4e:96:a5:1c:e2:c3:04:b4:33:37:bf:7d:b1:
b4:c7:40:c9:08:d0:0a:85:f4:0e:9f:4a:2a:a0:c9:c0:32:d4:
82:39:8b:d2:40:9c:f8:32:b1:0a:53:af:59:af:dc:df:eb:64:
7c:f8:71:d5:3b:33:28:8d:ff:1b:69:36:94:14:70:9b:8b:bb:
cf:54:66:fa:27:65:76:77:16:4c:37:bf:07:a1:52:41:18:c8:
f8:4e:fb:74:f9:f2:2a:80:84:6e:05:71:18:e3:8e:b9:de:bb:
ca:ac:9c:c3:9b:cb:10:26:09:27:df:43:76:52:38:0d:0f:e7:
19:27:40:f1:18:df:b4:5a:0a:b1:5e:5e:8e:c2:68:24:1b:78:
b5:c8:2f:58:0c:ee:86:1a:4e:f1:5e:4f:d4:ec:6f:af:b2:40:
2b:bc:02:57:cf:10:df:f2:b3:97:65:af:58:65:95:00:e4:cd:
fa:2f:aa:07:01:c8:12:e2:35:6d:e1:63:b9:10:cf:b7:47:27:
44:d8:d2:15:d7:54:25:3a:fb:b0:0a:22:5c:7b:49:c2:1e:2b:
94:dd:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:38 2024 by rpki-client on console-ams.rpki-client.org