Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/l6Jrhdc8AtcYqfYAJ-GC933wJ_I.roa
File: l6Jrhdc8AtcYqfYAJ-GC933wJ_I.roa (raw, json)
Hash identifier: 4kNeWeKX8lOaOZRVHbkf1kkkmuzy2VNct2cYIgMK2P0=
Subject key identifier: 97:A2:6B:85:D7:3C:02:D7:18:A9:F6:00:27:E1:82:F7:7D:F0:27:F2
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 018CCA28F1823E849FDC7C8B89F5D01FD453
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/l6Jrhdc8AtcYqfYAJ-GC933wJ_I.roa
Signing time: Tue 02 Jan 2024 12:32:09 +0000
ROA not before: Tue 02 Jan 2024 12:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 185.93.251.0/24 maxlen: 24
185.93.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 20:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:f1:82:3e:84:9f:dc:7c:8b:89:f5:d0:1f:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 2 12:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a26b85d73c02d718a9f60027e182f77df027f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:c4:42:ac:07:d5:59:f7:c3:f6:a2:4e:2b:
6a:d0:fe:e8:6e:cb:0e:91:84:a5:10:93:43:13:82:
11:b1:0d:90:be:7b:e2:1b:74:cb:5d:11:2d:fb:b3:
f3:06:b4:32:5a:84:95:04:c7:f6:a4:53:ac:6d:c0:
93:c4:55:df:26:1d:89:1e:99:44:e2:49:10:6e:dc:
e2:f6:31:4f:37:20:da:30:ae:c9:08:c7:3a:db:60:
bb:f7:37:2b:17:e9:37:89:2d:8f:cd:d5:9d:8f:c3:
3d:ca:f3:27:e5:d7:8c:78:35:a4:7f:43:c1:54:a3:
26:1d:65:50:7c:04:40:e8:b7:ff:97:50:89:09:89:
e0:d7:79:9b:c4:eb:d4:a2:33:06:1f:66:51:2b:49:
6d:74:8d:50:7c:d4:ce:3d:1b:96:92:6b:53:96:42:
5d:25:31:ac:6a:a9:c1:21:d0:39:a2:94:85:69:83:
88:61:6b:f0:e0:66:df:4c:31:34:04:19:e0:be:8d:
89:ed:22:aa:09:e7:29:26:39:de:a4:c1:e1:af:86:
ad:a8:ff:08:ff:fa:cb:4d:dd:19:f4:e5:02:bc:71:
37:c2:53:3f:32:b8:67:77:17:4c:f3:1f:75:48:41:
6f:ed:1b:36:74:41:d1:6a:f9:b7:ba:b2:06:46:af:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:6B:85:D7:3C:02:D7:18:A9:F6:00:27:E1:82:F7:7D:F0:27:F2
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/l6Jrhdc8AtcYqfYAJ-GC933wJ_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.250.0/23
Signature Algorithm: sha256WithRSAEncryption
31:5a:2a:31:c9:0f:70:58:0b:d5:e2:c0:f1:38:2a:45:af:10:
f2:3f:76:20:52:99:fc:d9:a4:5b:c4:63:9f:de:06:bc:d5:9f:
42:4c:a7:b9:9c:ce:c6:a4:17:be:b6:2b:d5:94:b7:95:99:1e:
4c:71:83:f9:56:56:3d:ad:91:af:eb:56:f8:3a:4d:58:1d:d3:
1a:0c:1b:61:2f:b1:b3:42:d7:26:7b:26:5e:43:25:e6:0d:20:
6d:2d:f8:d2:6d:ad:74:f6:ed:66:1f:21:af:a5:93:5f:7f:41:
f1:81:33:4b:96:32:a7:9f:f0:12:1b:14:07:8b:6f:fe:81:bc:
42:a8:9e:59:b4:1d:96:54:75:d6:2e:2e:04:50:3f:3e:e3:14:
1c:07:3a:8a:c4:a6:32:8f:5b:a1:8a:c0:60:e6:c6:35:07:e1:
13:40:f1:d4:c5:c1:7e:2b:f8:95:0a:e3:0b:4d:d8:8f:91:a0:
0b:5f:ed:eb:b5:fe:be:53:04:9f:e3:c3:07:33:0a:c6:6e:70:
c5:f1:b9:87:0c:52:61:20:85:6d:f9:73:ad:6a:34:1c:78:ac:
ef:c7:77:4a:b2:4d:83:03:8c:f6:11:26:c7:2a:ea:45:76:b2:
ad:80:92:c1:61:2f:e2:9e:de:58:a3:5a:fd:99:f6:14:48:d1:
71:f2:02:e3
-----BEGIN CERTIFICATE-----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Generated at Thu Feb 22 23:30:32 2024 by rpki-client on console-ams.rpki-client.org