Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/0N4GLItwrxY_hg_F3kP4ANg6eco.roa
File: 0N4GLItwrxY_hg_F3kP4ANg6eco.roa (raw, json)
Hash identifier: 3JIPEKmux0go+SEpTso9jnShByd+19juTMlbzeiLm+o=
Subject key identifier: D0:DE:06:2C:8B:70:AF:16:3F:86:0F:C5:DE:43:F8:00:D8:3A:79:CA
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 018CCA2AC28010C9E26B654B713BD819C420
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/0N4GLItwrxY_hg_F3kP4ANg6eco.roa
Signing time: Tue 02 Jan 2024 12:34:08 +0000
ROA not before: Tue 02 Jan 2024 12:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199533
IP address blocks: 185.144.115.0/24 maxlen: 24
2a0f:ac80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 04 Apr 2024 09:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:c2:80:10:c9:e2:6b:65:4b:71:3b:d8:19:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Jan 2 12:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0de062c8b70af163f860fc5de43f800d83a79ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:81:71:e1:3b:c6:3f:25:85:5e:af:97:01:
f8:34:87:91:fd:85:29:a8:80:99:b9:b3:cc:6a:f2:
f0:9c:1f:62:8f:cb:32:5b:83:ac:29:b0:59:9c:7e:
46:c4:d0:b0:c5:88:9e:ca:74:20:70:e3:42:2d:e5:
6a:81:81:73:22:e2:f9:51:9e:86:47:82:c7:e7:ac:
16:9c:f6:64:2e:96:af:cf:93:5d:df:17:5f:56:1b:
4e:c2:f9:a1:a7:1f:e2:60:fd:9f:18:92:06:c5:64:
2b:5d:83:7a:f4:3b:e0:3e:7b:b4:85:85:cb:64:e5:
fc:7c:44:ef:3f:03:b4:9a:88:1c:60:6d:db:a3:e6:
24:17:3c:13:e2:49:de:7f:96:de:e7:fa:6e:8a:14:
d4:6b:59:40:49:14:e2:38:2d:80:b5:e9:da:e5:0b:
8c:65:61:2e:ff:cf:6b:a9:81:8b:be:9c:0c:6e:b3:
5d:a6:7e:5a:b0:58:89:5a:5b:b0:fc:ac:35:54:08:
55:b3:3d:6c:97:ba:4f:8d:2d:85:26:06:a0:fe:3f:
c6:15:b7:af:7a:dc:5e:4c:ae:29:79:4c:a5:4f:3f:
d8:29:3f:39:3d:d4:0f:69:06:34:2a:f2:02:6c:a2:
64:e1:87:ea:bd:eb:e3:62:19:79:2f:0d:d8:b0:7a:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:06:2C:8B:70:AF:16:3F:86:0F:C5:DE:43:F8:00:D8:3A:79:CA
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/0N4GLItwrxY_hg_F3kP4ANg6eco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.115.0/24
IPv6:
2a0f:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
1c:fc:a9:96:1e:c3:d0:37:6d:dd:18:fa:72:ab:d2:cb:e3:84:
85:3b:37:c7:69:a9:b1:e3:c9:9f:ea:d8:36:80:85:6d:5b:7d:
f3:ce:61:b6:0e:9d:fa:e7:f6:de:fe:6e:45:5f:c8:8b:43:56:
32:fa:81:8e:b9:82:95:a0:80:10:f8:5f:bb:0a:b8:82:71:8b:
55:1b:37:a7:62:70:26:0d:fd:1e:29:8d:36:dd:c3:65:43:2f:
01:0a:c7:17:fb:72:11:c9:a6:4e:2b:14:d3:ca:55:7d:fb:cb:
d8:10:ce:37:55:fb:61:d9:f1:32:fb:55:2d:c6:b6:23:67:44:
b0:81:4a:14:82:bb:23:8f:6d:3d:11:5b:61:56:b0:8e:02:54:
50:78:42:c7:e3:91:f9:aa:cc:04:48:2d:7e:5b:4b:d2:90:3c:
57:36:56:45:3a:6e:47:43:bc:48:53:eb:f5:3c:f4:52:d3:92:
84:fd:35:57:f4:ba:77:d4:45:45:06:33:9f:d2:26:55:aa:6c:
0a:14:cc:00:54:c2:6e:35:f6:a5:20:49:fe:a1:15:f3:57:c3:
82:1e:12:f8:d8:ad:ee:78:6d:57:c8:8a:11:57:d5:03:3f:20:
12:0c:f4:5a:c6:fa:c2:f2:2f:91:1e:90:c5:8f:6f:cf:a1:87:
20:0e:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 16:20:07 2024 by rpki-client on console.sobornost.net