Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/a6_Pbob6yMSB7Qj1hXsQ_lGFYwk.roa
File: a6_Pbob6yMSB7Qj1hXsQ_lGFYwk.roa (raw, json)
Hash identifier: 3vsPew2StXjqJEfA/OCbXxJ5of4L4cTYbhWr5xMDw6s=
Subject key identifier: 6B:AF:CF:6E:86:FA:C8:C4:81:ED:08:F5:85:7B:10:FE:51:85:63:09
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 018FDEA5EF9FAC6027072485D5D7EE34CCA6
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/a6_Pbob6yMSB7Qj1hXsQ_lGFYwk.roa
Signing time: Mon 03 Jun 2024 15:09:27 +0000
ROA not before: Mon 03 Jun 2024 15:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8953
IP address blocks: 185.133.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 13:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:a5:ef:9f:ac:60:27:07:24:85:d5:d7:ee:34:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Jun 3 15:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bafcf6e86fac8c481ed08f5857b10fe51856309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:e1:06:9e:9e:55:6f:d3:49:8d:4d:3c:68:
1b:b4:4f:a2:f0:03:b1:c8:7d:ec:48:d5:b7:f2:08:
d7:62:09:a7:55:96:0a:ab:b0:a0:44:af:8b:37:86:
8c:ce:41:5b:38:0d:87:a7:a8:3a:d0:01:f1:3d:77:
52:ae:3b:53:84:43:ca:d0:ab:ff:6a:bc:b5:2d:d7:
b0:c7:5e:8d:26:f6:79:ca:9b:6e:bf:70:8e:ac:eb:
0d:c1:4a:87:05:28:5d:e4:64:57:28:16:68:ee:17:
7d:e0:a7:71:44:94:ee:9e:ee:37:81:a8:5d:27:3f:
ae:ba:15:c3:cd:62:8e:1a:a4:ef:c6:07:dd:ee:40:
d8:cc:f3:64:54:f4:55:7b:9b:ac:17:28:3c:1f:b9:
8a:11:0a:5c:45:e1:54:d1:7a:94:12:22:4c:4d:2e:
73:ab:58:f7:e2:77:f9:f5:35:67:99:6b:47:b0:68:
b7:25:b7:48:3c:b2:01:bd:27:1b:f3:23:93:a5:1c:
07:99:6c:c5:a1:46:ca:d3:25:6b:84:f6:5c:95:f3:
1d:20:8e:fb:a7:a4:8d:21:e4:c4:75:bf:2f:73:d3:
a4:f2:a5:e2:9b:fe:fd:0f:df:18:e6:27:bf:a4:e2:
d7:d2:41:46:c7:6c:71:c7:8c:61:1b:08:02:d4:d9:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:CF:6E:86:FA:C8:C4:81:ED:08:F5:85:7B:10:FE:51:85:63:09
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/a6_Pbob6yMSB7Qj1hXsQ_lGFYwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
16:71:31:78:af:bf:41:ce:dd:b0:aa:5c:1b:49:bc:51:61:2e:
0e:ae:fe:17:4e:23:3a:bf:42:5e:74:2a:ee:d7:ed:ef:0a:7e:
b8:fe:62:7c:02:c6:d8:36:d3:e2:6f:91:a3:02:00:f7:04:3b:
dd:18:0f:28:c5:6f:25:ac:c8:a8:71:7b:66:5d:6c:1f:a3:3b:
cb:d0:ee:c4:12:54:8f:aa:ee:cb:8f:94:c0:6e:3b:83:96:38:
e9:53:5f:f3:86:4d:bc:f1:17:90:6d:8f:21:4a:c7:bb:e1:84:
e2:cd:41:04:a1:75:c3:b3:97:2c:38:cc:94:54:a5:cb:cb:d0:
36:75:44:a1:2e:f3:e8:77:6f:f6:46:58:65:08:4b:d6:2d:51:
f2:74:39:15:53:aa:c8:1c:7a:78:48:71:b7:45:22:e8:26:79:
a7:2c:4e:42:9e:3f:71:52:e8:ab:a5:af:76:28:b1:3a:eb:a6:
0d:89:4d:23:6e:41:2d:65:b9:42:93:e9:c2:12:6c:e9:b2:29:
64:6a:ea:08:89:7a:0e:10:6b:09:6c:a7:da:0e:6e:98:43:95:
93:1a:48:9a:49:2f:1d:2e:4e:ae:d1:93:e5:b7:2a:26:a2:97:
68:52:c6:c0:86:28:be:30:62:44:0a:02:e3:dc:40:ff:9f:e1:
99:18:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 15:47:33 2024 by rpki-client on console-fra.rpki-client.org