Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/b6Zv9jBHUhnhTbXHvPHsNXeZBak.roa
File: b6Zv9jBHUhnhTbXHvPHsNXeZBak.roa (raw, json)
Hash identifier: vvlyLvwnJoTtZaY+5gFFn8+Hy3LERYeV4sPdgYxdDuw=
Subject key identifier: 6F:A6:6F:F6:30:47:52:19:E1:4D:B5:C7:BC:F1:EC:35:77:99:05:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01897846B443FAB33CB7A700F5D12CD3EEB0
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/b6Zv9jBHUhnhTbXHvPHsNXeZBak.roa
Signing time: Fri 21 Jul 2023 11:47:26 +0000
ROA not before: Fri 21 Jul 2023 11:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42083
IP address blocks: 185.208.100.0/24 maxlen: 24
185.208.101.0/24 maxlen: 24
185.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 08:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:46:b4:43:fa:b3:3c:b7:a7:00:f5:d1:2c:d3:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jul 21 11:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa66ff630475219e14db5c7bcf1ec35779905a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:4b:ab:8a:d2:cc:54:e2:5f:da:8f:24:d9:
a6:ef:aa:00:dd:34:ae:fb:08:c7:f2:49:d7:9c:c4:
d6:78:2e:d1:59:8d:6b:bd:97:2c:33:b8:a3:92:0c:
2f:84:69:04:7b:5b:f9:14:be:45:87:61:11:a1:9f:
d9:b2:74:fd:47:c3:8e:b4:65:45:69:37:8e:0d:53:
de:50:11:8b:e7:30:c5:e6:0e:e8:c2:40:64:7b:b4:
a5:99:6e:84:70:a7:70:1e:82:ee:b5:1f:83:3a:c6:
82:c9:a9:c4:27:d8:06:cc:e6:a6:76:0b:7d:dd:72:
b6:50:ae:17:bb:97:12:98:18:20:81:5c:05:b3:14:
fb:62:62:8a:c2:8d:b0:d4:c5:7e:dd:cb:1d:73:4c:
25:2d:54:fc:dc:0f:b0:99:a3:57:f8:57:c1:96:7f:
91:85:3d:87:7d:5b:f7:83:cf:8b:fb:4b:b4:b2:e5:
1f:90:fd:95:25:a0:56:29:24:72:c2:07:42:f0:be:
2e:4c:27:2b:39:b5:8e:ec:f7:a1:74:ca:b2:51:f0:
ff:04:fa:df:e0:d3:69:a6:05:72:2f:bd:e3:70:a4:
e4:73:9a:6a:2c:ea:d2:e5:d9:95:dc:bc:d5:97:f2:
7a:67:ec:6b:fc:6d:78:b4:b1:19:2b:8b:66:d7:e6:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:6F:F6:30:47:52:19:E1:4D:B5:C7:BC:F1:EC:35:77:99:05:A9
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/b6Zv9jBHUhnhTbXHvPHsNXeZBak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.100.0/23
185.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c3:9e:95:2c:78:70:fb:c3:14:fa:46:2f:1b:ed:1d:0e:3d:
f6:03:11:29:cd:1b:dc:b7:2b:26:dc:27:5e:f5:c1:90:ed:16:
cb:8f:c1:29:41:93:09:cf:cd:46:14:89:70:e4:22:e7:45:c4:
47:b9:56:3a:d3:f2:2c:94:c4:f0:07:21:58:70:95:79:f2:6f:
43:2f:06:f1:ed:8d:44:78:08:2a:f1:0b:ee:81:dc:41:55:23:
98:56:78:05:0d:ba:74:07:1a:b3:31:ce:ce:81:2d:02:97:54:
c3:08:36:1e:87:f1:26:8a:cd:96:17:b8:c4:3e:ea:70:3b:e4:
fa:c5:e1:1a:10:c5:ea:f1:72:fe:15:d6:41:91:0f:7a:e4:29:
05:85:0b:71:6c:b4:f6:f5:97:ed:a8:39:c7:50:4d:1e:30:6d:
50:f8:de:13:37:1d:5b:34:59:b2:49:b1:62:a5:f7:6d:c2:c3:
03:49:7b:9b:ce:63:0f:d5:06:5b:b8:2f:f4:d4:87:47:9a:03:
30:30:ec:88:bb:7c:0b:76:19:af:27:99:eb:c1:8e:83:64:4e:
89:cf:35:6b:78:c8:70:04:7a:7a:da:88:8e:1e:1b:22:89:31:
44:45:25:b2:32:0f:39:2d:79:54:da:38:b1:53:b0:42:75:b9:
6a:e5:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:52 2024 by rpki-client on console-fra.rpki-client.org