Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/03FFCzub00kCY9mUDronHgHDiv0.roa
File: 03FFCzub00kCY9mUDronHgHDiv0.roa (raw, json)
Hash identifier: LG+3nBAtmpu8iewomRognyY7H2pOMBJCUbKIWmEP+hs=
Subject key identifier: D3:71:45:0B:3B:9B:D3:49:02:63:D9:94:0E:BA:27:1E:01:C3:8A:FD
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 01856DC1EA069EF36006C056DD84B6B9D5F3
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/03FFCzub00kCY9mUDronHgHDiv0.roa
Signing time: Sun 01 Jan 2023 14:35:02 +0000
ROA not before: Sun 01 Jan 2023 14:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44409
IP address blocks: 185.237.178.0/24 maxlen: 24
185.237.177.0/24 maxlen: 24
194.113.166.0/23 maxlen: 23
194.113.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ea:06:9e:f3:60:06:c0:56:dd:84:b6:b9:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Jan 1 14:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d371450b3b9bd3490263d9940eba271e01c38afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:df:a0:f3:4d:7e:31:18:62:71:bf:e1:49:
37:df:c3:75:f0:96:d6:6e:5f:c8:8b:c3:22:d8:f2:
6f:63:75:3b:7b:b3:58:7b:85:c8:d8:ee:7b:78:7b:
e0:a5:07:bf:78:7c:d9:fa:55:66:f9:b0:86:78:d2:
44:97:5a:e9:4b:71:b2:00:7a:64:58:77:aa:08:59:
51:a8:de:87:5f:79:68:31:86:5b:1a:42:7f:95:db:
1e:e1:73:f7:f2:2d:21:12:0e:14:a1:89:e8:fb:5e:
23:45:11:05:40:9d:bf:17:31:d1:4b:0d:3c:0a:9d:
30:42:77:42:a4:14:06:ac:44:39:d2:30:40:a7:08:
2c:5e:13:00:9b:7c:ee:1a:46:e8:e1:c9:09:7e:a5:
ae:ce:9a:9b:92:fa:c8:b2:97:49:45:3f:a7:41:ff:
85:c0:99:cd:90:15:27:1b:34:f1:25:49:42:c4:53:
90:e5:78:f0:45:0f:98:d1:14:ea:8b:7e:a4:00:e0:
bb:0f:cb:0d:3b:1b:b3:81:09:44:fd:96:0a:6b:1d:
dc:15:0e:89:cc:44:d8:3c:63:15:80:8c:cc:67:4d:
71:65:2d:fd:4f:b4:7b:2d:3c:cd:42:52:ed:76:ac:
be:a6:a9:6b:73:42:bd:09:45:93:73:4e:0e:ad:3b:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:45:0B:3B:9B:D3:49:02:63:D9:94:0E:BA:27:1E:01:C3:8A:FD
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/03FFCzub00kCY9mUDronHgHDiv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.177.0-185.237.178.255
194.113.166.0/23
194.113.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:4a:e4:cb:88:e3:21:b8:6d:cd:02:2b:c5:e3:df:34:d1:c9:
43:6b:4a:6a:2a:41:13:9e:53:2e:8e:0f:5f:87:6c:da:27:33:
d3:a1:99:03:27:bc:b6:ed:7d:71:24:fd:de:10:c5:44:77:3d:
aa:0b:66:e0:33:c3:01:87:7a:7c:e4:85:aa:7d:00:e1:d8:05:
4d:c9:8a:e1:4b:66:71:b9:34:22:d4:d9:51:6a:59:6e:bb:2b:
6c:55:ef:bc:ad:7f:68:45:fe:92:18:91:ba:e8:13:04:e0:3a:
9a:7f:5e:1d:47:94:3c:84:45:ff:2d:7d:03:dc:0c:b0:51:32:
e8:82:88:91:68:3c:28:3a:a0:e8:c6:c6:21:12:23:e3:42:6a:
ba:c1:d4:95:10:8f:f9:c3:64:0d:8b:9c:30:27:93:21:5c:dd:
15:b4:cd:a6:c7:72:fc:d7:ef:72:88:a4:75:64:ce:0b:a1:2d:
3f:dc:82:05:4d:8d:b3:9c:ab:b3:bc:0a:1d:12:c5:54:77:b2:
d6:4c:28:82:b9:1d:29:ea:5b:41:cb:16:f1:60:10:c6:3d:8c:
21:56:81:55:7c:05:c6:54:e7:f9:6b:0a:b2:a7:9d:ef:89:78:
c2:2a:f0:c3:e1:c7:af:45:74:ee:89:a4:e4:2e:a5:50:0b:5d:
e3:a1:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:16 2024 by rpki-client on console-fra.rpki-client.org