Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/bGJ8z6PXC6i6zOUqgrAQTbIKNRU.roa
File: bGJ8z6PXC6i6zOUqgrAQTbIKNRU.roa (raw, json)
Hash identifier: dx/KQyUjBdvu4utYqVpAncKGNmcoXR0Opu1Yr5o0oxw=
Subject key identifier: 6C:62:7C:CF:A3:D7:0B:A8:BA:CC:E5:2A:82:B0:10:4D:B2:0A:35:15
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 0189497FE65996FCC46E8E8DBB3A8A7D3B26
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/bGJ8z6PXC6i6zOUqgrAQTbIKNRU.roa
Signing time: Wed 12 Jul 2023 09:47:46 +0000
ROA not before: Wed 12 Jul 2023 09:47:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34373
IP address blocks: 185.171.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 07:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:7f:e6:59:96:fc:c4:6e:8e:8d:bb:3a:8a:7d:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Jul 12 09:47:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c627ccfa3d70ba8bacce52a82b0104db20a3515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:3e:08:54:ab:4f:dd:6e:ab:89:72:ee:6e:
df:6a:5f:d1:e6:4c:a5:ad:8a:7e:64:d0:1f:1a:58:
27:a6:7d:18:fe:66:1f:ec:75:d9:f0:9f:f9:09:6d:
9d:cf:89:d2:42:d6:89:95:40:89:6c:67:10:3d:cf:
11:02:c4:7c:17:a9:4a:10:5e:55:bd:1f:ff:7d:52:
72:f9:53:0d:c6:22:66:68:87:5b:72:8a:a9:73:ba:
fb:94:b3:90:8f:a3:ec:91:4f:f0:ce:aa:64:02:2e:
cd:42:a7:0d:8a:02:69:19:c1:bc:35:d2:a2:d5:68:
27:54:a4:56:a0:10:ce:e7:64:55:db:b6:18:8f:79:
49:96:95:68:c4:87:3c:45:e6:c0:b9:43:b6:58:02:
27:82:a8:ab:d5:a3:62:78:23:2b:5d:99:1e:a0:7e:
3f:a9:b4:2e:9d:28:fe:d9:c0:85:36:a8:48:a7:2f:
89:94:94:26:55:71:43:82:f1:1c:de:8f:4e:a0:fb:
3b:25:3c:24:cf:3f:4b:bd:5a:10:4f:ab:68:5d:73:
de:d0:4b:d5:28:3d:08:61:d7:bb:10:3f:ad:ae:18:
c0:7b:7f:33:f5:ed:8d:27:25:c2:18:49:9d:75:79:
a7:66:c2:fb:46:da:0c:a0:84:39:e5:68:91:c4:20:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:7C:CF:A3:D7:0B:A8:BA:CC:E5:2A:82:B0:10:4D:B2:0A:35:15
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/bGJ8z6PXC6i6zOUqgrAQTbIKNRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:79:50:f8:cb:04:2a:19:41:f9:d4:68:6b:bc:d7:6c:5f:68:
54:2b:cb:d8:d4:0f:95:f2:38:1c:3f:0c:54:5c:01:04:cc:d2:
2d:07:52:58:6f:6e:d2:31:3e:a0:ef:fa:10:24:ce:8d:c2:79:
12:a4:1c:17:77:84:1e:24:c4:77:56:51:99:d8:4b:96:ca:bc:
ea:d2:89:70:84:03:02:56:52:ef:1a:52:fc:60:ce:d7:a9:e3:
6d:8b:a7:a9:f1:df:93:e4:3e:1e:e9:cc:96:e1:d7:3c:9e:c7:
f4:68:e5:5d:a3:71:6f:89:96:cc:6c:cd:b8:c5:7b:31:13:12:
c2:5b:ce:12:fa:b5:fe:5d:da:79:24:e5:1a:c5:f0:ca:1d:af:
be:f8:e7:5b:a1:b1:77:7a:27:33:03:9c:b0:25:98:9e:7b:78:
99:89:68:0b:da:00:cf:e3:f4:81:92:43:82:85:3b:f2:5d:e4:
66:df:2a:26:29:c9:ae:ee:56:cc:d1:c9:26:4a:d8:c1:94:28:
7b:61:a6:68:09:29:2b:d7:02:03:63:f0:39:c7:86:26:e5:4b:
33:92:27:64:01:6a:30:fc:e8:ba:af:25:36:c9:b0:0c:b9:45:
d1:0a:75:97:79:8b:90:7f:e8:4a:5c:d3:f2:ea:de:87:04:76:
3c:8e:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:47 2024 by rpki-client on console-ams.rpki-client.org