Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/3shWX3DxrNtCzPwSeGAt19cpNn4.roa
File: 3shWX3DxrNtCzPwSeGAt19cpNn4.roa (raw, json)
Hash identifier: 0PPh0ex7zNZYkTFsrrjmThrlWyhkD1FG7BfX/R4gp/Q=
Subject key identifier: DE:C8:56:5F:70:F1:AC:DB:42:CC:FC:12:78:60:2D:D7:D7:29:36:7E
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 018F70BABADAEF2B4E3CE160892DB9CE08A7
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/3shWX3DxrNtCzPwSeGAt19cpNn4.roa
Signing time: Mon 13 May 2024 06:53:56 +0000
ROA not before: Mon 13 May 2024 06:53:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.167.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 14:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:ba:ba:da:ef:2b:4e:3c:e1:60:89:2d:b9:ce:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: May 13 06:53:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dec8565f70f1acdb42ccfc1278602dd7d729367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:36:5d:b2:0b:e6:42:02:5c:2d:9f:b7:af:
64:d4:f4:e0:63:c0:e2:b5:ef:67:d6:9b:dd:75:e3:
a1:e6:db:2e:54:11:04:80:a7:cd:a4:a4:e7:b2:28:
ee:07:d7:dc:c7:ac:c6:31:c4:25:d5:47:93:0e:0b:
2d:75:de:e0:8d:4c:1e:cc:66:cc:00:a5:e1:1d:8b:
82:fa:bb:0f:3b:21:69:ce:86:25:51:8f:0d:ee:83:
01:ed:ad:30:bc:b9:ea:43:58:7d:b4:52:98:0d:28:
86:0a:41:e6:59:64:8f:42:25:af:5b:57:85:3d:1a:
82:9b:f1:e4:33:ce:22:35:19:31:3d:31:6b:46:62:
d4:17:98:20:23:4d:59:d1:52:1b:19:cf:76:69:76:
dc:14:e4:f6:64:e4:59:65:ed:49:87:59:d4:38:c7:
1a:5d:6a:f1:41:e0:79:2e:bb:fa:da:bd:b1:da:9d:
75:b8:96:05:e3:0c:ce:6b:44:8e:cc:c6:73:dd:56:
fc:d2:ca:66:f0:05:d7:80:0b:f0:20:df:a2:b9:4c:
21:38:09:1e:b9:be:dd:97:ad:9a:3d:78:5e:b4:2c:
30:e3:81:69:46:87:bb:7c:b3:81:3b:93:14:ca:76:
78:e1:f7:8f:9a:4c:51:ff:67:ee:eb:a0:5d:1f:b5:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:56:5F:70:F1:AC:DB:42:CC:FC:12:78:60:2D:D7:D7:29:36:7E
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/3shWX3DxrNtCzPwSeGAt19cpNn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:55:55:71:0c:01:64:86:ed:95:39:fb:47:0d:5c:ca:b6:0f:
4c:e6:be:ab:c3:39:91:33:cb:76:dd:f0:50:7b:65:ff:fb:b7:
a7:09:61:cd:a5:2f:2c:e3:42:89:20:9d:e8:1b:d4:34:5c:02:
71:4d:41:b7:1c:35:dd:11:2d:ee:50:63:b8:f3:71:36:5d:5e:
72:f4:02:99:f2:63:8d:3d:0b:19:f4:44:36:c5:36:4f:7c:ef:
26:d2:81:4c:d2:fc:d8:ce:99:be:68:2e:47:cf:98:91:cf:94:
ec:34:25:01:8c:7c:b5:d4:c3:18:5b:b3:90:30:e3:5e:4d:7d:
34:50:ef:ca:00:09:88:a6:e2:8d:6b:0e:9e:90:9a:99:33:e0:
c5:ec:60:6c:1f:fe:a6:b6:2f:b9:eb:72:92:f6:54:43:bc:80:
d9:1a:5f:fc:21:fb:0a:ed:b3:85:1c:e9:47:10:3f:88:6f:d4:
1f:27:bc:8b:f6:95:a6:57:48:f0:c1:17:61:b2:ae:89:f7:f8:
7d:8e:e2:ba:2d:ce:93:8b:67:5d:b0:49:b4:7f:94:44:f8:ac:
12:7c:e0:49:c9:52:6e:87:17:f1:d6:58:08:10:14:7c:45:f5:
98:1c:d9:0d:31:de:8d:97:76:00:dd:23:cc:3b:27:3f:6b:87:
4d:5d:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:36:44 2024 by rpki-client on console-fra.rpki-client.org