Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KQob7n4Iu_fqPvcoqthcnYkAk14.roa
File: KQob7n4Iu_fqPvcoqthcnYkAk14.roa (raw, json)
Hash identifier: Mj+6fEOmGUrLt0NOGvkU/ujmIqQBlNJ2wV8vo/BZ+H4=
Subject key identifier: 29:0A:1B:EE:7E:08:BB:F7:EA:3E:F7:28:AA:D8:5C:9D:89:00:93:5E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188E50958A33F70DAA8349549F6B8BF871D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KQob7n4Iu_fqPvcoqthcnYkAk14.roa
Signing time: Thu 22 Jun 2023 21:36:14 +0000
ROA not before: Thu 22 Jun 2023 21:36:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.126.82.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 10:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e5:09:58:a3:3f:70:da:a8:34:95:49:f6:b8:bf:87:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 22 21:36:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290a1bee7e08bbf7ea3ef728aad85c9d8900935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:36:a6:94:f1:99:4b:f2:0a:52:53:aa:88:
40:29:23:82:b3:ba:06:31:23:18:d6:b8:2e:77:b5:
20:d7:33:95:17:21:19:c3:62:b2:9f:e1:a5:45:fe:
c5:8a:a8:f2:9c:ed:5d:59:de:fc:54:75:91:73:43:
ee:d1:1c:d3:3f:f7:9d:0c:3b:c2:9e:8e:3c:ab:bd:
06:fd:f0:81:f9:0e:40:ba:b6:7d:f0:c7:ff:91:4c:
58:92:3c:f6:86:80:e0:7f:30:5d:ed:33:08:b3:a3:
db:13:36:05:1f:10:ee:85:d9:70:34:1e:54:1d:8f:
ce:92:17:7b:4d:13:04:04:7d:54:6a:ec:cc:fe:3c:
4e:37:ea:1c:51:13:8b:c0:6b:08:31:fa:cd:b3:b6:
b0:11:7d:f1:a2:8a:a7:f1:dd:61:ed:ab:a3:4c:98:
8d:b6:3b:7a:56:e5:db:33:0e:c1:ba:cf:6f:3a:4f:
8c:ec:fd:4e:b6:6e:17:b8:33:50:f8:34:48:9b:f8:
89:73:ac:b8:a7:7f:32:ea:25:53:af:32:10:c5:59:
50:0d:0c:f0:fb:9f:95:d3:5f:2b:31:b6:7c:ea:c1:
4e:0f:a0:55:5f:60:01:d7:92:6b:0a:fc:04:2b:05:
79:f5:8a:85:4e:85:3e:c1:4b:e3:6b:c8:84:ea:d6:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:1B:EE:7E:08:BB:F7:EA:3E:F7:28:AA:D8:5C:9D:89:00:93:5E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/KQob7n4Iu_fqPvcoqthcnYkAk14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.126.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e7:06:fc:fe:b2:10:1a:0c:80:30:13:66:47:6c:fc:61:ce:
11:b4:07:36:37:eb:8f:4f:26:e7:42:57:22:78:cd:2b:d0:9a:
45:94:53:b6:7d:4c:8e:c5:99:73:65:ee:b8:8c:6b:78:2e:f9:
ae:21:22:12:25:17:7f:94:c3:eb:c4:f3:51:4f:f9:5a:5c:27:
44:fd:bc:cc:e3:ca:f3:57:39:e3:2b:71:2d:83:5d:28:36:20:
00:4c:35:df:d7:a1:24:3b:0d:e0:b7:3d:a5:0c:7b:91:ec:bc:
66:2c:d9:1f:94:2d:9a:2a:ba:e5:76:7c:55:cb:5f:01:9f:e8:
ea:32:5e:e8:75:4e:8b:35:91:f1:a3:3e:52:a9:75:04:43:4e:
0c:cb:0d:7e:1a:31:57:47:2d:0d:57:34:77:2c:c0:67:17:12:
ae:76:cf:3b:44:a0:cb:e3:fc:3e:73:63:83:68:e8:63:a9:1a:
9a:e7:33:e6:11:93:d3:e2:fb:1b:8e:a4:8b:74:39:d4:16:a0:
da:f1:11:44:53:85:f9:14:b7:80:81:83:78:e0:92:ea:c8:cd:
48:c2:19:6f:ce:d3:c6:14:53:1f:bf:03:00:1b:a0:4e:84:e1:
e2:94:c0:67:53:ae:bf:13:42:73:e6:65:c8:7d:49:54:e4:d0:
8b:95:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org