Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/aYv5Vk5kcMaMINjv4RQ3J1pChs0.roa
File: aYv5Vk5kcMaMINjv4RQ3J1pChs0.roa (raw, json)
Hash identifier: aibnlc8GyFH1tF5d2zfF9xg35FFj7zZU2l2fNC7ISDM=
Subject key identifier: 69:8B:F9:56:4E:64:70:C6:8C:20:D8:EF:E1:14:37:27:5A:42:86:CD
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 018C10CC6BE23208DCE9E639A4D5CA9CAA91
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/aYv5Vk5kcMaMINjv4RQ3J1pChs0.roa
Signing time: Mon 27 Nov 2023 12:41:21 +0000
ROA not before: Mon 27 Nov 2023 12:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.188.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:cc:6b:e2:32:08:dc:e9:e6:39:a4:d5:ca:9c:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Nov 27 12:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=698bf9564e6470c68c20d8efe11437275a4286cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9f:ff:35:4a:06:16:aa:e8:35:35:aa:6b:44:
1b:dc:d8:c4:1d:eb:4b:85:59:34:46:db:cf:fd:7f:
10:0f:78:de:7c:d1:12:f6:d8:dd:a2:d0:b5:e1:e3:
50:70:62:69:f0:f3:d8:9b:b1:7c:e7:53:dd:82:37:
cb:dd:43:18:7d:12:8a:34:aa:d2:bc:ea:5c:c5:e9:
b7:b1:58:05:bb:fc:09:ad:cf:82:de:5e:cd:4e:0e:
54:c5:be:7b:e8:29:0e:13:9a:53:cc:44:ae:99:51:
b4:1b:ae:7a:5c:15:5f:53:b8:6a:77:9d:de:a1:93:
2d:d5:ee:a7:62:40:3e:cd:be:ee:11:1c:9a:6c:38:
f1:24:16:bb:95:c5:7a:42:b6:a9:aa:2e:df:d0:7e:
55:5a:f1:f9:06:e3:17:a9:ef:4c:2a:82:4f:47:87:
7f:cc:f8:f5:fe:24:98:c5:c2:2a:f1:95:67:75:7d:
96:b3:3d:a3:43:54:6a:67:96:09:da:77:d5:d0:ee:
42:45:7a:9f:7c:60:f8:31:b4:28:91:77:52:5f:18:
ca:2a:e6:73:cd:ec:c9:dd:0b:9a:55:62:2f:a7:c1:
06:a9:c0:d6:a4:38:15:ea:3f:1f:7e:60:33:88:9b:
77:df:71:9f:28:55:b9:94:1e:12:f4:8f:5d:50:00:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:F9:56:4E:64:70:C6:8C:20:D8:EF:E1:14:37:27:5A:42:86:CD
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/aYv5Vk5kcMaMINjv4RQ3J1pChs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.31.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e3:03:dc:07:f9:e5:26:d8:c1:23:cb:4b:db:00:81:eb:af:
18:d6:88:33:da:a1:ba:f1:c6:45:62:da:43:65:bb:26:0f:5d:
c0:00:63:7a:b5:54:d4:00:f2:0d:14:56:4a:d2:f3:d8:1f:89:
5e:e7:61:09:78:4c:14:eb:87:5b:c3:87:ad:e5:77:89:2b:7b:
de:98:99:f2:24:b6:b8:e0:b3:33:bc:4d:a1:67:fc:3e:bb:5b:
d5:09:68:32:3f:23:4b:67:46:3d:56:d2:ec:31:27:f6:a0:9b:
54:54:b6:d7:ce:8f:6b:ec:be:8e:eb:f3:2a:7c:20:33:c9:ed:
a2:80:74:f4:9d:46:b7:52:35:c7:92:0c:51:7c:6a:b2:83:6d:
f8:e7:9e:89:46:0a:58:76:83:21:7b:91:74:33:ba:13:1f:80:
31:da:8c:f3:e2:8b:84:0a:f1:d4:98:a6:bf:73:c6:32:b2:f5:
07:d2:db:33:59:81:c5:3b:00:ae:2c:7d:dc:05:fa:96:a4:74:
92:73:29:79:e3:43:df:7a:52:50:c7:17:15:23:41:0e:82:c8:
52:44:5b:a9:9f:02:12:cc:7f:a9:29:62:11:89:ef:46:d3:de:
be:e8:fb:19:21:7f:e0:9c:7b:24:37:db:e4:cd:2c:d3:41:6f:
e9:e1:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 30 06:13:07 2023 by rpki-client on console-ams.rpki-client.org