Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/CU6gXs78FazpsKHtGc01JwkNSDM.roa
File: CU6gXs78FazpsKHtGc01JwkNSDM.roa (raw, json)
Hash identifier: 7BqeBFYF+pbfFbPECPCa2Qb9uBcLD4bm7+6x/LbPH4I=
Subject key identifier: 09:4E:A0:5E:CE:FC:15:AC:E9:B0:A1:ED:19:CD:35:27:09:0D:48:33
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 018C4904CDF38675ED650EC9F5107A083E2A
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/CU6gXs78FazpsKHtGc01JwkNSDM.roa
Signing time: Fri 08 Dec 2023 10:41:40 +0000
ROA not before: Fri 08 Dec 2023 10:41:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.16.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:04:cd:f3:86:75:ed:65:0e:c9:f5:10:7a:08:3e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Dec 8 10:41:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094ea05ecefc15ace9b0a1ed19cd3527090d4833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:4c:01:32:77:b2:4c:03:8e:e0:e0:70:76:
2c:14:71:7d:51:f9:28:4f:2a:94:03:16:ec:af:1e:
78:37:bf:7b:c6:de:9a:dc:df:cc:0e:a5:a8:9b:96:
6c:a3:c0:be:db:12:44:a7:68:76:a1:76:35:96:e0:
5a:6f:3f:a9:b8:7f:7d:42:3e:95:e5:c1:81:13:ac:
c6:3a:5b:6f:f9:f4:d9:54:79:26:69:c5:b8:94:95:
cd:25:4b:df:05:36:5e:97:65:34:f4:87:d0:e0:bd:
fc:05:09:d6:8a:19:43:9d:39:36:47:fb:50:7b:27:
56:c8:bf:98:1a:a4:d6:68:c0:e4:8e:07:4f:12:fb:
cf:fd:2e:a9:f9:82:23:f2:9f:14:50:a8:6b:7d:ef:
76:a5:b5:6b:6c:96:14:00:f4:66:28:f4:bb:20:3e:
0d:99:fc:e8:95:1b:56:77:5a:6e:ea:ca:b1:32:20:
c4:f0:bf:d1:8a:59:d9:5b:f1:fd:5b:5e:39:51:03:
e4:62:13:4f:7f:4f:45:9e:43:18:b7:a1:db:44:a7:
fd:e2:28:05:c3:eb:dd:0b:e5:c6:d4:ef:b5:81:04:
fc:93:36:ee:77:96:0a:71:1b:2f:93:62:54:08:f4:
1e:bc:44:eb:6c:c0:51:ff:83:eb:d5:0b:f2:02:f5:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:A0:5E:CE:FC:15:AC:E9:B0:A1:ED:19:CD:35:27:09:0D:48:33
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/CU6gXs78FazpsKHtGc01JwkNSDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8f:bb:df:04:5c:5e:31:ce:8d:3f:ea:5d:08:3d:61:aa:f7:
32:bb:e1:ea:12:57:e3:46:78:56:27:f1:e4:dc:5a:0f:9b:3e:
94:06:84:5e:35:be:77:20:76:f1:c2:3c:70:0b:65:5d:49:41:
32:e5:4d:cd:d5:c3:2b:05:b5:c5:ef:aa:ee:03:16:19:42:a2:
ac:4f:3a:c2:69:85:a4:d6:b0:9c:a0:09:73:99:b6:8d:ba:a6:
92:5a:93:d7:93:8c:03:93:45:17:c6:c7:60:45:6d:b1:f0:7d:
1b:02:70:44:1c:0d:73:64:b8:18:90:09:2d:f4:dc:88:55:f3:
a5:f7:fb:29:85:3a:7e:ea:d9:9e:29:22:92:08:0f:1c:bf:a8:
24:5b:93:2a:2d:8c:1f:69:39:e8:8f:9e:77:cf:3e:94:e3:32:
16:fe:9d:6b:ff:37:7c:38:0c:3a:ae:e6:8f:9d:11:93:85:1b:
9f:99:6d:14:e5:5e:88:37:17:a9:45:c0:67:20:74:15:4f:82:
19:a5:c8:12:8a:2b:37:1a:19:79:a8:4a:4b:a4:90:b6:0e:83:
30:3b:c5:fb:b5:79:3d:a0:00:4d:79:e7:7d:7e:d6:10:48:58:
97:9f:bc:d2:86:76:c8:13:41:ef:c7:42:f2:a3:66:d1:70:80:
ce:2c:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org