Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/aVhKYZpyDEbCRHhRrVeWWEHb9hk.roa
File: aVhKYZpyDEbCRHhRrVeWWEHb9hk.roa (raw, json)
Hash identifier: SE8j2z8/3l9nounckFuoHMJiOxRtSyygj7mY/TCYf/w=
Subject key identifier: 69:58:4A:61:9A:72:0C:46:C2:44:78:51:AD:57:96:58:41:DB:F6:19
Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial: 0186EBF245E1A215DE49F934B5DFB3D99091
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/aVhKYZpyDEbCRHhRrVeWWEHb9hk.roa
Signing time: Thu 16 Mar 2023 19:42:48 +0000
ROA not before: Thu 16 Mar 2023 19:42:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208617
IP address blocks: 185.160.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:f2:45:e1:a2:15:de:49:f9:34:b5:df:b3:d9:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Validity
Not Before: Mar 16 19:42:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69584a619a720c46c2447851ad57965841dbf619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:f0:d2:f9:9b:a3:c7:c1:93:78:2d:6d:e7:
83:94:da:3d:88:d6:a2:31:28:c8:8f:f1:d4:ba:0e:
d9:ae:f4:35:8e:c4:f2:dd:b8:a9:65:bf:4a:9b:44:
5b:3e:89:43:5c:51:c3:ac:12:42:87:e3:f7:f9:b1:
2a:02:d7:6c:a6:d2:8f:01:27:11:05:00:f5:60:5a:
0f:7d:8c:a2:62:83:c4:2b:ee:a6:c1:82:9d:a0:21:
a0:10:cb:a4:a6:e4:6c:3d:bb:7b:ab:6d:48:59:c8:
1d:d3:d0:46:1f:89:c4:eb:08:4a:60:cc:c6:fe:28:
bb:8e:30:49:88:8c:6a:e7:6e:69:6f:ed:ac:3b:ab:
ca:00:55:49:9d:f1:93:d7:ed:80:34:ab:fb:1b:ad:
39:aa:6f:4f:4b:ff:72:d6:a5:82:e7:69:63:3b:bf:
27:71:94:ae:a7:fa:ce:e0:72:1f:7d:64:05:52:36:
0b:24:de:8c:0c:d3:44:14:d2:b5:9e:f4:b6:6a:ab:
72:93:f2:0e:50:8b:4f:c7:c7:a1:2e:db:e1:3b:85:
85:0c:3f:a9:83:d8:4a:45:8d:5a:b1:57:10:60:c1:
3d:05:94:43:d3:5b:14:7a:ca:79:75:a6:7a:4b:f1:
a9:f7:9a:f6:0e:b9:89:db:83:62:eb:46:4f:f8:b9:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:4A:61:9A:72:0C:46:C2:44:78:51:AD:57:96:58:41:DB:F6:19
X509v3 Authority Key Identifier:
keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/aVhKYZpyDEbCRHhRrVeWWEHb9hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:58:08:8d:84:29:08:e5:1e:98:15:63:d3:7b:59:73:73:cd:
89:0b:a1:ba:cc:76:77:84:2e:7b:bc:c3:8a:c4:81:0c:fe:b6:
22:3b:2d:a8:b7:7c:56:93:82:76:20:3c:7e:df:42:cb:dd:63:
41:9c:e5:40:de:09:99:41:0d:ff:2e:7f:6f:18:2c:7d:e2:0d:
b9:ec:7b:ce:64:dd:ff:54:72:82:b2:69:5d:9d:04:86:17:64:
1f:eb:f8:2a:35:0d:a6:e3:07:18:ab:49:7b:e4:61:3f:95:fc:
8f:eb:3c:89:4d:85:ab:8d:75:c1:21:01:69:f1:d2:7c:44:24:
fd:71:91:bb:ff:6d:1c:fa:47:ad:b0:5a:46:74:79:67:2f:7d:
cf:13:9f:ae:f3:4b:97:34:e8:17:ea:fd:5a:7f:5c:4a:1a:c6:
50:04:6a:ae:84:48:17:35:85:a7:1b:4b:95:1e:16:86:2b:30:
06:f2:3f:13:2e:5c:4a:89:3b:d2:33:b2:b9:62:af:e4:11:62:
31:de:38:f7:94:1d:c4:1f:f9:59:80:0e:b7:f3:6e:22:7a:d7:
93:ac:af:8d:4a:ae:6e:67:d5:0c:38:6c:7c:9f:a7:97:dd:76:
80:c7:c2:e4:85:fd:1c:7c:33:b8:06:ba:48:73:68:f8:84:ef:
62:06:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:27 2024 by rpki-client on console-fra.rpki-client.org