Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/B0wmvqdBueU4qvHuiTqq0TTcnnc.roa
File: B0wmvqdBueU4qvHuiTqq0TTcnnc.roa (raw, json)
Hash identifier: jMTNXzM/8h25OUf5NpLqORg6KEqNH5Gl0y0+jGTT1cg=
Subject key identifier: 07:4C:26:BE:A7:41:B9:E5:38:AA:F1:EE:89:3A:AA:D1:34:DC:9E:77
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 018E320496AFFE9C237796AF4DAB09F385F0
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/B0wmvqdBueU4qvHuiTqq0TTcnnc.roa
Signing time: Tue 12 Mar 2024 09:35:45 +0000
ROA not before: Tue 12 Mar 2024 09:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 11:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:04:96:af:fe:9c:23:77:96:af:4d:ab:09:f3:85:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Mar 12 09:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=074c26bea741b9e538aaf1ee893aaad134dc9e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:d9:24:5b:06:d1:3d:72:48:f1:e8:9d:fc:
78:ba:56:dc:81:59:2a:b2:01:a2:97:db:9a:fd:0d:
b0:80:2f:d0:7c:5e:85:ba:ff:cd:bc:c2:c5:36:c5:
60:0d:d8:46:4d:c2:65:66:67:2a:1e:11:2c:81:40:
21:ce:49:99:fe:1c:06:f1:87:e6:9d:ba:85:ed:89:
e0:a5:15:6d:ed:58:b0:86:ea:ed:a5:09:73:5b:4b:
de:44:ae:91:9b:f6:f0:80:90:fe:f3:f9:ec:79:81:
a1:60:96:59:15:05:3c:64:b1:dd:37:c8:04:d7:db:
aa:33:89:aa:cf:c8:6d:ad:5d:56:1b:fd:e4:3b:e6:
98:23:bd:5a:ae:53:dc:e5:6d:53:db:08:a8:8c:27:
27:57:7a:39:b7:d3:f4:79:69:c5:36:be:76:29:76:
55:f4:28:30:1a:0b:24:26:d2:3e:d1:56:3b:70:22:
ef:4f:0d:4b:0f:4f:3f:f9:d0:2f:97:94:d7:61:8d:
4d:53:43:4f:69:eb:c5:13:61:27:b7:e6:dd:a2:ba:
99:03:ef:6c:f4:84:17:d2:87:fe:40:55:74:5f:5f:
a5:a9:04:e2:81:ff:9b:8f:36:5d:cf:d0:07:bd:8f:
b7:72:59:97:f3:0d:4a:f2:d1:45:bc:8e:be:28:8d:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:26:BE:A7:41:B9:E5:38:AA:F1:EE:89:3A:AA:D1:34:DC:9E:77
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/B0wmvqdBueU4qvHuiTqq0TTcnnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b3:c9:9c:5a:cd:12:46:53:60:d6:3a:3c:b9:a7:4c:28:7f:
54:08:35:5f:b2:00:d2:13:1f:c2:34:83:ca:f1:c9:d8:4a:3c:
bf:f1:ab:12:f5:b8:50:1e:10:40:d6:a9:f2:a7:54:9b:18:68:
db:af:1f:c4:14:56:ca:61:39:00:52:35:be:f5:ff:ff:44:08:
36:d1:45:a2:7b:57:7b:56:4f:ec:f3:1b:26:b0:8e:46:8f:41:
9b:c8:a5:d4:70:b4:5c:65:2d:a0:51:0a:df:e8:c9:15:55:ea:
43:9f:ce:e7:55:0c:ad:62:f8:18:cf:21:54:a5:39:f8:af:f8:
79:2a:fa:99:2d:30:76:67:cb:4c:2a:49:bc:14:c4:14:06:13:
e9:dd:9d:34:10:20:e6:75:5d:5a:c5:6a:d0:70:64:fe:9d:13:
d1:9f:f5:3c:e1:98:04:be:b1:d3:f7:ff:54:20:7a:5c:1c:d0:
c1:b5:f4:c8:5e:14:e3:f4:ed:fc:6e:b5:8f:fe:b3:75:cf:aa:
40:28:5b:b5:c9:fb:14:06:2c:e2:80:9f:7e:97:44:23:78:7e:
8e:d5:36:c8:62:5f:44:69:39:93:ba:03:34:24:14:aa:54:00:
d8:a3:17:bf:cb:44:18:b0:f5:db:3b:f4:60:cc:14:1f:fb:1d:
52:92:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-fra.rpki-client.org