Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/3oYoY6oOUpiGkFOf3Y51JhflmRo.roa
File: 3oYoY6oOUpiGkFOf3Y51JhflmRo.roa (raw, json)
Hash identifier: ie/pVKpaavyBIOd3w29WGuHUHkJ+zcxlaSm7ZszSrBE=
Subject key identifier: DE:86:28:63:AA:0E:52:98:86:90:53:9F:DD:8E:75:26:17:E5:99:1A
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018B4DBE8F51DF040F5F2CC3DCCC23B94E12
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/3oYoY6oOUpiGkFOf3Y51JhflmRo.roa
Signing time: Fri 20 Oct 2023 15:40:15 +0000
ROA not before: Fri 20 Oct 2023 15:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21276
IP address blocks: 185.110.92.0/24 maxlen: 32
93.187.111.0/24 maxlen: 32
185.110.95.0/24 maxlen: 32
2a14:5400::/32 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:be:8f:51:df:04:0f:5f:2c:c3:dc:cc:23:b9:4e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Oct 20 15:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de862863aa0e52988690539fdd8e752617e5991a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:47:75:19:31:cc:37:c6:6e:28:02:66:b2:
e8:1e:57:dc:10:a2:be:85:6c:c0:4f:2d:67:3d:80:
d0:7f:ad:d4:0f:33:07:a9:e6:9d:78:3e:97:f5:f4:
59:e6:bb:05:b5:94:5c:58:db:c6:72:38:dc:40:e3:
01:35:66:be:9a:db:11:8f:20:c5:ed:70:5f:4b:3c:
3e:cd:0d:54:8b:98:f5:9f:fa:6b:f1:a7:c6:ef:f0:
24:d5:c2:bf:80:9b:29:68:c1:cf:30:86:17:1d:36:
76:b0:06:85:7e:f0:2d:81:f9:bb:68:be:e2:da:57:
d8:26:f9:21:01:3d:84:28:60:e5:8e:b5:b8:22:4a:
3a:57:aa:39:df:59:a1:a7:7a:40:96:1d:2b:27:2c:
24:3b:76:aa:27:e2:74:12:5e:38:eb:c2:f2:2b:b1:
e5:e3:e9:80:a1:93:5b:2a:70:13:1e:3c:99:f5:23:
bb:37:c2:f9:c5:7b:fd:75:bd:be:1b:7b:26:76:0e:
29:09:61:80:22:5d:9e:d9:aa:d0:ff:55:f4:e3:5f:
a2:8b:6a:2a:a2:6a:33:d7:86:b3:30:f6:53:d5:6a:
c5:42:b2:c8:c6:fb:b8:3a:2c:cd:2e:4a:e6:b2:2a:
b6:c0:3d:d9:4b:fd:8b:39:41:f9:18:b7:8a:39:fd:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:86:28:63:AA:0E:52:98:86:90:53:9F:DD:8E:75:26:17:E5:99:1A
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/3oYoY6oOUpiGkFOf3Y51JhflmRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.111.0/24
185.110.92.0/24
185.110.95.0/24
IPv6:
2a14:5400::/32
Signature Algorithm: sha256WithRSAEncryption
02:60:06:24:7a:14:13:50:bc:3c:a6:4f:ba:ca:dc:f3:48:e0:
ca:53:c1:5d:42:7b:09:45:b1:9d:6b:7f:1c:32:9e:02:35:6e:
de:c0:8e:c2:e1:ce:ca:82:41:05:70:95:30:ea:55:dd:44:e2:
bf:c9:8c:38:b7:48:43:24:04:03:53:82:74:3a:29:83:b2:6e:
b0:fe:ef:cf:21:71:53:26:4d:f1:2d:ab:fc:8e:67:2d:c1:44:
1f:01:dc:62:be:e7:f6:df:53:de:ca:c7:0d:71:04:2a:8c:68:
fa:e3:cc:f3:56:93:6b:47:74:cc:15:16:d2:bf:81:7a:c7:95:
2a:c9:a3:9d:ef:50:09:3d:88:9f:af:69:37:98:5a:de:14:ee:
97:2a:d9:fc:18:7e:64:b5:4d:c2:a9:c0:c5:da:05:0a:6d:0f:
da:76:5e:59:2b:24:b7:2a:ab:16:eb:a3:9b:e5:c5:5f:7f:d6:
15:55:49:3e:39:52:dd:13:4e:05:f9:65:23:7a:81:2f:cb:b0:
15:92:8e:72:e1:3f:3e:41:7b:0d:af:54:d9:98:ff:11:02:3a:
ed:f0:9d:e2:63:a1:3e:93:e3:56:ef:16:22:58:f9:22:3b:65:
9f:db:79:0a:2b:5c:ea:77:70:b5:0e:bb:b5:01:5e:76:75:01:
42:34:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:56 2024 by rpki-client on console-ams.rpki-client.org