Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/0BZDGq9xJ-qY7mCO8eoPMcEuxf4.roa
File: 0BZDGq9xJ-qY7mCO8eoPMcEuxf4.roa (raw, json)
Hash identifier: b1sbXQROVqImiVCqUM9g/E3ODIyN9CkRNvofI1GJpVo=
Subject key identifier: D0:16:43:1A:AF:71:27:EA:98:EE:60:8E:F1:EA:0F:31:C1:2E:C5:FE
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 018572BA91A5AFCD3778C1E97E5CB7AEECC3
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/0BZDGq9xJ-qY7mCO8eoPMcEuxf4.roa
Signing time: Mon 02 Jan 2023 13:45:07 +0000
ROA not before: Mon 02 Jan 2023 13:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205547
IP address blocks: 185.207.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:91:a5:af:cd:37:78:c1:e9:7e:5c:b7:ae:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jan 2 13:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d016431aaf7127ea98ee608ef1ea0f31c12ec5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:82:bc:cc:a7:b5:54:6d:0c:19:96:81:09:
2f:8c:90:56:fe:f7:3b:dd:7d:a2:98:ac:f5:50:76:
32:af:45:f6:a2:6f:22:9f:f8:38:a6:de:a5:20:2c:
a5:06:8e:a8:9d:f9:4f:73:c0:9f:25:8a:55:70:38:
d2:2e:c1:42:ea:9a:52:2a:74:fc:db:05:12:e7:d5:
b7:98:9f:a9:b6:a9:7d:85:17:96:03:4a:43:f3:f6:
05:2a:67:08:99:aa:e6:1d:36:61:ca:02:d8:3c:28:
4a:91:d2:ea:46:c8:91:9f:78:be:d8:03:88:0a:45:
52:8d:be:72:e6:03:56:e9:43:f5:50:ce:d9:cd:d4:
cc:6e:f7:9a:01:07:e9:de:d1:50:d1:2e:7a:38:d8:
54:a5:12:ae:b0:e4:47:83:27:0f:ec:9a:24:75:61:
94:0e:06:b0:65:8f:df:89:c9:d1:d1:1e:dc:ce:6e:
1c:ba:0d:62:ae:18:8f:9b:cf:57:8f:84:83:07:89:
02:f2:c1:57:d3:31:49:ed:54:90:5b:85:9e:a6:d9:
af:14:1c:7f:69:30:3a:1c:fc:40:a2:46:56:b0:6b:
2b:50:5f:9d:8d:31:2a:d5:14:bf:6e:44:04:72:92:
f1:0c:76:4c:f4:56:6a:cc:34:7d:89:fd:76:ea:bc:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:43:1A:AF:71:27:EA:98:EE:60:8E:F1:EA:0F:31:C1:2E:C5:FE
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/0BZDGq9xJ-qY7mCO8eoPMcEuxf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.34.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ba:bb:42:ac:f9:e1:da:66:b6:11:4b:5c:42:fb:31:03:ef:
e6:cb:0e:fb:cb:ba:85:78:dc:d2:a3:55:3e:34:b2:7b:3e:16:
e4:5a:6b:ec:2a:d9:14:d0:e8:7f:a5:5c:40:7a:8b:c7:aa:5d:
a6:8c:31:5d:a8:ea:4a:c8:08:d5:4a:8f:74:7c:90:a9:af:44:
94:8b:76:68:51:0b:d3:f3:ad:b0:05:7b:b6:42:79:57:97:a1:
d1:fd:6f:58:e5:d1:7e:c2:5a:e6:f2:c7:d2:80:da:3f:e0:9a:
d1:55:27:38:35:cd:4c:dd:e9:68:64:72:5d:b1:e0:c8:74:a6:
ce:b5:16:f7:0d:69:3e:2f:6f:20:d9:fd:29:f6:8a:2e:29:b2:
1d:be:7e:cd:41:5d:86:06:7e:6e:31:c1:9f:52:8c:fd:fb:87:
d4:fa:97:cb:85:b2:55:09:b7:06:b2:b8:a4:96:40:64:4b:ff:
6c:6a:54:3a:b1:83:f5:37:de:73:25:a2:2c:72:1b:97:9a:31:
59:42:04:bb:9f:8b:b3:e4:d4:88:bc:dd:e6:55:89:62:68:36:
e6:dc:9f:4a:f1:01:33:87:ed:e7:41:a5:ad:44:dd:f5:7c:3d:
c9:12:c0:aa:e4:30:dd:16:fc:77:0e:48:4f:e1:b9:4d:22:86:
e0:5d:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org