Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/xmCtmIY0jB6eCRk5IHcuoyUjc_g.roa
File: xmCtmIY0jB6eCRk5IHcuoyUjc_g.roa (raw, json)
Hash identifier: mpO7VwgIbTmadY8/SWpgnUJujvSH3DfvdbcgZQ7ZbN0=
Subject key identifier: C6:60:AD:98:86:34:8C:1E:9E:09:19:39:20:77:2E:A3:25:23:73:F8
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 01856F66C1A641C3EF6CBA83C2B383DA16A4
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/xmCtmIY0jB6eCRk5IHcuoyUjc_g.roa
Signing time: Sun 01 Jan 2023 22:14:43 +0000
ROA not before: Sun 01 Jan 2023 22:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200449
IP address blocks: 185.104.208.0/22 maxlen: 32
2a06:3340::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 29 May 2023 11:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c1:a6:41:c3:ef:6c:ba:83:c2:b3:83:da:16:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jan 1 22:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c660ad9886348c1e9e09193920772ea3252373f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:cf:47:62:6d:44:48:be:02:7b:37:00:ce:
d0:02:f3:5f:ec:e0:9b:ba:a0:34:8b:ae:1c:eb:e8:
ab:99:6e:b5:6c:9d:26:3b:c2:6c:61:b2:a2:c5:ab:
f1:f1:1a:87:a7:98:78:dc:e7:80:3e:6c:f0:34:52:
e7:1e:94:6f:ca:1e:1b:3a:b6:f9:17:a9:f8:94:ce:
55:73:68:fe:38:19:3b:66:7d:dc:cd:70:a7:6a:9e:
4d:b5:31:8f:51:e6:71:56:3e:80:36:72:71:cc:04:
91:6a:dc:12:eb:77:aa:69:5a:62:1e:03:2d:5f:ac:
89:5d:55:5d:f4:43:c6:c0:99:59:16:da:5f:12:df:
75:41:ce:68:60:04:cd:c7:fd:b1:59:ef:19:62:5f:
ca:bb:1d:5a:78:ca:b0:7a:f6:a6:c0:71:e9:99:c2:
2b:c0:94:fd:d1:d6:94:dc:c2:a9:53:54:96:3a:09:
a3:42:d0:d6:22:64:d5:26:72:b9:3a:66:e4:58:32:
60:cc:41:e2:0a:a4:95:4b:ab:0d:af:4a:c6:1b:c8:
47:a6:ef:ae:c2:af:54:00:6d:8b:e1:4f:97:c9:11:
ab:67:9f:7b:ec:48:ad:ee:37:b3:6c:66:b5:ed:5a:
9e:16:e8:90:31:37:5d:3c:f3:e8:f1:26:c1:22:9a:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:AD:98:86:34:8C:1E:9E:09:19:39:20:77:2E:A3:25:23:73:F8
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/xmCtmIY0jB6eCRk5IHcuoyUjc_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.208.0/22
IPv6:
2a06:3340::/29
Signature Algorithm: sha256WithRSAEncryption
4a:05:0a:1f:79:da:ae:ea:d5:5f:68:bb:f9:4c:b8:56:55:d0:
24:c9:11:6f:00:57:be:88:27:a9:f0:77:7d:e1:6b:af:31:30:
fb:1a:84:8b:53:65:58:35:dd:b1:a5:74:00:c8:42:3b:4f:64:
ec:2f:05:16:35:54:c0:82:94:4c:d4:40:9a:10:83:92:e1:2a:
90:fe:54:86:fc:75:b8:8b:cd:aa:5c:54:ad:3a:58:ee:d8:1e:
08:78:06:53:11:bc:25:96:67:a2:53:26:20:ee:67:33:fe:42:
f4:85:53:72:d4:ec:7d:82:eb:3d:3c:88:c6:f2:67:91:68:b9:
77:54:60:12:d1:68:0e:de:90:5a:91:8b:d0:83:35:ef:40:d5:
80:1d:9c:05:22:cc:2f:8b:46:73:c9:82:6d:bb:19:1a:cf:d2:
2c:6c:aa:59:c6:85:f0:18:79:c8:4a:fb:65:8a:a2:e4:46:41:
f4:d6:d6:74:65:2d:bb:13:a7:f2:28:ac:3e:2c:5d:51:82:d7:
b2:a4:68:7a:de:c2:ed:ed:b0:f0:78:2c:1c:18:01:de:be:a8:
c0:2d:9f:46:7d:9e:a4:54:b8:71:6e:68:be:f2:86:25:1f:ab:
06:8a:c0:07:08:af:ef:0c:f5:d0:d3:c2:6a:9b:34:49:8c:f9:
e9:5a:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:03 2024 by rpki-client on console-fra.rpki-client.org