Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/AT8TLbMh8FumvrxAoet-6dBRUQU.roa
File: AT8TLbMh8FumvrxAoet-6dBRUQU.roa (raw, json)
Hash identifier: L4i6zbMcwU/2G1qeijffzO/wtAPUiSk/o1GeIczGPgo=
Subject key identifier: 01:3F:13:2D:B3:21:F0:5B:A6:BE:BC:40:A1:EB:7E:E9:D0:51:51:05
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 01924C490D18C1D6A199E57CE693B8CCA0C0
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/AT8TLbMh8FumvrxAoet-6dBRUQU.roa
Signing time: Wed 02 Oct 2024 08:11:48 +0000
ROA not before: Wed 02 Oct 2024 08:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 185.171.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 12:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:49:0d:18:c1:d6:a1:99:e5:7c:e6:93:b8:cc:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Oct 2 08:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=013f132db321f05ba6bebc40a1eb7ee9d0515105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:70:23:f3:6d:8d:28:52:6b:a1:58:13:12:
2d:eb:d6:a7:95:7c:68:d9:43:7e:e4:da:4a:2c:f5:
c8:0b:39:dc:42:6b:95:b1:96:da:e6:07:3a:59:f6:
0a:ec:65:d0:d6:5b:b0:19:af:c9:f6:c5:b2:43:3c:
a0:f8:f5:ba:b7:d9:cc:32:2e:57:44:84:38:18:c7:
9d:3e:cb:2d:32:47:b6:8f:c3:c4:85:c1:13:8b:8e:
8f:17:69:bc:d3:53:13:6c:91:11:a6:d5:a3:c2:b4:
bb:31:5f:3e:c6:d5:f7:f8:2d:52:0f:da:8d:b5:92:
50:02:01:0c:44:41:b9:44:3e:8b:ae:94:70:ce:2b:
82:5b:80:d7:38:88:9a:0c:82:d7:0e:2b:14:be:c5:
13:f5:21:f8:9d:58:d1:6f:ce:87:36:1d:d7:66:21:
6e:6f:43:c7:73:75:81:30:91:dc:7c:da:ce:75:fc:
03:94:6d:6d:95:8e:0b:ce:31:a5:48:d5:52:21:9c:
4b:a8:de:1d:aa:df:8e:29:41:b3:d8:ee:af:c2:27:
fb:0b:07:1e:de:32:83:9e:c1:d2:dc:d9:8b:bc:f5:
61:69:59:09:ea:5a:33:43:88:67:3c:19:e2:18:cd:
b1:37:bc:e8:b9:f1:42:f3:4e:a4:b3:c4:0f:af:c7:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3F:13:2D:B3:21:F0:5B:A6:BE:BC:40:A1:EB:7E:E9:D0:51:51:05
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/AT8TLbMh8FumvrxAoet-6dBRUQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.161.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fa:c4:8e:15:2a:00:1e:90:64:c6:44:a6:58:a6:22:b0:d6:
6f:42:a6:af:97:5d:44:54:3f:6f:7d:2b:05:fb:00:4d:91:66:
70:38:6a:39:db:18:b3:9d:80:92:94:eb:9d:da:8a:48:c0:f6:
f8:49:20:3d:e0:92:f1:50:11:ab:95:b1:b8:2a:41:9d:53:33:
04:2d:8a:54:bb:dd:f1:8d:09:fa:b2:2e:54:c4:bb:48:65:39:
cc:0a:78:13:4a:83:29:66:03:91:86:bb:d5:df:eb:71:02:e9:
d3:1f:26:b8:63:1a:1b:d8:a5:65:f3:a6:9a:a4:63:57:7c:03:
81:32:b7:62:a7:ee:a5:d3:5b:94:4d:7c:2d:0a:9d:97:97:80:
23:8a:49:c9:0c:45:cc:0f:24:7d:d6:3d:de:c6:37:76:27:0f:
89:be:0c:8d:10:66:b1:64:3e:17:07:b2:23:46:38:fa:5b:8b:
33:c3:59:a7:06:e5:7b:0a:d1:42:5b:37:22:df:0b:5c:91:79:
a2:c1:b9:38:be:37:b2:d8:36:35:a8:86:ca:dd:54:c8:b4:4f:
f1:94:75:e1:bb:15:0b:98:5a:1c:f9:82:91:73:31:5b:63:ad:
a3:51:4c:1e:a6:b1:3a:ba:b0:5f:30:b4:c1:1c:9d:58:8d:70:
45:a6:00:f0
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 2 17:25:50 2024 by rpki-client on console-ams.rpki-client.org