Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/t_EHG9y8SKN0eq533WBJcHi1c2M.roa
File: t_EHG9y8SKN0eq533WBJcHi1c2M.roa (raw, json)
Hash identifier: OCIJ/viMWrtnKx6NXDTF13w5S/xQTncoayie3OeMoac=
Subject key identifier: B7:F1:07:1B:DC:BC:48:A3:74:7A:AE:77:DD:60:49:70:78:B5:73:63
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018C01C81F6E4F57AE04C7E2955B4E1B080B
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/t_EHG9y8SKN0eq533WBJcHi1c2M.roa
Signing time: Fri 24 Nov 2023 14:42:21 +0000
ROA not before: Fri 24 Nov 2023 14:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206774
IP address blocks: 185.176.244.0/23 maxlen: 23
185.176.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Dec 2023 13:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:c8:1f:6e:4f:57:ae:04:c7:e2:95:5b:4e:1b:08:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Nov 24 14:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f1071bdcbc48a3747aae77dd60497078b57363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:64:02:36:9e:18:d4:df:8e:c0:55:de:14:
c9:b6:6e:86:79:75:95:94:86:24:94:8f:de:fa:d5:
37:df:24:9e:d8:ed:40:2d:d1:db:95:e6:12:d7:82:
c4:d0:63:d9:e1:f4:c6:4a:ff:07:07:c0:27:55:46:
80:28:c0:4c:b2:31:7b:57:05:6e:9e:5d:e1:74:be:
4b:a6:8d:38:3b:f0:5b:26:58:48:88:b6:d0:24:8d:
42:79:1c:51:8c:10:9b:83:2f:0b:8e:70:ae:3b:3b:
df:5b:05:6d:88:8c:d2:82:5d:dc:a8:99:0e:93:50:
96:af:29:ca:e9:06:66:b0:41:ef:bd:ee:a8:5f:ac:
70:95:50:7c:9d:4b:82:a0:71:52:df:75:00:7f:13:
f0:c0:fc:4f:e5:f1:89:a3:1f:61:eb:5a:28:3e:bd:
b1:fa:e7:f5:0d:96:f6:1c:a8:6b:9f:75:80:d5:a9:
47:08:6c:dd:f6:8c:e8:02:b7:a8:d9:e8:44:23:74:
a5:cf:d2:12:a9:5d:d9:34:ea:44:60:ae:35:60:b6:
d9:06:93:da:04:65:36:e1:65:7a:fd:01:12:4e:16:
09:08:b2:b3:ae:58:3c:d6:a9:eb:9c:5c:b4:7f:0a:
11:dd:b4:69:db:2e:18:c3:5f:a1:f8:08:3d:6d:aa:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F1:07:1B:DC:BC:48:A3:74:7A:AE:77:DD:60:49:70:78:B5:73:63
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/t_EHG9y8SKN0eq533WBJcHi1c2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.244.0/23
Signature Algorithm: sha256WithRSAEncryption
11:5d:36:f4:fe:2e:e4:83:81:a4:9e:a0:c6:19:86:1d:7d:6b:
7b:e9:fc:bf:75:0e:06:bd:36:48:6a:9f:18:4f:00:9b:ee:08:
55:c0:b4:65:9b:7b:9a:99:0f:2c:d1:42:f9:e5:9e:99:e0:b7:
81:87:4b:6c:5a:f2:09:47:0f:77:4f:08:4e:d7:aa:e9:c4:9b:
d8:c0:b8:8f:d0:7d:22:ff:ab:ac:2d:1a:ad:94:cc:9f:4b:ff:
d8:ab:87:5e:83:74:54:4d:c3:f8:f9:c5:fa:8f:17:69:15:b3:
20:b0:e9:dd:cb:42:51:88:b5:cd:d5:55:1c:3a:ce:d4:8c:84:
3b:f2:1a:1d:dc:0e:e6:fd:31:56:73:62:e2:dc:73:ab:1b:b0:
4f:9b:1b:9f:25:e7:a0:88:42:b1:ba:7d:21:b8:ec:24:d4:87:
a9:af:da:c9:f4:83:a9:0f:21:a4:e6:a3:b4:ae:a7:f5:a8:64:
ad:74:91:10:6b:21:21:52:64:7a:48:18:2e:4d:b9:64:e0:e7:
31:99:13:00:3c:99:a4:a8:46:d9:8a:5a:75:4b:b3:8b:a2:62:
9f:b2:97:c7:af:cc:d4:87:b7:76:c8:bd:58:e9:68:06:a9:d0:
e1:ec:5f:5d:8a:ad:2c:f2:67:3f:b1:41:54:55:a8:35:a2:93:
66:60:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:28 2024 by rpki-client on console-ams.rpki-client.org