Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/4eE3vqYOi8b4yM_kPUJRcLszEjA.roa
File: 4eE3vqYOi8b4yM_kPUJRcLszEjA.roa (raw, json)
Hash identifier: ETqk8jLxlfl5WyAk2qTlLlZj3c/U5jZrvYREbjkDTpo=
Subject key identifier: E1:E1:37:BE:A6:0E:8B:C6:F8:C8:CF:E4:3D:42:51:70:BB:33:12:30
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 018CC7257EA273A1C5D3286CBCD68B3B94D9
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/4eE3vqYOi8b4yM_kPUJRcLszEjA.roa
Signing time: Mon 01 Jan 2024 22:29:32 +0000
ROA not before: Mon 01 Jan 2024 22:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.167.232.0/24 maxlen: 24
185.167.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 08:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:7e:a2:73:a1:c5:d3:28:6c:bc:d6:8b:3b:94:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 1 22:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e137bea60e8bc6f8c8cfe43d425170bb331230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:89:c6:0a:19:77:f3:53:ce:f3:bd:2b:db:
db:60:a1:a9:16:9f:9f:34:1e:2d:d9:47:56:70:e9:
50:7b:a6:cb:46:29:ab:4f:8b:65:fe:86:63:92:ae:
2d:00:b1:24:a1:a7:9a:9f:b2:a8:d9:ea:0a:89:6b:
a0:2c:82:35:11:49:a0:71:24:03:ed:c9:55:3d:a8:
ff:2f:57:b4:64:6a:c5:26:dd:49:ab:ea:8b:bd:74:
cf:88:50:d8:a2:fa:e3:9d:6a:d1:30:2a:84:f8:53:
89:0d:5a:95:b5:39:0d:2e:a4:17:7b:67:a9:95:be:
2a:55:3e:78:c3:3b:77:5b:b8:4f:47:74:0b:97:b9:
ed:13:3d:de:4f:3f:c5:01:de:14:d4:9f:a0:90:4b:
6a:01:09:04:bb:ca:05:f9:6f:7e:8b:4f:b0:90:61:
8f:d2:34:2b:48:c6:f1:a4:91:a1:ef:71:0d:aa:6f:
9e:d0:99:da:ae:74:37:31:0b:8a:8c:b6:26:03:da:
b3:cc:e0:57:ab:b4:da:c4:46:9d:89:1e:10:38:13:
5c:c7:b7:79:e9:d3:c1:e7:d2:45:5d:ac:b1:de:21:
38:45:86:dd:d9:5e:16:a2:4b:35:97:c7:f4:f4:71:
27:f0:ff:e1:fc:b3:b5:a7:a7:8e:22:92:ee:c9:c5:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E1:37:BE:A6:0E:8B:C6:F8:C8:CF:E4:3D:42:51:70:BB:33:12:30
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/4eE3vqYOi8b4yM_kPUJRcLszEjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.232.0/23
Signature Algorithm: sha256WithRSAEncryption
71:b1:03:75:c9:18:85:9a:88:ac:9d:7c:f7:73:80:27:52:34:
98:a3:9c:f7:91:6e:a4:c6:b6:bc:4f:5d:45:ee:31:c4:11:a7:
5e:06:a0:ab:f4:6e:1a:f4:ea:13:2a:4c:11:f2:14:7b:8a:09:
a6:1c:2b:c1:21:db:86:d9:1e:46:8e:60:3e:73:0e:c4:f4:01:
24:e4:1f:c5:d3:f0:e0:3b:91:cd:d2:d9:e0:81:3b:fb:57:ca:
b5:fe:40:f5:bc:fd:4b:13:8a:fe:e8:e2:0b:5a:7d:7b:ef:b4:
50:36:d2:5d:de:3c:05:4d:64:ab:c6:71:3a:96:3d:d8:e9:53:
11:0b:c7:97:46:b1:59:e1:0e:de:2e:5e:2f:47:c5:ec:3f:aa:
e8:3e:88:64:11:2c:8b:7f:76:bf:ee:6c:bf:c7:36:a2:cf:42:
2c:de:05:a3:3a:e0:05:b1:ea:85:66:fc:16:fc:e5:00:79:66:
81:b5:10:d1:f8:4f:a8:ef:dd:3a:bf:25:64:2a:f1:80:54:7e:
fc:4e:39:62:b3:25:31:b9:91:39:b4:5f:46:a3:6f:f2:5b:90:
58:79:a9:b3:66:c8:30:3a:53:6c:44:cc:0a:36:87:be:4e:db:
28:78:f4:cf:54:ba:e1:9e:cf:8b:a9:26:04:67:ab:03:aa:78:
09:db:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org