Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c2376d-511d-49b5-b9c1-878665838a60/1/0AaWNg4FDHFRN6dO7mP-V1eXVh0.roa
File: 0AaWNg4FDHFRN6dO7mP-V1eXVh0.roa (raw, json)
Hash identifier: B4b/2VVINSG1J2xk5Jnbj0GjgEfQw4P/7bOdXcALyXU=
Subject key identifier: D0:06:96:36:0E:05:0C:71:51:37:A7:4E:EE:63:FE:57:57:97:56:1D
Certificate issuer: /CN=169dc1432c686f1ed57ec0cae31586103edbf2c7
Certificate serial: 0186020FB1B029ACE8FED63903E05B19C52B
Authority key identifier: 16:9D:C1:43:2C:68:6F:1E:D5:7E:C0:CA:E3:15:86:10:3E:DB:F2:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp3BQyxobx7VfsDK4xWGED7b8sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c2376d-511d-49b5-b9c1-878665838a60/1/0AaWNg4FDHFRN6dO7mP-V1eXVh0.roa
Signing time: Mon 30 Jan 2023 09:43:48 +0000
ROA not before: Mon 30 Jan 2023 09:43:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 185.196.63.0/24 maxlen: 24
195.242.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:0f:b1:b0:29:ac:e8:fe:d6:39:03:e0:5b:19:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169dc1432c686f1ed57ec0cae31586103edbf2c7
Validity
Not Before: Jan 30 09:43:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d00696360e050c715137a74eee63fe575797561d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:2a:a5:9c:d4:72:6a:61:7b:d6:a0:c7:9d:
c6:75:58:7e:7d:79:57:14:a6:68:50:a8:2e:7f:76:
22:e3:3c:ed:8c:c5:d4:94:8a:e7:a7:37:2a:1b:0e:
08:4b:18:80:55:38:78:3a:1b:bf:da:82:5a:de:99:
b3:2f:a4:c4:9d:fe:d0:d8:4a:f3:fb:73:16:6f:30:
51:07:65:34:64:7c:be:af:14:6f:60:1c:22:4d:d8:
95:48:12:fb:31:8c:43:59:8e:82:41:ad:0c:86:b4:
0d:49:00:e2:9e:f5:ce:d9:b2:5f:02:2f:55:60:fa:
e9:f4:fa:ec:3b:b1:ff:d4:c4:df:16:9b:5f:43:4f:
59:eb:1e:10:87:72:4c:01:cd:c6:d1:71:25:bb:e9:
b1:d5:60:32:d8:bf:3a:39:e5:31:f1:ce:9d:ae:bf:
81:0e:f6:8a:b0:f6:9f:f2:b6:38:5f:69:c1:b4:ad:
69:9f:fe:50:b3:61:c9:fe:a9:24:ac:77:bd:8e:5a:
5c:0f:92:db:ed:59:a8:88:b6:1b:10:cd:8d:25:66:
f6:0c:ae:c6:eb:e2:a8:1a:5b:76:2a:3b:ea:3e:71:
2e:47:23:ba:08:c7:3c:88:26:bb:33:7b:b6:cc:93:
be:40:37:75:4e:4c:33:bd:1c:9d:9e:75:d3:e2:68:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:06:96:36:0E:05:0C:71:51:37:A7:4E:EE:63:FE:57:57:97:56:1D
X509v3 Authority Key Identifier:
keyid:16:9D:C1:43:2C:68:6F:1E:D5:7E:C0:CA:E3:15:86:10:3E:DB:F2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp3BQyxobx7VfsDK4xWGED7b8sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c2376d-511d-49b5-b9c1-878665838a60/1/0AaWNg4FDHFRN6dO7mP-V1eXVh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c2376d-511d-49b5-b9c1-878665838a60/1/Fp3BQyxobx7VfsDK4xWGED7b8sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.63.0/24
195.242.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:bc:e8:71:2d:22:f4:02:a5:c5:d8:cf:32:4d:35:81:36:2e:
2e:b9:78:40:fd:c5:a2:e7:4e:8d:ac:48:98:fd:bf:49:5b:80:
53:ef:99:18:34:cc:ef:db:e0:e4:3a:15:22:7e:57:97:4a:80:
83:c3:4a:e1:11:44:31:72:27:64:b2:2e:be:b4:5b:49:52:90:
fd:30:b4:c3:d0:0f:ae:4e:d6:29:14:66:5e:17:a2:53:09:04:
b6:67:ca:4a:fa:41:d4:3f:76:50:71:78:2b:fb:93:2c:4d:64:
ad:af:d9:d9:70:78:e8:9d:c2:11:88:b9:72:01:86:ef:b8:99:
64:df:70:8e:48:4f:55:a0:64:ea:de:ae:02:e6:02:7e:a3:c9:
a1:48:a4:9f:27:ef:a7:44:ce:7a:a8:17:41:b9:4f:9d:17:c7:
84:12:53:34:d8:74:20:ed:ec:87:1d:8b:21:7e:63:94:da:bb:
23:68:ad:c9:72:20:74:42:79:e2:52:35:6b:74:2f:5a:94:6a:
29:cc:54:50:9d:54:3c:8f:f8:13:7d:d3:a0:05:8b:db:97:00:
66:79:db:e9:17:ba:36:18:b9:0b:28:7c:a1:43:4d:fc:93:49:
8c:ca:7f:31:7f:85:97:a7:b8:be:2a:9f:7b:ae:b1:7a:8e:66:
0f:fe:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:55 2024 by rpki-client on console-fra.rpki-client.org