Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/9oboVHMQmXzAjozK-58C_wr0Rco.roa
File: 9oboVHMQmXzAjozK-58C_wr0Rco.roa (raw, json)
Hash identifier: QrVuPlCKc4nx9NUoD8Cgg9/ipnkOeR5msp4W8Gv5OG4=
Subject key identifier: F6:86:E8:54:73:10:99:7C:C0:8E:8C:CA:FB:9F:02:FF:0A:F4:45:CA
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 01856DD4014F7CB168AB381A9897FBC1DB71
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/9oboVHMQmXzAjozK-58C_wr0Rco.roa
Signing time: Sun 01 Jan 2023 14:54:48 +0000
ROA not before: Sun 01 Jan 2023 14:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201080
IP address blocks: 185.167.16.0/22 maxlen: 22
2a0b:3200::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 20 Nov 2023 20:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:01:4f:7c:b1:68:ab:38:1a:98:97:fb:c1:db:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Jan 1 14:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f686e8547310997cc08e8ccafb9f02ff0af445ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:89:39:a4:59:b8:96:41:36:8a:9a:ce:5c:
23:94:96:04:08:5c:72:9c:17:74:0b:e9:c2:27:6e:
03:ce:81:97:f1:59:76:ed:fc:d4:70:d5:ee:6a:5d:
e7:f1:e4:a1:c4:80:16:50:4e:e1:19:3e:49:d5:09:
8d:f0:94:14:8a:c8:ea:45:f2:37:09:70:13:23:dd:
34:04:6e:df:f5:26:a4:26:90:da:9c:7c:ee:f5:b9:
4b:67:82:5d:60:e8:1c:d9:9c:a1:3c:5a:01:83:ea:
90:61:34:e3:69:ce:c6:b3:29:f0:42:c0:40:d8:7b:
33:9c:40:9d:63:18:f3:17:92:40:8d:1c:21:e9:78:
48:e2:c9:25:a4:60:35:02:88:36:2d:f5:46:07:e6:
26:47:24:6c:8b:29:da:4d:c7:fd:60:30:80:05:f8:
6f:3c:dc:cc:e8:29:5f:32:c4:5d:a7:c5:06:a1:78:
1e:d7:90:e6:2c:ae:7f:c6:9b:1c:be:7c:cf:b8:da:
41:63:b3:7e:df:b0:61:9e:82:46:e9:71:fc:4e:e3:
41:32:fa:e7:8b:ea:ad:76:5c:5c:7e:0e:5f:5d:9b:
6d:27:08:30:ae:e0:05:47:06:86:96:20:17:d1:0b:
52:ce:70:5e:37:89:2a:3d:8d:98:cd:cd:47:84:0e:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:E8:54:73:10:99:7C:C0:8E:8C:CA:FB:9F:02:FF:0A:F4:45:CA
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/9oboVHMQmXzAjozK-58C_wr0Rco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.16.0/22
IPv6:
2a0b:3200::/31
Signature Algorithm: sha256WithRSAEncryption
9a:3b:b1:76:a7:42:0a:43:0f:21:aa:57:77:41:f1:46:6b:5a:
2d:e3:a5:0d:ae:68:19:c2:ea:2c:4b:5a:d1:03:37:2d:38:e9:
2c:83:eb:24:cc:d3:a9:31:f2:10:e7:2e:0f:93:81:40:2c:55:
93:94:7e:7d:0d:13:98:a1:4d:c7:2a:90:7d:10:21:0f:bb:a5:
87:42:68:e2:a3:6b:30:02:d8:52:8b:11:05:0f:db:ef:01:73:
a3:23:91:df:af:58:7f:a3:00:e8:12:e5:1d:02:ee:ef:d7:36:
d8:5a:35:ed:15:6f:ee:60:ce:45:ef:fc:ec:dd:75:91:84:55:
be:b8:c3:cd:df:97:91:6b:5a:44:38:ea:74:de:4f:cc:9c:8f:
12:24:4d:5d:b2:41:75:6f:a9:dc:2d:09:9b:1b:50:7e:52:a8:
f3:99:a1:6c:3e:87:7f:82:79:8e:e9:17:0c:24:1a:f0:5d:8c:
77:c2:50:6b:8d:7c:7a:ee:03:12:cd:f1:72:65:3d:47:03:4e:
70:4b:60:d6:48:02:57:eb:f8:fd:3b:3e:f9:4e:8e:6d:7d:ad:
80:ce:fe:58:6c:17:ee:88:d6:98:af:c1:8e:30:4b:d1:d8:4b:
54:64:bc:28:5c:d1:d8:63:22:47:ea:6f:09:8c:75:3b:f3:7d:
2e:75:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:07 2024 by rpki-client on console-ams.rpki-client.org