Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tIh6_JJt7Q0LiWpeGnRZaFear9M.roa
File: tIh6_JJt7Q0LiWpeGnRZaFear9M.roa (raw, json)
Hash identifier: c8G++dQSdSbN9vF5GQfD4UBE81vF0pxOSJTJdRviQqA=
Subject key identifier: B4:88:7A:FC:92:6D:ED:0D:0B:89:6A:5E:1A:74:59:68:57:9A:AF:D3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3434BBEADF163438AEC65C0F6BA0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tIh6_JJt7Q0LiWpeGnRZaFear9M.roa
Signing time: Mon 02 Jan 2023 05:55:03 +0000
ROA not before: Mon 02 Jan 2023 05:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204173
IP address blocks: 185.106.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:34:34:bb:ea:df:16:34:38:ae:c6:5c:0f:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4887afc926ded0d0b896a5e1a745968579aafd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:be:d2:85:8a:92:a0:7b:b7:df:d3:45:e7:
6a:89:b8:f3:ae:76:9c:33:6b:89:30:69:37:7d:27:
4b:a5:1c:ba:38:31:10:93:a2:43:87:f3:e3:d3:d9:
97:71:a7:9e:f5:7c:bc:6a:86:e1:77:78:19:43:a9:
9c:95:92:2c:2a:4d:5d:cc:16:50:9f:5a:79:5e:13:
4b:90:cd:ad:07:4c:59:d8:aa:a7:76:7d:71:23:41:
07:7e:1b:9a:b7:58:bd:e5:bc:44:f8:52:04:58:72:
a8:05:9b:ca:9a:c7:31:59:69:0d:b5:cd:05:4a:9b:
e2:0e:e0:82:21:67:fb:22:33:bf:e7:e1:16:0f:aa:
f8:52:fc:1b:71:af:0a:c3:ed:cb:e4:bd:a7:f6:e8:
8f:fe:8f:b1:e1:19:d5:a0:26:00:a0:cb:2e:06:1e:
f6:2f:bf:79:90:f3:9b:f6:51:5e:9c:85:db:83:7d:
9d:35:10:a2:42:84:cc:eb:a0:6e:9e:71:c1:ea:10:
f1:6a:d3:10:10:b6:79:98:e1:c5:d4:3e:67:ce:c2:
69:2e:5e:a0:40:80:f2:a9:a8:45:08:09:c8:e7:a5:
7f:2e:d6:7d:45:cd:70:2b:0b:99:e1:f0:11:6e:41:
c7:cf:a6:33:54:84:54:a0:11:ad:45:62:2a:3c:16:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:7A:FC:92:6D:ED:0D:0B:89:6A:5E:1A:74:59:68:57:9A:AF:D3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tIh6_JJt7Q0LiWpeGnRZaFear9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:59:67:6c:da:5f:16:59:91:8b:61:55:20:16:c8:e3:eb:30:
3d:cb:40:d1:fd:f8:b0:67:55:ca:0b:22:75:e6:12:dc:76:9d:
9f:bf:c4:14:2d:a2:e2:51:6a:c4:91:e1:86:2e:66:61:a0:81:
25:fe:56:1e:61:e0:ed:1e:d7:97:3b:f1:a5:a5:52:7a:12:b6:
b8:24:42:76:aa:67:7e:f6:ea:18:30:df:7f:05:8d:bb:4c:39:
0f:69:d4:6e:64:e2:c3:f3:44:81:8f:f1:4c:41:48:e5:6f:0b:
7b:f1:a1:29:dc:99:81:37:1b:ba:4d:85:e8:b2:26:e3:12:a0:
4c:3a:8e:2f:46:36:7c:a6:05:62:ed:15:93:06:d8:8f:53:e8:
f7:e1:aa:17:bc:19:65:2e:fc:4d:41:bf:6c:6b:5d:7d:dd:c9:
97:15:43:21:89:c7:7f:b5:95:bd:9e:df:ff:5c:19:de:a1:5d:
0c:07:24:e1:f9:1e:92:8a:be:4b:9a:7b:5a:32:0a:11:50:a8:
6e:2e:72:7c:36:b9:df:0f:ed:df:ac:1a:98:19:5e:4f:9e:c7:
60:9f:e0:2e:5c:7d:6b:fb:a8:48:12:47:e8:14:4d:aa:a2:55:
4d:aa:e4:15:8e:08:50:6c:9d:23:e9:58:f2:56:c4:c3:77:47:
d2:2c:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org