Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/oUIaPua3cRp4mPQyYd9JBwQBhCo.roa
File: oUIaPua3cRp4mPQyYd9JBwQBhCo.roa (raw, json)
Hash identifier: 7drUivNdSK8f+e+8fh7AY0b7dBFcQyWqMCZ5EvqUy3U=
Subject key identifier: A1:42:1A:3E:E6:B7:71:1A:78:98:F4:32:61:DF:49:07:04:01:84:2A
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018AFB96CADED85385B53A7107CCE436787B
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/oUIaPua3cRp4mPQyYd9JBwQBhCo.roa
Signing time: Wed 04 Oct 2023 16:47:58 +0000
ROA not before: Wed 04 Oct 2023 16:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206124
IP address blocks: 185.92.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:96:ca:de:d8:53:85:b5:3a:71:07:cc:e4:36:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 4 16:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1421a3ee6b7711a7898f43261df49070401842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:ce:99:ac:96:82:b8:0c:d1:b5:af:63:ee:
43:37:92:70:46:d4:3b:1e:9e:aa:da:c6:10:fc:07:
c9:17:09:88:6d:a9:85:57:1f:25:1f:3c:3e:34:76:
8a:89:d8:11:f5:da:be:02:d0:d8:2c:b5:74:ed:7f:
71:6b:73:4f:c4:18:ee:93:4b:0a:e9:c4:df:7d:0f:
ff:4f:e4:24:4c:bf:8f:5b:b6:ef:56:5e:94:ca:83:
a8:81:5e:c9:11:c3:40:e4:47:68:65:47:04:56:bf:
77:f9:be:2e:80:70:2f:e5:4a:34:02:27:01:c0:f5:
b6:cf:af:d3:51:7b:e1:55:3d:a4:dd:7f:58:0a:db:
7f:09:2e:1d:7e:48:fa:7c:91:94:d1:8d:3e:60:de:
f8:03:d4:f3:8a:1d:89:37:04:d8:92:c6:63:dc:31:
e0:4a:fa:46:d3:cb:e8:7d:b0:c7:68:6f:13:b9:d0:
79:26:1a:2c:91:01:83:48:75:6b:7a:82:0f:07:18:
e0:4f:10:c6:38:f0:a2:43:9c:fd:68:33:7d:c5:62:
57:32:4c:73:5f:44:ce:cf:1a:7c:d0:df:25:6e:ab:
03:b7:ed:d2:87:a9:7f:d4:aa:d4:8a:60:14:bc:6d:
59:2e:10:2b:48:2f:5a:14:c7:3d:5a:65:ef:0a:be:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:42:1A:3E:E6:B7:71:1A:78:98:F4:32:61:DF:49:07:04:01:84:2A
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/oUIaPua3cRp4mPQyYd9JBwQBhCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:6e:ca:e7:85:66:fd:17:26:be:0c:50:68:5e:f3:5e:e0:50:
f3:57:62:71:6e:3c:c1:2f:0e:4b:99:08:41:6a:fb:04:e3:79:
d4:29:49:f6:05:59:eb:02:9f:22:ca:77:0c:62:35:38:4e:47:
5c:5c:24:d5:d3:0c:ec:4b:8c:ca:1a:25:22:b2:67:92:63:8c:
db:b8:31:84:a0:68:e8:d7:60:ed:d5:3e:cb:10:c0:28:2f:16:
2d:28:ad:cb:22:0e:48:ea:15:f1:fc:88:d7:37:f6:5a:d8:b6:
74:da:b2:5b:94:02:58:cd:1a:2f:be:82:39:3c:69:55:51:27:
e4:82:f1:72:26:2f:ac:64:2a:c4:28:3a:10:9a:a8:d6:eb:f6:
15:e8:a5:95:7f:42:51:4a:32:e0:8c:e6:2e:a9:71:ef:9a:50:
71:30:66:cd:78:bd:78:29:6c:45:85:2c:51:32:24:41:65:42:
36:f6:e1:e6:e9:b3:8c:aa:a5:63:70:60:5d:eb:81:21:a5:f4:
5c:97:a7:f2:fd:4b:9a:d0:46:b0:7c:b6:d5:37:1c:f9:ba:e8:
67:ee:93:2f:7f:21:26:b2:4e:04:2b:b7:63:28:b4:4b:4c:43:
54:66:79:77:10:e4:22:50:75:87:2a:02:4e:fb:be:fa:e7:05:
56:48:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:11 2024 by rpki-client on console-fra.rpki-client.org