Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jJQmdb0TdCjn5mJpNpPnMAh6y0s.roa
File: jJQmdb0TdCjn5mJpNpPnMAh6y0s.roa (raw, json)
Hash identifier: l+uiYRDZW4bO9IraFkfTOJjlkovnf5Kd5TcDe480iro=
Subject key identifier: 8C:94:26:75:BD:13:74:28:E7:E6:62:69:36:93:E7:30:08:7A:CB:4B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018BD775668780BC6899661BB2D43DE6D88E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jJQmdb0TdCjn5mJpNpPnMAh6y0s.roa
Signing time: Thu 16 Nov 2023 09:27:57 +0000
ROA not before: Thu 16 Nov 2023 09:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199868
IP address blocks: 185.103.102.0/24 maxlen: 24
185.103.103.0/24 maxlen: 24
185.103.101.0/24 maxlen: 24
193.233.164.0/24 maxlen: 24
193.233.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:75:66:87:80:bc:68:99:66:1b:b2:d4:3d:e6:d8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 16 09:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c942675bd137428e7e662693693e730087acb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:29:eb:a3:5f:e4:70:65:09:32:4a:49:2f:
7e:da:b7:6d:7c:ff:57:0e:95:03:ed:4a:ce:74:56:
8f:45:36:75:cd:79:f5:c1:d7:d0:8b:20:ec:e7:ec:
13:35:df:4a:e5:7d:00:7f:98:cf:c6:fb:5e:dc:b4:
e7:0c:93:03:3e:99:28:ff:11:d4:bf:5e:98:a7:ed:
cd:35:87:16:65:73:50:04:f8:9a:b8:dc:73:78:86:
28:ca:f4:b3:12:44:71:11:34:cc:aa:80:d3:2c:df:
ec:ce:5d:04:12:cd:78:c9:b6:2a:1b:08:d7:75:c7:
32:1e:71:2e:e4:c3:b4:f6:1a:6e:14:2c:9f:d8:d8:
0b:09:68:97:aa:ef:ba:d6:35:c1:ab:e4:e8:6c:90:
7c:e3:01:09:4f:e7:5b:11:86:c6:02:52:fc:c9:2b:
e3:d5:bd:62:ef:7b:65:2a:d2:84:1b:c5:98:65:0e:
54:36:31:22:c1:bf:a6:44:bc:6c:29:f2:d2:c5:be:
b4:6a:76:28:a3:ce:91:58:c5:3e:de:11:9e:ed:4c:
b2:76:46:3a:27:c9:6c:19:1c:41:54:75:5c:20:28:
02:42:3a:bd:b6:53:39:5b:bc:47:a1:69:3d:e8:71:
10:1a:3c:c9:0f:c4:3b:22:8f:eb:54:0a:1d:ac:dc:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:26:75:BD:13:74:28:E7:E6:62:69:36:93:E7:30:08:7A:CB:4B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jJQmdb0TdCjn5mJpNpPnMAh6y0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.101.0-185.103.103.255
193.233.80.0/24
193.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f8:40:39:2b:87:d6:42:4d:25:c4:55:0a:a3:44:a4:cf:3b:
6e:27:64:7e:fa:f7:7b:00:2d:a4:6b:65:a4:6c:c4:4b:c2:5f:
25:12:0d:95:8a:30:54:71:b5:24:47:25:95:5a:20:f3:0c:c7:
67:24:07:76:f6:3f:da:8f:9b:7e:4a:ba:0d:60:1d:c9:91:4f:
b7:b6:ab:1a:63:aa:96:5c:37:94:55:8d:ef:21:d4:bb:82:be:
1d:10:43:5b:98:c6:ed:0a:a8:c7:7f:55:ae:43:0a:24:2b:b6:
60:21:67:e7:b0:34:49:2f:d9:da:d3:92:52:9e:30:25:0b:36:
c4:5e:28:5a:19:79:b4:bb:d5:16:20:7c:94:a4:0a:c9:d8:91:
22:b6:be:7a:77:e5:58:b3:91:70:47:ca:a1:f4:b3:89:7e:fc:
69:71:80:70:5d:6e:5a:33:04:d3:61:dc:38:07:18:bb:89:72:
cd:47:fc:cf:f7:17:33:fc:33:dc:36:6c:76:80:58:f2:27:7b:
30:a8:6c:81:fd:45:36:45:12:34:08:99:e7:59:57:99:b1:df:
52:a2:70:1d:83:ce:08:82:08:02:2b:27:5d:a8:23:bb:38:ef:
ce:50:4b:aa:6c:d5:ce:72:36:6a:e0:25:06:fb:d6:42:aa:3c:
d2:10:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 11:16:57 2023 by rpki-client on console-fra.rpki-client.org