Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/0W5JuCQB8hIwJfA8yFkMk2i1ggc.roa
File: 0W5JuCQB8hIwJfA8yFkMk2i1ggc.roa (raw, json)
Hash identifier: AB5Fci3mUxvT672L78aV7Rw7YS5hwCTynD+CNVuvhNc=
Subject key identifier: D1:6E:49:B8:24:01:F2:12:30:25:F0:3C:C8:59:0C:93:68:B5:82:07
Certificate issuer: /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial: 0185718C3195581BFCEB8FD2C2801A248E4B
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/0W5JuCQB8hIwJfA8yFkMk2i1ggc.roa
Signing time: Mon 02 Jan 2023 08:14:51 +0000
ROA not before: Mon 02 Jan 2023 08:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.161.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:31:95:58:1b:fc:eb:8f:d2:c2:80:1a:24:8e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Validity
Not Before: Jan 2 08:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d16e49b82401f2123025f03cc8590c9368b58207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:3c:b0:d7:14:3c:12:4e:0e:73:13:aa:58:
f8:7e:37:ea:25:0a:b0:d4:2a:cd:03:65:26:a2:37:
73:34:88:4d:63:02:cd:cd:a7:7f:4a:d7:85:ca:30:
8e:3b:95:83:be:41:a3:9a:11:f3:27:cf:9f:38:c0:
ad:bb:ad:e3:ab:d4:44:f2:76:49:14:85:4c:82:cf:
78:2b:ad:15:34:d1:8d:64:3e:ce:35:64:46:e5:40:
e4:45:3b:be:0e:32:d9:a4:9c:68:5f:81:0b:1b:66:
d2:e3:25:05:a8:4e:db:84:1a:cd:b7:e4:b1:6e:12:
ae:64:66:44:67:01:97:c4:c9:a2:d9:2d:17:08:f4:
9c:88:41:b0:16:b9:09:46:0e:28:a1:5f:9b:fb:45:
e4:19:27:f5:6b:44:cf:3b:3b:2b:0f:e6:10:17:cf:
94:42:7e:bd:b6:e1:b0:e8:39:be:76:02:54:a6:d9:
ae:87:d1:4f:dc:04:ae:32:fb:6e:1e:5f:81:11:76:
6c:7e:8c:20:af:66:c0:08:c4:77:96:f5:7a:88:aa:
4a:24:f6:11:0a:32:4a:43:0f:06:7a:37:58:13:ca:
18:14:12:68:d1:07:ff:12:1c:e5:8e:ad:f2:2a:1a:
0c:b9:ad:60:88:a3:11:3f:60:0c:68:26:c3:9c:9c:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:49:B8:24:01:F2:12:30:25:F0:3C:C8:59:0C:93:68:B5:82:07
X509v3 Authority Key Identifier:
keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/0W5JuCQB8hIwJfA8yFkMk2i1ggc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.176.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:24:46:d4:a5:d3:2d:b0:bc:04:07:2b:05:97:4e:45:3a:03:
69:dc:e7:4a:fb:43:13:9a:f4:9e:b7:a2:2d:36:d1:ac:ac:ba:
a1:cc:52:b1:91:12:75:41:2b:39:ff:e1:4c:1c:bb:02:37:04:
be:8f:49:8c:c6:f0:c1:77:8c:e5:4e:c2:99:f7:be:d7:ff:c2:
9b:49:13:51:5e:f9:37:39:5f:7c:33:dd:88:4c:f6:a4:54:1e:
89:c8:6b:ab:01:36:40:13:17:6d:eb:5a:e0:27:53:03:6a:58:
13:b8:9d:fb:dc:4d:a4:2a:86:95:4f:cf:cf:58:9b:66:fd:46:
2b:6f:3b:a8:a7:a4:62:f1:e1:88:1d:17:e0:b2:0d:21:22:f1:
4a:26:8f:1b:71:99:a7:7d:b1:6c:7e:4a:73:9f:07:ab:f0:fd:
a3:c6:69:43:4a:29:78:ca:36:6c:bf:72:2a:6b:ac:2f:2d:c1:
7f:04:86:09:da:a1:3e:12:0f:a2:1e:4f:5e:14:b9:a1:a8:7d:
16:80:a7:25:c7:35:d5:c3:d4:66:ea:6e:c5:cb:73:37:bf:8e:
91:1b:44:e1:3d:b3:20:18:8d:0d:3e:f4:7b:95:29:85:49:97:
5d:72:5d:84:96:d3:af:7f:e8:c8:bb:9a:90:bb:67:dd:d9:ab:
d0:be:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:58 2024 by rpki-client on console-fra.rpki-client.org