Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/D3T6WHi1m9x5rp5i5mDWRV6t3Ds.roa
File: D3T6WHi1m9x5rp5i5mDWRV6t3Ds.roa (raw, json)
Hash identifier: RuDtgeu+7EVbYAWZDab5s4iQsCIkxRjjoPwhH05EsC0=
Subject key identifier: 0F:74:FA:58:78:B5:9B:DC:79:AE:9E:62:E6:60:D6:45:5E:AD:DC:3B
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 018CC86F6FB644A3E55F7F8267F8C1D8C446
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/D3T6WHi1m9x5rp5i5mDWRV6t3Ds.roa
Signing time: Tue 02 Jan 2024 04:29:55 +0000
ROA not before: Tue 02 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 10:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6f:b6:44:a3:e5:5f:7f:82:67:f8:c1:d8:c4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Jan 2 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f74fa5878b59bdc79ae9e62e660d6455eaddc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:bb:9e:c4:6f:36:4d:84:99:d0:05:54:02:
4d:7b:6b:8a:6d:da:1b:7a:d9:d9:ce:47:26:fc:42:
a9:b7:22:70:af:79:bf:52:3d:51:fc:96:c8:7a:3a:
39:b3:4b:ad:a2:09:75:47:72:ef:9e:cf:a3:22:ac:
fe:08:dc:70:52:4a:7a:48:5e:f1:24:73:5f:52:10:
77:4e:55:75:35:33:c7:4e:4e:50:3b:fd:73:25:f8:
36:df:47:f5:6b:1c:85:43:d9:de:cb:fb:0c:19:b1:
a2:02:dd:db:23:0f:ee:40:8b:ef:2a:9e:31:49:5c:
8e:76:d6:20:f5:c1:fc:e7:a6:58:e9:be:39:28:7a:
09:17:57:b6:fe:5c:3d:f1:15:b6:de:ae:9f:48:db:
84:98:0e:a4:c2:dc:d1:d2:51:cf:d3:1a:e5:41:c4:
ff:47:93:01:b0:f1:13:b4:24:aa:9a:56:8b:b3:d5:
38:c9:74:66:ba:72:39:40:63:44:cb:9c:c2:45:79:
49:23:c1:18:63:52:72:ad:c0:1c:01:bc:8a:fb:d1:
24:fe:63:73:b4:26:1c:1a:38:97:a8:c7:fe:46:29:
16:7e:b2:2d:d4:2b:76:9a:53:09:54:a6:16:33:b2:
ad:25:4f:c2:77:24:29:f3:b2:0d:97:5d:95:d7:07:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:FA:58:78:B5:9B:DC:79:AE:9E:62:E6:60:D6:45:5E:AD:DC:3B
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/D3T6WHi1m9x5rp5i5mDWRV6t3Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:29:d4:06:30:3d:34:96:c5:2f:22:63:af:e4:0c:ab:ef:a1:
e5:b1:4e:13:03:87:4f:0a:e7:16:29:b7:52:bd:40:e7:50:97:
cf:78:cc:45:25:ba:bb:cb:d4:d7:d9:01:c6:52:9a:4c:b8:a2:
05:77:c8:2f:ec:6e:37:41:de:bf:2b:d5:33:4e:45:3e:02:9a:
a6:59:54:95:14:52:51:6c:81:54:c2:35:2a:a5:10:61:c5:6e:
e2:56:6a:fa:49:7c:7d:3c:b9:59:03:d1:70:83:a4:ef:6e:b0:
12:88:4a:12:93:f7:da:5b:e8:6b:c9:d0:bf:4b:1f:50:56:ec:
59:6f:04:b8:bc:4c:c5:a4:bc:5b:d7:4f:34:63:4a:3b:16:e0:
e0:06:c3:89:f3:ba:6a:2e:3e:76:4d:1c:00:2b:82:46:05:65:
cd:b2:12:6f:e9:49:10:a8:9d:b2:01:21:66:bd:91:cc:78:3d:
92:b9:f0:49:76:3a:ad:c4:67:c5:b4:54:f5:b1:e3:e1:41:ca:
a9:e6:e8:72:a2:a4:97:3d:3e:22:f1:18:b4:15:a9:11:a3:41:
eb:73:12:22:05:89:69:16:2d:3d:06:06:ac:f5:12:5a:91:25:
d4:d8:93:73:ce:b3:ec:5d:88:4f:f8:5f:be:61:1b:6e:5e:eb:
4e:d4:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:28 2024 by rpki-client on console-ams.rpki-client.org