Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/cU7vdv2yOlEd0BzOMgyEDYg9Nb0.roa
File: cU7vdv2yOlEd0BzOMgyEDYg9Nb0.roa (raw, json)
Hash identifier: c0a9Px1ejsp3RPEWqi3QwqrrVZfFGwSkcwh5RKh0zsU=
Subject key identifier: 71:4E:EF:76:FD:B2:3A:51:1D:D0:1C:CE:32:0C:84:0D:88:3D:35:BD
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 018A4BA87098CEC591C4FCB941F9DC342491
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/cU7vdv2yOlEd0BzOMgyEDYg9Nb0.roa
Signing time: Thu 31 Aug 2023 12:54:04 +0000
ROA not before: Thu 31 Aug 2023 12:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.171.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:a8:70:98:ce:c5:91:c4:fc:b9:41:f9:dc:34:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Aug 31 12:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714eef76fdb23a511dd01cce320c840d883d35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:09:d9:5b:87:bd:de:b4:59:47:54:36:99:
45:a1:fc:dd:ca:85:c4:ae:b7:b1:d1:3c:79:76:44:
28:08:fd:f0:ae:2b:3b:2b:9c:ff:28:be:18:65:74:
90:9b:6d:a5:23:d6:0f:60:63:f1:19:aa:c0:b1:b8:
28:ed:49:8a:21:83:08:27:a7:2e:29:74:b7:b0:ab:
c7:39:8b:6b:7d:ba:6c:ba:22:db:c6:f5:8e:1e:43:
6e:32:61:26:74:f1:1d:04:db:83:cf:7b:9b:b7:99:
08:da:a5:03:c6:8e:cc:6a:f5:65:1c:da:26:4e:43:
d9:07:89:20:cc:86:86:ff:ed:97:22:68:4c:41:6e:
f3:e5:5c:95:78:cf:53:6a:ae:07:43:f8:59:b9:6d:
93:3d:2f:00:f3:a2:c2:a6:4e:d5:26:a9:f7:50:99:
e6:70:43:ff:6a:d0:76:78:65:66:1b:25:2d:7b:8e:
4d:7d:d6:82:51:9e:0f:cf:ba:fb:5e:17:6c:00:35:
90:84:22:0f:70:08:6b:f2:dd:f0:28:cf:30:e3:4a:
23:15:62:95:85:64:bd:ad:1c:f6:fd:40:72:ca:f7:
be:e1:22:89:21:f4:cf:d6:3d:8f:a8:f6:3a:fd:bd:
9e:98:67:af:b3:bb:0c:66:73:5e:da:cf:c5:8b:be:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:EF:76:FD:B2:3A:51:1D:D0:1C:CE:32:0C:84:0D:88:3D:35:BD
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/cU7vdv2yOlEd0BzOMgyEDYg9Nb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.161.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b7:c4:d9:9c:a7:af:26:b2:37:a8:e4:a5:0a:1f:53:86:ab:
45:8b:9e:07:c3:22:5c:48:08:76:87:db:f3:b5:40:e5:36:bf:
ba:ee:8c:b1:e1:4e:bb:a1:78:e2:8d:d9:49:f8:f1:54:0d:e5:
3d:ab:8c:64:49:82:21:ac:07:86:4e:9c:b7:d0:66:95:8d:ff:
87:07:be:56:55:dc:15:7a:72:c4:e5:27:e2:fa:64:ff:04:b1:
ba:b8:1f:60:dd:f4:a7:fc:5e:8b:96:9e:6e:e8:bb:e8:77:0f:
75:14:79:5c:ef:20:fb:fb:95:6f:13:fe:81:55:13:15:e6:0f:
44:b9:8f:7b:31:1e:6c:61:3e:f8:5e:98:01:ca:65:b5:6e:ea:
9a:03:c8:bf:b2:4d:a4:71:30:57:6c:c0:47:83:c7:a0:0d:dd:
88:74:75:1c:3c:cc:8f:e7:df:7d:4c:f1:91:f2:5f:fb:72:2d:
83:6a:f7:c2:11:67:bc:98:a9:3e:78:40:86:26:56:df:4b:57:
6e:34:3d:7d:88:bc:92:47:ee:d7:96:88:04:50:3f:55:55:dd:
d3:11:84:8a:4c:77:56:8e:9c:17:62:59:04:57:7f:7b:75:ac:
ae:04:67:c2:fd:26:92:a3:94:20:d0:68:e4:a8:f9:b2:d7:14:
8f:ef:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org