Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/h16FDS3yAeR1v6zto1v6Z7Q7mCg.roa
File: h16FDS3yAeR1v6zto1v6Z7Q7mCg.roa (raw, json)
Hash identifier: 2viTDQncxODljxGvUimyLigqFksztLeK4N9BeZIpF7U=
Subject key identifier: 87:5E:85:0D:2D:F2:01:E4:75:BF:AC:ED:A3:5B:FA:67:B4:3B:98:28
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018DADD483AD765A54D6E8FAEECA99943F47
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/h16FDS3yAeR1v6zto1v6Z7Q7mCg.roa
Signing time: Thu 15 Feb 2024 17:33:21 +0000
ROA not before: Thu 15 Feb 2024 17:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 185.194.206.0/23 maxlen: 24
185.194.206.0/24 maxlen: 24
185.194.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 16:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:d4:83:ad:76:5a:54:d6:e8:fa:ee:ca:99:94:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Feb 15 17:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=875e850d2df201e475bfaceda35bfa67b43b9828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:f8:16:e9:bf:c0:6a:c5:5a:d7:e7:f5:f1:
24:5f:cf:71:f4:b5:00:00:42:03:cc:d7:c3:8c:06:
a1:66:49:9e:75:55:26:79:41:cb:da:d0:f5:86:72:
d1:96:96:4b:62:f3:24:74:16:07:bf:8e:df:41:18:
eb:39:8f:bb:18:97:a6:de:4b:95:23:29:47:e8:77:
bf:74:15:44:c7:04:53:66:c3:5b:c3:fd:ef:77:b1:
33:52:a2:58:71:70:89:c4:84:cb:e2:fc:0d:a3:88:
23:84:86:a3:b4:4a:9c:35:5e:3f:b6:62:9a:e6:bd:
38:a3:e2:f8:05:2d:ba:82:01:3f:47:f7:58:74:fb:
c3:ff:84:fb:93:1d:56:4e:79:77:3b:a0:87:e2:7c:
2b:43:0b:fd:c1:cc:e1:51:87:a4:22:f7:78:80:27:
02:ce:69:f9:9c:50:56:96:17:5d:03:e8:c4:93:f5:
a0:c8:d1:98:f2:08:5a:58:01:25:22:7a:30:7b:ef:
f9:5a:e2:e2:46:0a:c9:b3:89:3b:b7:99:fa:7b:4e:
d1:87:93:eb:3d:ec:a3:d1:a1:2d:26:16:20:b4:1d:
44:81:e8:84:67:54:d5:06:93:d4:c2:d2:ac:d4:3e:
68:f9:46:f2:4a:fd:46:3c:78:e6:18:8a:90:c3:33:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:85:0D:2D:F2:01:E4:75:BF:AC:ED:A3:5B:FA:67:B4:3B:98:28
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/h16FDS3yAeR1v6zto1v6Z7Q7mCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.206.0/23
Signature Algorithm: sha256WithRSAEncryption
13:7b:d1:05:e1:3f:27:94:f3:cc:80:3d:57:ad:c6:ae:64:44:
a0:1e:47:1b:c4:92:cf:36:c7:e8:30:94:50:f3:92:be:eb:85:
58:87:7d:39:96:d0:55:43:20:e2:ee:4b:a4:6b:73:7a:50:bf:
44:a0:7d:da:95:35:86:fd:a7:5f:4b:24:3c:b3:08:3c:cc:2a:
7f:58:e3:47:e9:15:5b:ad:03:2b:72:78:80:c9:14:81:09:de:
81:fd:de:41:8b:ee:f5:f7:9b:8d:61:81:bc:c5:96:04:a3:7a:
c9:e5:b2:db:7a:23:3e:82:01:ad:83:01:10:32:e3:61:ff:87:
13:69:81:2a:f3:d5:68:51:54:65:4c:a8:3b:ea:a7:ce:b0:2f:
9f:3d:e0:4d:21:eb:f9:6c:21:9b:6e:a2:c9:d4:40:73:5f:da:
33:11:88:68:e3:97:d5:1c:a8:c7:c6:b4:df:0a:53:92:2b:8f:
3c:04:ba:1f:3b:b2:36:54:d9:43:ac:0d:fa:90:00:62:ed:fb:
8d:db:a7:c5:72:c9:6d:6d:50:58:dd:52:92:a6:83:aa:f3:31:
ce:1c:74:30:ee:01:d8:ff:a0:a3:9c:74:14:ec:5a:01:e3:69:
b8:61:5a:87:b4:b0:a1:da:4f:20:5a:07:c3:9f:f7:f6:88:bc:
38:59:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org