Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/r8SnLf6OWgbtCDjiMcLBHkvWzU8.roa
File: r8SnLf6OWgbtCDjiMcLBHkvWzU8.roa (raw, json)
Hash identifier: MrKCbiAkdeSIABL8Ot95vY/tcSqkTj1fpx2Tlxe1tAc=
Subject key identifier: AF:C4:A7:2D:FE:8E:5A:06:ED:08:38:E2:31:C2:C1:1E:4B:D6:CD:4F
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 0189DEBB379ABFDFE7C37886561C1E3C36F3
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/r8SnLf6OWgbtCDjiMcLBHkvWzU8.roa
Signing time: Thu 10 Aug 2023 09:15:58 +0000
ROA not before: Thu 10 Aug 2023 09:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.116.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 16:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:bb:37:9a:bf:df:e7:c3:78:86:56:1c:1e:3c:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Aug 10 09:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afc4a72dfe8e5a06ed0838e231c2c11e4bd6cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:2b:df:b0:8e:12:50:6f:62:fa:9c:94:74:
1c:ea:be:e8:7d:e2:08:95:2f:11:12:bd:e6:b2:3b:
35:16:48:db:e0:14:97:33:be:02:83:a1:95:ed:11:
64:e5:66:42:2b:f2:4b:97:4e:ef:ed:bf:ed:3a:74:
51:3e:23:b8:e3:93:4e:3e:2e:e5:ce:9a:ec:e9:2c:
3f:42:ad:bc:fe:1f:a2:d1:e9:ac:00:61:33:10:10:
7e:a9:36:7f:95:43:8d:67:95:28:23:50:4a:9f:27:
e0:26:d9:c0:82:36:06:74:3f:5b:e8:76:d6:5b:74:
0c:5f:d2:9c:ec:d9:56:6d:63:c1:34:75:af:bf:e8:
0d:8a:65:b3:94:dc:e6:6a:e6:9b:31:69:84:c3:12:
57:d7:9a:55:09:05:df:5a:7c:6d:f9:3d:db:26:d9:
d0:3c:c1:18:e0:80:d2:e0:7a:07:42:8e:18:95:ca:
a4:c4:b4:07:13:18:b9:fb:51:15:c1:80:73:86:38:
81:9f:79:83:7e:03:73:d1:45:04:84:03:48:72:0c:
49:e1:77:d1:f5:35:37:e6:32:75:35:96:04:1a:dd:
8d:50:6f:08:12:92:c1:76:81:32:5c:3f:3c:6c:7c:
42:24:6b:20:4d:ce:60:6a:f9:8c:1f:2b:77:c5:6c:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:A7:2D:FE:8E:5A:06:ED:08:38:E2:31:C2:C1:1E:4B:D6:CD:4F
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/r8SnLf6OWgbtCDjiMcLBHkvWzU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.168.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:1a:e0:31:7e:f3:05:b6:b1:71:2a:c5:22:ee:3b:df:d1:b4:
51:76:f1:3e:b0:b4:c4:68:3d:55:ee:e6:13:01:6a:bb:a1:89:
98:62:ce:10:56:60:7e:b2:61:95:95:81:21:4c:0f:88:86:41:
ae:7f:fd:07:84:25:31:8e:ea:db:b7:6f:05:42:7c:71:b5:9e:
c0:f1:48:f4:89:55:09:27:d9:36:15:6c:8f:1c:4e:5c:9c:e4:
0f:f3:fc:3f:86:dc:3a:39:31:1a:c4:2a:57:4c:37:e5:89:20:
a9:d1:53:1f:cf:09:3c:01:b8:18:cc:17:cb:fa:ab:61:6e:23:
35:7b:06:cc:4e:16:93:27:7f:dc:2a:a6:89:bb:e2:7e:58:3e:
92:4f:fd:6d:a8:02:bf:78:36:53:8b:82:00:da:93:9d:09:a2:
dc:fe:c2:76:fe:87:10:7d:73:49:c7:bd:e2:43:34:92:04:cc:
61:7f:bb:b7:52:7f:c0:3f:de:1e:33:9c:30:c1:ab:39:10:81:
a1:0e:9b:87:3b:f2:df:e9:f8:58:c5:ab:40:bb:ea:fe:38:4f:
c7:70:f1:f5:d1:4d:b6:6b:fb:6c:ee:3b:5c:c0:e1:e7:6c:6e:
e4:36:3a:a9:6a:73:e4:ec:f5:dc:ee:bc:a5:2e:b9:29:14:9b:
86:dd:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:02 2024 by rpki-client on console-ams.rpki-client.org