Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/Bqu7p_Nbz24MyIBTLg9VzDaubag.roa
File: Bqu7p_Nbz24MyIBTLg9VzDaubag.roa (raw, json)
Hash identifier: TwNT3+CjwbplxLdSFvdJHtFd6x2BJbsPTJTbWRkXI/4=
Subject key identifier: 06:AB:BB:A7:F3:5B:CF:6E:0C:C8:80:53:2E:0F:55:CC:36:AE:6D:A8
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 0186DFEDF00011F1C4BD744F38640EF53269
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/Bqu7p_Nbz24MyIBTLg9VzDaubag.roa
Signing time: Tue 14 Mar 2023 11:42:37 +0000
ROA not before: Tue 14 Mar 2023 11:42:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60751
IP address blocks: 185.104.216.0/22 maxlen: 24
185.24.233.0/24 maxlen: 24
185.24.235.0/24 maxlen: 24
185.24.234.0/24 maxlen: 24
2a04:2e00::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:ed:f0:00:11:f1:c4:bd:74:4f:38:64:0e:f5:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Mar 14 11:42:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06abbba7f35bcf6e0cc880532e0f55cc36ae6da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:86:ae:d5:a3:c7:4b:34:de:28:4b:63:21:
87:f7:29:f9:ba:18:9d:bc:36:45:d2:8f:f5:23:c2:
ab:79:a2:b7:ce:3e:fb:b9:62:4c:a8:b8:d9:f0:03:
b6:6a:23:c5:70:01:53:08:b6:c1:57:6b:ec:a8:b3:
e9:53:69:ba:45:7e:5f:27:7b:10:c9:13:9f:fe:2d:
fb:3a:b6:79:1e:50:82:80:21:83:07:e8:2c:72:b8:
2d:6f:bc:82:30:b7:fe:b1:58:f8:46:28:39:9a:28:
8d:13:af:cd:37:20:9d:89:fe:07:41:28:0f:6e:c6:
cf:c9:8e:fb:69:82:f3:53:78:bc:30:b2:18:11:fb:
33:da:1b:9d:73:c4:10:b8:06:b6:81:31:75:3c:a6:
70:4c:98:a7:80:4f:f9:4b:15:a3:d4:dc:ed:21:12:
fa:f6:90:28:e2:85:06:5c:82:64:08:9e:90:6a:c8:
3e:d0:7e:50:6d:34:1a:60:7b:34:e9:b8:84:b4:6f:
b8:77:06:76:a3:7a:b3:63:0e:90:e6:a1:c7:2a:ed:
c1:4c:ab:14:be:4d:fd:bb:8e:cf:4f:aa:a0:1f:ca:
dc:24:e5:20:33:7f:90:fa:9f:73:82:96:af:44:e6:
af:dc:e7:1d:2a:17:cf:d3:3a:19:8f:4f:e8:a3:7a:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:BB:A7:F3:5B:CF:6E:0C:C8:80:53:2E:0F:55:CC:36:AE:6D:A8
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/Bqu7p_Nbz24MyIBTLg9VzDaubag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.233.0-185.24.235.255
185.104.216.0/22
IPv6:
2a04:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
09:15:5d:e4:48:28:05:5b:86:3f:ed:35:06:6d:82:2a:20:32:
f2:75:28:f3:55:11:c2:8e:d1:38:d6:eb:1a:59:7c:9a:91:37:
2d:df:95:53:f7:6f:91:9e:f4:d0:f3:63:e9:c7:a5:11:e9:5f:
60:4d:f6:2b:1a:4b:87:47:35:c0:44:95:54:dc:ec:90:a7:af:
2a:9f:72:5a:dd:95:31:cc:3f:d4:f4:22:13:ae:5c:8c:f9:b8:
22:4c:f9:d5:37:28:b3:31:cc:88:d0:0f:7a:e0:0a:7d:94:b4:
34:49:0d:15:66:79:3f:4f:64:1c:db:98:f9:aa:4f:33:ed:7e:
3e:70:46:94:9c:95:d3:5d:b0:d9:86:d6:75:5c:b1:72:6d:32:
41:89:58:b0:46:a5:33:8a:1b:64:ef:45:63:ca:28:9b:b4:f7:
48:5d:31:5c:ec:5d:21:50:4a:de:8b:47:79:6f:42:9f:86:f3:
c6:55:ab:bb:ff:1a:ec:a1:58:d6:72:7a:a6:84:50:a8:fb:bd:
9e:c2:a3:5d:c9:a5:0d:57:01:6d:62:06:96:84:d6:77:f1:b7:
5f:bf:e6:44:74:96:e1:39:ca:78:73:61:d1:cc:6f:bd:79:19:
98:97:b4:58:4e:bf:9c:62:7c:c6:89:38:1c:b6:14:f7:39:d7:
5b:f0:94:9c
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 18:57:35 2023 by rpki-client on console-fra.rpki-client.org