Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/9LZTuvn6Kig36SuZhIyILMayL6Y.roa
File: 9LZTuvn6Kig36SuZhIyILMayL6Y.roa (raw, json)
Hash identifier: P2ppcq25Gqnt335ksph8qL6zIa2gkPTuuEv1dCpWNbQ=
Subject key identifier: F4:B6:53:BA:F9:FA:2A:28:37:E9:2B:99:84:8C:88:2C:C6:B2:2F:A6
Certificate issuer: /CN=ba9c1933f1efd78700efdd5fdb0dc89cc8b6734a
Certificate serial: 01856D81BC9CDF6801A43195616EE980BB1D
Authority key identifier: BA:9C:19:33:F1:EF:D7:87:00:EF:DD:5F:DB:0D:C8:9C:C8:B6:73:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upwZM_Hv14cA791f2w3InMi2c0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/9LZTuvn6Kig36SuZhIyILMayL6Y.roa
Signing time: Sun 01 Jan 2023 13:24:56 +0000
ROA not before: Sun 01 Jan 2023 13:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.103.201.0/24 maxlen: 24
2a06:2d40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:bc:9c:df:68:01:a4:31:95:61:6e:e9:80:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c1933f1efd78700efdd5fdb0dc89cc8b6734a
Validity
Not Before: Jan 1 13:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b653baf9fa2a2837e92b99848c882cc6b22fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:b9:71:cc:e8:80:02:be:66:f8:b8:55:ca:
01:5d:e0:f7:2c:6a:69:cc:b2:4e:9a:65:26:1c:e1:
55:11:8d:73:bd:05:dc:97:79:9a:ff:75:85:66:a5:
b3:10:f1:2e:80:94:4b:3c:79:d5:f5:1d:e5:09:bb:
12:b2:25:5b:51:c1:a2:e2:3e:cc:67:8d:ab:79:74:
55:bb:8c:c9:0a:dc:81:e4:9f:7d:6e:c3:62:d2:12:
e4:fa:e4:d2:19:7b:36:38:ec:3c:14:ef:8d:de:3b:
1c:1a:3f:aa:cb:8b:96:50:87:d0:10:4e:b9:b7:bd:
db:f5:5d:b9:00:d9:bb:cc:33:9e:0e:1b:aa:8a:ab:
98:4b:24:e7:35:28:36:1c:7a:04:ef:b4:53:20:90:
35:e7:fc:66:c2:63:2c:9c:ab:4c:e4:e5:46:43:5e:
07:85:d8:3a:2c:6d:2d:dc:72:fe:15:45:f2:c0:36:
f3:aa:64:89:dc:4b:19:e3:0d:cb:0f:45:f9:4e:4a:
82:4c:79:a9:4c:fa:6c:74:c0:21:42:0d:ca:a4:81:
ad:e8:2a:0e:fe:5e:d7:08:42:f4:83:6e:b3:c7:b9:
66:63:eb:55:ef:81:6c:75:ce:15:52:bc:ab:3b:37:
c0:16:08:35:f9:46:fd:2a:d1:48:99:0e:b3:29:f6:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:53:BA:F9:FA:2A:28:37:E9:2B:99:84:8C:88:2C:C6:B2:2F:A6
X509v3 Authority Key Identifier:
keyid:BA:9C:19:33:F1:EF:D7:87:00:EF:DD:5F:DB:0D:C8:9C:C8:B6:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upwZM_Hv14cA791f2w3InMi2c0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/9LZTuvn6Kig36SuZhIyILMayL6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/upwZM_Hv14cA791f2w3InMi2c0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.201.0/24
IPv6:
2a06:2d40:2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:e6:88:8a:0e:b5:e0:4f:df:dc:b8:f6:a0:51:3b:c9:29:e5:
91:be:f4:c2:3e:c0:2a:6a:87:ce:67:16:42:f8:10:3c:18:01:
30:d1:b3:7f:95:73:26:1e:dc:b1:cf:3c:fc:00:c8:ec:51:61:
f7:71:be:33:01:b3:e1:10:2a:3e:5e:b5:82:d1:20:80:dc:94:
6c:1f:43:00:0c:dc:e5:39:ef:24:77:60:1e:8b:7c:5e:1b:a0:
2a:a3:9d:a9:15:d2:d0:7c:f3:5f:1e:95:ad:c0:03:ec:8d:30:
06:40:1a:69:4b:79:ba:55:4a:3b:df:54:9f:aa:b6:ac:29:1a:
cc:5d:cf:f1:bf:9e:00:4f:6c:ce:a4:f2:86:7a:18:36:33:9e:
bb:d4:f6:40:39:c8:7a:57:a0:a9:55:6b:1e:84:b2:84:88:7b:
bc:79:36:46:f2:b0:00:4f:ae:cd:85:78:0f:80:14:a6:c3:ce:
49:6a:f2:37:b2:07:16:7d:b0:7f:3d:6a:7f:ac:bd:64:18:89:
97:38:55:fe:c4:f4:92:09:e9:a4:97:ed:68:d6:5a:b3:8c:3a:
f9:3b:7c:f8:d4:40:60:9a:33:5f:9b:27:0f:3e:95:ac:74:0a:
07:fd:80:79:24:c2:fa:8c:30:2c:96:be:fc:97:86:c4:e9:dd:
ff:1b:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:50 2024 by rpki-client on console-fra.rpki-client.org