Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/sOetHGesZyNUGPQNPbifwjjHDaE.roa
File: sOetHGesZyNUGPQNPbifwjjHDaE.roa (raw, json)
Hash identifier: FEIvKyB1j2FuWK5q97MhoxYB4oQOjSZxajF/2XCq/9U=
Subject key identifier: B0:E7:AD:1C:67:AC:67:23:54:18:F4:0D:3D:B8:9F:C2:38:C7:0D:A1
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018A4B2BED5A8514C7EC3A65F39D6B1FDFB1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/sOetHGesZyNUGPQNPbifwjjHDaE.roa
Signing time: Thu 31 Aug 2023 10:38:04 +0000
ROA not before: Thu 31 Aug 2023 10:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:2b:ed:5a:85:14:c7:ec:3a:65:f3:9d:6b:1f:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 31 10:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0e7ad1c67ac67235418f40d3db89fc238c70da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:f0:04:95:f3:4d:f9:3d:b1:e9:12:59:6f:
1b:64:3d:dc:70:08:ca:0e:9b:18:1f:4c:d9:0f:5f:
f6:e1:09:96:2e:65:b5:ed:02:03:5e:a2:63:bb:fb:
b5:b1:8e:ca:4e:7a:8d:5f:94:5c:f4:9c:10:b2:96:
a5:be:0f:c1:ad:ec:6e:5b:39:78:88:a6:56:4c:04:
cf:c1:c7:d1:a0:ea:a6:b7:d6:4a:fe:a0:e9:73:3e:
0d:0b:3c:ba:1f:11:11:88:76:d5:b4:71:bf:e6:a9:
82:41:a6:15:e3:e9:b6:9b:a4:d2:75:bb:86:f4:f8:
eb:68:5a:77:12:7d:c3:93:8e:12:12:a8:0a:89:9c:
17:28:d3:b8:57:10:3c:3c:35:90:f0:5d:43:c6:52:
3c:e7:d4:75:f1:56:f5:09:2e:f5:9a:07:b2:f3:ab:
f9:65:c3:ae:96:c2:88:0f:62:a9:fb:96:82:ab:69:
c9:f9:e9:87:2e:6e:01:a1:7a:ea:af:52:93:c7:2b:
49:be:ca:98:52:01:6f:23:12:03:89:81:d7:01:6a:
16:f7:3c:9e:62:22:ee:92:24:d6:5f:ae:a8:4c:65:
93:11:cb:f2:41:b2:a3:16:38:5f:ec:64:10:c5:91:
4c:4d:a1:b4:81:e4:13:06:30:2f:80:1a:cc:71:0a:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:AD:1C:67:AC:67:23:54:18:F4:0D:3D:B8:9F:C2:38:C7:0D:A1
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/sOetHGesZyNUGPQNPbifwjjHDaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:6e:79:be:5a:9a:bc:f3:89:fa:1f:7d:d0:b0:8d:2e:96:25:
7b:ff:15:f1:08:d1:58:d2:2f:2e:97:6b:aa:81:44:0e:2e:08:
c9:ab:ca:1e:7e:c8:fd:92:7f:83:8a:c9:81:f8:e1:94:79:b9:
7f:09:6f:df:10:fc:fb:fc:0d:52:2a:43:c3:78:54:4d:7c:9e:
86:b1:03:5b:36:cf:7a:98:55:53:db:e5:4d:59:ee:89:ba:b6:
de:fc:ca:15:9b:d7:01:59:10:8f:2b:79:be:3e:cf:e6:a0:f0:
5c:b8:0f:16:6c:97:f3:cc:18:1f:92:a4:83:b4:e2:88:af:31:
7d:5e:ed:54:f4:bd:ce:3f:a8:2a:b7:79:00:44:f5:37:bd:06:
7e:d5:8b:90:73:82:62:29:63:8f:65:35:3d:ef:0c:e1:aa:6c:
ca:c7:ef:41:f0:1b:7c:76:81:db:1b:38:98:fd:aa:10:3e:52:
c3:4c:af:53:ae:2c:a5:2b:cd:6e:ff:bd:a3:66:6a:b1:b0:96:
3d:d8:a9:80:4c:1e:27:8a:6a:ba:30:54:af:8b:52:2f:c7:47:
96:43:01:ce:d1:7e:c0:a5:36:1c:01:01:8c:1d:27:c8:1d:28:
03:26:47:f6:a8:0d:95:31:63:1c:e4:e3:8b:00:d3:d9:08:87:
ea:86:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org