Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7ZvPB5LugWzzMxVEeULqzY8JzNk.roa
File: 7ZvPB5LugWzzMxVEeULqzY8JzNk.roa (raw, json)
Hash identifier: 2HfZboou9SLXevi8Ed7dv9IUwV617N4LbHf/R9g3ZwU=
Subject key identifier: ED:9B:CF:07:92:EE:81:6C:F3:33:15:44:79:42:EA:CD:8F:09:CC:D9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018C2A0ECAA1449C0F7031DDE71E10F8D323
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7ZvPB5LugWzzMxVEeULqzY8JzNk.roa
Signing time: Sat 02 Dec 2023 10:24:21 +0000
ROA not before: Sat 02 Dec 2023 10:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199868
IP address blocks: 185.103.102.0/24 maxlen: 24
185.103.103.0/24 maxlen: 24
185.103.100.0/24 maxlen: 24
185.103.101.0/24 maxlen: 24
193.233.164.0/24 maxlen: 24
193.233.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:0e:ca:a1:44:9c:0f:70:31:dd:e7:1e:10:f8:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Dec 2 10:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed9bcf0792ee816cf33315447942eacd8f09ccd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:ca:db:05:e3:9f:5d:d0:f9:7c:04:b7:57:
8f:52:fb:44:70:4a:1a:ef:5e:a6:ff:5d:96:00:99:
da:cd:c9:8c:3c:cc:0c:06:fc:fb:85:84:1c:ed:48:
f0:5c:d2:27:7d:d0:98:31:10:0b:57:7a:db:26:a7:
05:4e:54:21:7c:4f:11:b7:f8:93:b6:17:ce:2d:b2:
29:ce:05:ae:61:dd:bb:cc:db:59:cf:29:da:ae:ef:
84:78:5a:dc:5a:f7:a5:8f:6e:14:e5:4a:19:ea:57:
27:8c:93:47:d5:94:18:fb:99:ee:b6:5b:2f:ef:e4:
df:48:37:78:b8:be:d4:14:1e:63:dc:32:25:a3:08:
10:f6:48:77:1d:fb:14:07:cb:73:a6:cb:ad:68:f8:
f3:43:87:c4:3c:7a:20:16:17:8e:42:d5:d6:ca:2a:
19:ae:7a:29:e9:77:18:2f:61:30:67:5a:7b:5a:70:
2e:c5:1a:d9:36:75:28:f4:75:a5:13:69:cc:b6:b4:
81:b7:da:0b:fa:d1:cb:16:a4:bd:73:86:14:fc:7d:
c9:44:8b:ac:d2:2f:de:60:7a:7c:86:7b:f3:1e:91:
39:6e:38:4d:e8:d1:d6:09:c8:4c:36:cc:7c:33:fb:
82:1d:61:52:11:a3:b4:cd:a7:92:91:c2:b8:f6:58:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:CF:07:92:EE:81:6C:F3:33:15:44:79:42:EA:CD:8F:09:CC:D9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7ZvPB5LugWzzMxVEeULqzY8JzNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.100.0/22
193.233.80.0/24
193.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:60:3d:16:0f:b3:8b:40:66:18:9f:22:84:b3:b8:b5:e0:f2:
36:61:2e:85:20:be:57:67:75:ea:e7:50:45:86:78:2c:4e:76:
23:43:bf:c2:92:d4:28:39:f9:b5:87:07:0f:56:e4:c8:54:c3:
56:aa:d3:3d:5b:00:88:0b:1f:0f:7c:0c:ad:04:f7:04:b3:13:
ea:66:9a:ae:fb:8a:51:da:b0:56:ee:15:45:3b:c3:01:dc:38:
79:b2:ca:5a:1b:11:0a:3e:77:4b:04:a7:03:0d:d4:eb:ae:31:
19:2a:d6:13:36:40:e4:8b:e8:7b:9a:25:10:6f:b8:7c:c5:a7:
cd:89:d5:cd:f6:4c:cb:e8:68:5d:4c:df:7e:bd:fb:c3:24:38:
81:dc:be:d3:70:df:1b:ff:70:9f:ed:a8:81:20:b2:4d:d3:0d:
e9:27:01:6d:97:1e:31:02:9d:cc:03:df:a9:3a:89:ef:45:08:
e9:55:8d:4d:f2:64:b8:ab:14:8f:3c:ee:ac:e0:db:d0:d6:bc:
89:27:2e:53:bd:9b:98:75:42:d5:99:fe:90:9a:cb:57:75:94:
14:ef:65:f2:73:f1:43:41:0d:bc:8b:d8:e1:4b:b2:b1:6c:a4:
91:bb:ec:0e:ce:7a:19:30:60:36:c7:a7:3e:c8:90:3b:0c:e5:
7a:cc:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 16 17:03:17 2023 by rpki-client on console-fra.rpki-client.org