Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/ckqogFA_y6Z85LW5zQMMrO4XUJU.roa
File: ckqogFA_y6Z85LW5zQMMrO4XUJU.roa (raw, json)
Hash identifier: wMH3BwiYB4gFbQ/9mwF8FPPOnNx30K+fvSiyotjRq50=
Subject key identifier: 72:4A:A8:80:50:3F:CB:A6:7C:E4:B5:B9:CD:03:0C:AC:EE:17:50:95
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 018F0A834F5E167DE1CE8E0BBF3FB4BDA6A7
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/ckqogFA_y6Z85LW5zQMMrO4XUJU.roa
Signing time: Tue 23 Apr 2024 10:32:08 +0000
ROA not before: Tue 23 Apr 2024 10:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49608
IP address blocks: 185.233.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 May 2024 16:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:83:4f:5e:16:7d:e1:ce:8e:0b:bf:3f:b4:bd:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Apr 23 10:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=724aa880503fcba67ce4b5b9cd030cacee175095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:0a:ba:13:f5:e0:b7:d4:8f:34:b7:f5:8e:
92:e5:b8:b6:b5:a8:6b:5b:a6:98:1c:66:3f:78:91:
52:64:7a:72:01:72:f9:c4:a5:4c:5d:6a:d8:62:3e:
08:9a:1d:86:bd:e0:8f:74:39:1a:74:e0:26:00:5a:
5d:5f:53:98:63:48:e4:57:f4:9e:60:92:c1:0f:fe:
54:89:eb:8d:51:1a:3e:9c:37:31:ad:f6:9f:bb:ca:
b1:fd:57:50:b5:5f:d8:3a:58:3e:e9:e9:c5:5d:d6:
be:78:86:bc:e2:5b:0f:03:b0:44:56:5d:2f:d1:41:
ea:01:6c:dc:57:34:d8:c6:3e:3a:69:d8:e4:28:d4:
3a:77:48:3e:ed:24:3f:16:29:35:6b:0a:d9:1c:d7:
8c:89:a8:3a:17:f7:bd:c4:66:2d:a9:41:d5:d1:8a:
0f:87:21:08:15:6b:7f:fe:2d:6f:db:a6:1b:7b:74:
e4:ec:f0:3a:e6:3c:e5:83:b6:21:3e:23:bf:ba:91:
cf:12:b1:08:68:0d:46:14:d1:bf:4c:9b:60:7c:ae:
41:32:3e:8b:e3:fb:82:5f:bf:28:d0:82:cd:2e:b3:
77:64:0f:df:e4:e9:52:e3:80:af:88:62:1e:d8:d8:
9a:d6:ee:78:aa:88:97:0d:18:8b:1f:63:fc:d9:e5:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:A8:80:50:3F:CB:A6:7C:E4:B5:B9:CD:03:0C:AC:EE:17:50:95
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/ckqogFA_y6Z85LW5zQMMrO4XUJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a5:76:a3:24:60:4e:62:96:eb:7c:d7:ea:4e:6e:35:21:ff:
a5:2b:e1:40:94:75:e9:0a:1e:27:02:c5:8f:69:ac:a9:33:c2:
a3:91:f5:df:c5:7c:7e:74:88:53:9f:7b:be:ed:8f:af:c5:90:
6f:ed:46:b9:aa:2b:06:52:77:f6:b6:58:c6:d3:54:8b:b0:e9:
a7:3c:78:15:5b:aa:4d:c1:4a:14:ce:10:14:8a:a7:f6:a8:ee:
5b:ae:08:19:a0:6c:0a:74:4f:6b:1d:73:80:81:e7:d1:49:1d:
90:8d:11:50:ee:88:0b:da:c1:23:d0:69:f0:7b:e8:40:1c:fd:
95:d7:75:cc:11:a3:ad:aa:1d:c0:5b:9a:0e:6a:44:7b:b6:a1:
ad:da:d6:a9:4d:d8:9d:da:8f:bb:ef:dc:89:e0:78:9b:a7:d2:
18:bb:f1:7b:5c:98:37:74:fe:ef:f2:9e:43:bd:cd:a6:8e:59:
54:15:7c:22:58:80:99:13:2f:56:ee:3f:62:8d:fe:21:14:06:
de:b5:52:b7:fa:02:2d:60:8d:53:59:c5:7a:ff:26:c8:f3:1a:
6c:f1:14:4b:93:2a:f3:5a:70:db:ff:17:f9:04:f6:65:48:58:
69:88:e9:cb:18:6b:95:b3:8a:53:33:db:08:9b:44:6f:cb:44:
1a:de:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org