Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/SDouhKytCdrcNakZZqPXFnJu4fU.roa
File: SDouhKytCdrcNakZZqPXFnJu4fU.roa (raw, json)
Hash identifier: 6CHQcN5VtJqOo05GceB+kzR2E/wm19XsNDZCVRlzQAs=
Subject key identifier: 48:3A:2E:84:AC:AD:09:DA:DC:35:A9:19:66:A3:D7:16:72:6E:E1:F5
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 018B9F806EA262EDB6083ED9F0ABCC9123B4
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/SDouhKytCdrcNakZZqPXFnJu4fU.roa
Signing time: Sun 05 Nov 2023 12:41:16 +0000
ROA not before: Sun 05 Nov 2023 12:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206060
IP address blocks: 185.197.178.0/24 maxlen: 24
185.197.179.0/24 maxlen: 24
185.197.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 15:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9f:80:6e:a2:62:ed:b6:08:3e:d9:f0:ab:cc:91:23:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Nov 5 12:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=483a2e84acad09dadc35a91966a3d716726ee1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:26:17:d3:d3:31:71:81:16:38:5a:c1:5b:
fc:53:be:fc:c4:71:a1:fd:dd:f8:cc:f7:b1:04:9d:
51:3a:f9:bc:06:57:b8:d1:6b:30:95:aa:a5:76:6e:
5d:d9:1f:96:2c:d8:da:db:97:32:cc:ab:92:8e:54:
72:13:4b:2f:88:63:fd:b6:b1:b5:e4:14:da:bf:52:
7c:47:2c:e2:63:ab:9c:89:dc:72:57:5b:60:81:f0:
79:74:d8:52:61:76:14:cf:48:91:b8:f8:8c:2a:9d:
c2:3f:58:35:e2:81:bf:7c:33:fe:b8:24:0c:7c:78:
4f:63:f7:84:1a:6a:22:10:ce:e7:e6:1e:85:72:ba:
20:b9:f2:de:0f:04:4f:db:1b:fe:ef:0d:c4:61:eb:
05:12:f2:e7:0a:aa:32:9c:9c:6c:72:cd:4a:8e:2b:
b0:b4:08:4c:9f:56:85:0c:a0:6d:65:e4:6a:f2:9e:
1a:f5:93:91:22:c1:72:0f:6f:bc:7b:cf:f9:73:09:
19:ac:c3:52:be:6c:49:b1:68:e8:db:96:51:c3:a7:
e1:3a:85:a7:3b:88:d9:06:4d:5d:2e:a0:2f:c2:fe:
29:f7:db:d7:fc:f1:b8:78:b5:c1:49:9d:97:83:bd:
23:26:28:31:6e:d4:e8:74:4f:ff:e3:bd:e0:3e:32:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3A:2E:84:AC:AD:09:DA:DC:35:A9:19:66:A3:D7:16:72:6E:E1:F5
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/SDouhKytCdrcNakZZqPXFnJu4fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.176.0/24
185.197.178.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:6c:a7:17:5c:e2:67:ff:a0:97:16:a4:eb:66:1d:17:8a:4c:
87:0a:fe:48:3b:3f:8a:8f:6f:07:93:47:98:ae:e1:60:a4:ff:
bb:cb:cc:71:72:d9:fb:27:68:66:94:1a:64:e3:91:68:c5:e7:
1a:99:b0:14:aa:09:81:2c:b3:d8:96:4f:9c:a9:6d:cf:e7:40:
ae:dc:e0:b1:2d:0a:c4:21:f1:c5:86:2f:b4:06:a1:70:9b:f8:
05:98:15:d0:4e:75:63:70:38:85:92:c4:25:13:e5:6e:cd:84:
61:da:a7:ac:05:2a:92:f3:f4:8a:61:1d:1c:9b:a3:06:a8:3b:
da:81:b2:2d:41:07:10:48:af:53:9b:74:4e:15:48:80:a2:e7:
35:77:d1:1a:ed:aa:93:42:4e:13:67:f0:8a:ba:14:f8:6e:d7:
df:36:62:a9:1e:bd:03:26:44:93:e3:c1:57:fa:89:78:93:87:
02:30:c8:31:aa:eb:3a:6e:f2:51:46:c6:f5:1f:81:38:d2:42:
87:1a:71:2b:83:5d:f7:d0:7c:c5:bb:de:54:49:e1:85:0c:a8:
61:2c:10:85:4e:80:a3:19:c7:ce:ce:db:32:e6:5a:ed:c5:79:
cd:36:e4:21:86:ab:35:41:dd:98:cd:cd:7a:04:07:0a:8b:fd:
cb:8a:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:47 2024 by rpki-client on console-ams.rpki-client.org