Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/IybWd4IMsfj0yG1h4AjDYUHxWak.roa
File: IybWd4IMsfj0yG1h4AjDYUHxWak.roa (raw, json)
Hash identifier: f3r+xR6dFmtwcxshczYhOWAJQ7+OHWndXuAS3GEUd28=
Subject key identifier: 23:26:D6:77:82:0C:B1:F8:F4:C8:6D:61:E0:08:C3:61:41:F1:59:A9
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 018CC8DF844C0BE7BBFE14BCEA3BB97D5CFF
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/IybWd4IMsfj0yG1h4AjDYUHxWak.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203641
IP address blocks: 185.107.160.0/22 maxlen: 24
193.111.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 18:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:84:4c:0b:e7:bb:fe:14:bc:ea:3b:b9:7d:5c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2326d677820cb1f8f4c86d61e008c36141f159a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:b3:c5:9b:97:77:90:27:b6:7c:f3:fc:3e:
28:f3:74:85:07:5b:65:3a:3e:cc:5e:d6:60:a0:a6:
d0:ff:be:1d:cb:14:97:1a:c7:1b:25:28:a1:dc:72:
f6:98:64:11:eb:33:01:69:de:ca:09:99:e6:77:70:
22:26:54:71:44:b2:40:20:a3:41:66:e2:18:74:5d:
8f:9a:77:46:ee:de:1b:7e:1b:bb:0f:13:cd:2a:6a:
0d:0a:76:66:5f:93:ef:28:1e:95:a9:4d:21:44:b2:
e9:51:7b:29:98:7f:10:af:b9:94:ee:91:f5:29:73:
4e:1a:c1:ab:f6:b8:87:a6:76:f2:ff:25:2b:69:1b:
0b:fa:90:9a:69:fe:51:e1:c2:a7:a2:9a:0e:ea:4a:
d6:5a:54:20:64:25:d6:23:b3:1e:81:6b:a1:63:8f:
bb:30:56:78:1c:c5:17:ae:90:52:a8:09:4d:c8:34:
86:f1:e4:ec:29:08:28:ae:29:3b:93:a9:8f:52:02:
ba:a9:b9:c6:05:27:ac:71:0e:7b:ae:06:19:e1:ed:
1c:e2:42:28:e1:6b:88:ef:b5:f3:72:2e:0f:72:0e:
f8:93:6c:b6:0b:63:b0:e4:e8:36:47:7a:14:de:e7:
0e:15:f8:a7:37:f6:e2:3b:3e:19:45:43:e9:e9:28:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:D6:77:82:0C:B1:F8:F4:C8:6D:61:E0:08:C3:61:41:F1:59:A9
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/IybWd4IMsfj0yG1h4AjDYUHxWak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.160.0/22
193.111.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3a:cb:ba:14:5f:1f:d9:e3:0d:2f:73:ef:0b:b9:67:7a:df:
ab:f4:62:39:e1:74:ff:18:09:fd:d4:c3:3c:0e:ac:59:18:97:
2d:43:30:f5:76:86:b7:94:17:93:4c:0b:ee:8f:e2:f1:b1:56:
74:57:ba:91:68:f5:9c:64:7e:7e:cf:65:64:22:99:48:53:f4:
74:0c:a0:ba:35:b4:e0:e8:9f:f6:10:fd:8f:91:22:1c:a3:cb:
54:0a:01:bf:b7:d0:4d:40:9f:f8:91:12:66:45:d1:5f:d1:e3:
c5:f7:59:36:b8:27:e3:f3:38:05:28:78:88:48:e7:69:ed:b6:
9c:3c:7e:c8:eb:2d:13:ef:3a:65:18:1e:75:c1:fe:7c:fc:17:
db:1a:25:7e:26:f9:30:79:a2:6b:04:17:67:5f:51:3b:b5:64:
46:11:49:bc:8a:83:51:65:69:21:a3:8c:b5:00:69:38:d7:d5:
dc:9d:49:49:b4:a7:9a:6c:b7:8c:24:b6:e2:2b:5f:f3:ec:4c:
6b:3e:e9:d1:d1:8f:5f:36:8a:7d:77:7f:19:e8:74:da:77:f5:
2c:32:ac:db:0b:e3:63:fc:97:5a:cc:96:be:84:6a:cc:6c:f8:
2f:33:b3:1d:86:c7:ec:53:77:51:23:0d:de:6d:90:52:0e:6b:
a6:df:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:05 2024 by rpki-client on console-ams.rpki-client.org