Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/S6sZCdP7rYylOhSoeNaW1JXeljI.roa
File: S6sZCdP7rYylOhSoeNaW1JXeljI.roa (raw, json)
Hash identifier: E9a1R4ozWrvzsGgs6udHRfN1els7C0kdfKwSNc9LJb0=
Subject key identifier: 4B:AB:19:09:D3:FB:AD:8C:A5:3A:14:A8:78:D6:96:D4:95:DE:96:32
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 018CC94DAA81312BA5E46D681B8082C356B4
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/S6sZCdP7rYylOhSoeNaW1JXeljI.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200322
IP address blocks: 185.204.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 07:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:aa:81:31:2b:a5:e4:6d:68:1b:80:82:c3:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bab1909d3fbad8ca53a14a878d696d495de9632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:20:52:2a:4a:cc:89:ac:23:bf:92:e9:99:
ff:fb:70:7c:5f:a8:c3:2b:cd:be:55:87:a5:b9:19:
83:11:f9:4d:66:31:e8:f2:53:1b:f1:47:2e:61:8a:
02:59:ff:5d:08:93:c6:9d:8a:34:48:6a:b8:41:8b:
32:c5:4c:5e:4e:03:3b:4f:84:3a:52:90:59:d8:59:
a9:d2:d3:49:b1:7e:29:e6:d0:09:88:10:aa:ed:70:
64:65:1d:d5:2f:4e:8b:48:11:6f:7b:6b:d3:6d:0f:
d3:82:e0:53:d6:53:07:f3:f3:30:0a:41:d3:96:98:
b9:66:32:55:e2:14:43:2e:9b:83:67:4f:90:47:75:
cc:83:01:ff:7c:ad:75:d9:4a:e0:42:8e:68:0d:7c:
28:d3:36:a4:90:87:22:9c:6b:24:4c:4a:f7:c9:3d:
b7:7f:98:37:7e:cd:1a:25:7b:a4:e6:0d:26:63:6e:
ff:0f:fb:ff:eb:5c:24:4d:d8:83:d5:e6:3b:70:79:
fc:58:da:cd:f9:c5:0a:e3:30:3f:63:78:7e:d2:41:
88:ea:46:b5:06:e1:47:ef:d7:23:37:3e:aa:0a:d6:
3f:f6:7b:d7:3d:b2:e6:e5:b2:85:4b:ba:00:a8:88:
6e:86:1f:99:33:db:b9:bc:6d:24:0d:ec:37:70:32:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:19:09:D3:FB:AD:8C:A5:3A:14:A8:78:D6:96:D4:95:DE:96:32
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/S6sZCdP7rYylOhSoeNaW1JXeljI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:10:3a:ba:f9:8f:f5:e4:e6:96:91:c5:0f:88:e6:0b:65:53:
c4:f5:54:30:a4:f4:78:d7:6d:49:75:df:22:b3:ee:89:23:ed:
25:83:ee:76:19:d4:98:69:64:03:53:65:38:65:fc:cb:b1:02:
19:e2:ee:07:95:cc:14:05:b1:f4:75:86:3a:23:b3:12:e5:6b:
fc:c3:4e:cd:11:49:97:8f:ce:5f:2c:c9:cf:bc:a6:fa:62:64:
63:33:ff:45:96:b4:7d:56:e3:68:98:61:83:87:e6:9e:f1:25:
20:8b:e0:03:63:6b:5d:4a:18:95:a8:ce:f3:e4:d0:42:e5:7d:
0a:0a:c5:bd:c8:28:8a:e7:5d:7a:3c:1c:61:3a:39:81:b1:91:
71:d2:9a:45:8f:3c:60:c2:a8:fc:63:c9:ff:a7:70:58:de:28:
32:14:34:9a:2e:1f:95:fa:fc:65:9f:b0:fa:61:e6:6e:5e:44:
79:69:5c:8f:c3:31:6f:6a:8a:43:3b:2e:1f:d0:d1:b2:2b:20:
2d:56:b5:2f:58:08:54:e8:c8:42:8b:ad:5c:23:29:eb:0c:f4:
46:87:d3:9f:84:ed:6e:87:a6:ad:5c:a4:4b:6c:0b:87:cf:87:
e3:0c:5b:e5:d4:28:56:c7:70:8c:fd:5a:4e:26:56:e9:30:f4:
a3:16:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org