Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/0N96Y0uj0m86Sk3IKw6ZCUrV8u8.roa
File: 0N96Y0uj0m86Sk3IKw6ZCUrV8u8.roa (raw, json)
Hash identifier: lIqCSCbFYld1THrznRkJvQd37X6T3vyIyv/c0XU7AME=
Subject key identifier: D0:DF:7A:63:4B:A3:D2:6F:3A:4A:4D:C8:2B:0E:99:09:4A:D5:F2:EF
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 01865ED276484A6E957AC7115C9D8971D57F
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/0N96Y0uj0m86Sk3IKw6ZCUrV8u8.roa
Signing time: Fri 17 Feb 2023 10:01:36 +0000
ROA not before: Fri 17 Feb 2023 10:01:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.137.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:d2:76:48:4a:6e:95:7a:c7:11:5c:9d:89:71:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Feb 17 10:01:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0df7a634ba3d26f3a4a4dc82b0e99094ad5f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a8:f4:ff:28:00:74:c6:9d:30:2a:83:f4:67:
98:4d:37:c8:3e:a0:50:13:91:3f:3d:e9:33:e1:d2:
73:14:79:f7:2f:8b:70:cc:37:78:29:da:d7:cb:c3:
a6:da:ce:e1:45:6d:34:dd:b7:c2:73:3e:e7:83:e3:
be:07:14:85:c4:b2:cf:9a:58:f5:83:23:65:df:43:
5d:99:62:7e:6c:90:d2:26:de:3c:2b:41:19:41:5c:
0e:37:3d:4a:79:b1:7d:b3:a8:7a:a3:d6:9c:99:14:
55:ae:f1:2e:0c:54:23:b4:b9:7d:a0:2b:2d:fb:aa:
43:d1:0c:32:01:cd:7e:73:63:63:5e:39:33:fa:7b:
ab:75:17:4d:d3:0f:76:b0:87:f9:cc:38:23:e4:b1:
e7:69:67:e1:2a:04:4f:54:0c:dd:90:85:f2:67:9d:
b8:22:60:f6:bf:5a:12:6f:00:ab:44:22:38:70:9a:
45:ea:e6:cf:29:64:28:1a:98:86:78:0f:be:e0:6b:
53:15:dc:49:de:5a:46:a0:e9:62:28:82:12:13:39:
fe:95:cf:6a:0b:38:be:c4:4d:22:4d:ec:a9:46:04:
c6:44:86:27:30:5b:8c:a1:3d:a6:3a:06:af:dc:9c:
fc:00:b4:ed:24:c3:cc:a3:dd:ba:36:3c:4a:2f:ae:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:7A:63:4B:A3:D2:6F:3A:4A:4D:C8:2B:0E:99:09:4A:D5:F2:EF
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/0N96Y0uj0m86Sk3IKw6ZCUrV8u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9f:56:6e:11:f9:b6:26:20:c7:98:35:f0:7b:b0:b8:e0:03:
53:c8:3b:38:82:86:c3:1b:6a:62:56:ba:55:91:2a:c3:41:32:
a0:47:bf:fa:0f:d8:3a:86:b6:e3:d8:8e:b1:a3:18:5f:21:d0:
e6:89:e5:b0:6e:a9:43:6f:4c:34:0b:69:f7:fb:0a:bc:89:ef:
bf:87:1c:f4:b6:77:4f:13:5c:8e:05:bf:f4:e5:c1:d7:2b:4c:
28:8c:5e:a1:ea:70:25:b6:a9:eb:b8:bb:d4:ec:b0:74:1f:84:
49:a8:36:a8:e7:47:f0:cf:dd:fd:58:4d:b9:88:ac:ef:b8:cd:
4a:2c:07:ef:06:c3:fe:6c:ae:fa:a2:c1:cd:3f:86:97:e1:a7:
09:24:86:db:04:06:7d:58:17:cd:ae:a7:90:97:50:26:1b:d5:
45:13:5b:e1:93:3a:4f:cc:0c:5c:bb:80:aa:0c:f3:e3:ce:3b:
2a:1d:d3:e5:b5:67:57:0e:39:bf:a0:cf:5b:64:9d:b4:ad:00:
cb:34:48:54:b6:d0:63:07:5e:e8:cb:88:de:79:4d:91:4b:b9:
15:48:34:e6:18:8d:3e:71:1e:cb:99:26:b0:5e:ce:dc:7a:42:
c5:9a:0b:8e:7f:e7:9b:36:c8:5c:7f:04:61:7f:00:c3:00:dd:
da:a4:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:38 2024 by rpki-client on console-fra.rpki-client.org