Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/CiqL54OEt6_JcbNCVyTpaLn-qX0.roa
File: CiqL54OEt6_JcbNCVyTpaLn-qX0.roa (raw, json)
Hash identifier: lyadZGrENupZqjs2EUbhkpy3otJof30gdiLq1RCdVTM=
Subject key identifier: 0A:2A:8B:E7:83:84:B7:AF:C9:71:B3:42:57:24:E9:68:B9:FE:A9:7D
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 018572BFA9FA810CBCAC73F93EB107AB76A6
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/CiqL54OEt6_JcbNCVyTpaLn-qX0.roa
Signing time: Mon 02 Jan 2023 13:50:41 +0000
ROA not before: Mon 02 Jan 2023 13:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13204
IP address blocks: 185.116.152.0/24 maxlen: 24
185.116.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:bf:a9:fa:81:0c:bc:ac:73:f9:3e:b1:07:ab:76:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jan 2 13:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a2a8be78384b7afc971b3425724e968b9fea97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:24:3b:de:6d:d2:c2:76:c7:2a:4b:cb:b5:
66:38:ef:be:8f:92:37:e5:0a:3b:2b:cf:c9:c3:20:
14:bf:ee:ea:fc:34:64:d6:04:6f:f2:0f:47:fb:07:
87:f8:27:92:49:e5:3b:61:ce:79:9a:46:87:a0:67:
66:05:a4:bc:69:7b:a2:ae:47:8f:da:db:37:43:48:
05:75:7e:a2:e2:08:51:42:18:a4:c4:6b:ca:0d:47:
e8:29:d5:33:b5:2b:92:04:53:f1:e7:74:b1:48:a6:
2e:1f:a1:47:69:8f:71:f8:1a:fa:5f:fd:1b:c2:f4:
16:93:68:e4:f6:fe:0c:69:3b:1a:2c:e3:ec:b7:c1:
59:ce:8e:31:3b:00:e6:47:da:b7:2a:a3:72:75:66:
6a:34:69:5a:9e:f7:b7:4b:34:36:88:60:ae:f5:fc:
23:4b:bd:6e:5b:1d:8c:78:cc:b7:42:4c:2b:2f:55:
ff:dc:50:b9:35:27:9c:25:e2:d9:0a:8a:91:cb:22:
97:b7:55:48:5e:90:68:87:8c:4f:a4:3a:21:25:cf:
63:85:39:55:d8:ca:17:a4:94:55:04:30:2d:b8:3f:
66:75:43:1c:77:bb:a7:fe:82:79:af:3f:49:6e:62:
49:da:fe:74:d9:bb:f5:27:5b:aa:e5:26:d9:ec:b3:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2A:8B:E7:83:84:B7:AF:C9:71:B3:42:57:24:E9:68:B9:FE:A9:7D
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/CiqL54OEt6_JcbNCVyTpaLn-qX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3b:03:72:55:e8:f3:b7:70:44:36:be:be:ab:5c:ec:34:c0:
25:cc:aa:61:f1:2b:d4:2e:2d:60:c1:df:10:56:db:a8:c4:45:
15:27:f6:49:6c:95:75:23:d4:94:0f:04:84:d8:64:0c:72:0c:
11:15:0a:c8:1f:e0:92:8d:37:54:fe:42:2e:c3:c5:41:4d:7a:
18:1b:48:45:38:a2:16:4f:9b:c3:dd:e9:f7:71:3a:76:26:e0:
e2:c2:6e:52:68:d3:cd:ac:87:29:18:90:8d:7f:1a:92:b5:cd:
03:ae:73:4b:b6:b0:a4:51:40:40:62:25:e5:63:fb:18:48:1f:
cd:fa:43:80:ba:aa:64:f6:b9:9a:61:d4:d9:0c:9e:71:10:e7:
b1:82:54:e3:fc:2b:57:51:8d:50:06:aa:01:89:a1:69:d8:fc:
dd:71:a1:fa:bd:95:46:2f:b3:18:21:eb:33:e2:eb:83:24:cc:
4e:cb:2c:67:64:4e:c7:d8:72:e1:34:9a:da:89:31:50:2c:c5:
83:57:94:1c:70:ce:4b:12:9a:03:29:87:f9:83:d2:08:c7:3b:
70:db:b9:65:bf:4e:37:61:3b:2d:1b:15:e3:50:d5:06:53:8f:
f9:a8:81:f8:ca:57:bc:15:2b:65:87:ed:cb:d4:7b:b5:29:ed:
9e:86:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:46 2024 by rpki-client on console-ams.rpki-client.org