Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/C8MMRGSXrLrBMQGjZ8IJm10oLak.roa
File: C8MMRGSXrLrBMQGjZ8IJm10oLak.roa (raw, json)
Hash identifier: ONtctWJelNtuujfPQkg4oSUnlfZw323+TTsvwMKdUx8=
Subject key identifier: 0B:C3:0C:44:64:97:AC:BA:C1:31:01:A3:67:C2:09:9B:5D:28:2D:A9
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 018570C2C0C07446D68CD5339E2C9E08F061
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/C8MMRGSXrLrBMQGjZ8IJm10oLak.roa
Signing time: Mon 02 Jan 2023 04:34:49 +0000
ROA not before: Mon 02 Jan 2023 04:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42687
IP address blocks: 185.203.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:c0:c0:74:46:d6:8c:d5:33:9e:2c:9e:08:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jan 2 04:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc30c446497acbac13101a367c2099b5d282da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:f9:a0:81:0b:e7:35:ee:da:da:42:7f:8a:
c1:3e:d9:27:5e:f2:79:56:e0:08:6b:40:e9:59:4e:
2b:6d:6c:f8:e9:23:49:33:c5:95:d2:ae:24:35:c6:
de:bd:a6:c7:64:6b:cd:b7:06:96:95:e7:c0:d6:42:
55:b2:af:61:1c:72:fc:e2:dc:eb:52:bd:a2:23:54:
12:6f:c2:fb:c5:9c:d7:62:d6:c9:ce:e7:ff:06:d1:
65:5c:78:c1:e9:d8:6d:bf:bd:4a:e2:01:53:4f:52:
32:51:3c:d2:78:69:a1:b5:80:2b:01:49:21:56:33:
11:af:c2:54:e1:ea:a5:c6:20:6f:71:77:ca:b2:b1:
11:5a:01:76:19:7c:99:44:02:f0:b1:86:ab:ba:da:
28:a0:d5:92:d7:14:8d:75:4b:0d:03:99:7b:62:1c:
0c:05:02:f0:0e:71:1c:57:97:ed:15:d9:f5:88:6b:
0d:07:e7:76:0a:ff:9d:e9:b9:d9:cb:a3:3d:7d:fa:
4a:28:32:a4:60:ae:d5:42:e6:f9:1e:16:c9:30:ff:
01:90:14:f7:8e:23:fe:04:93:85:c5:08:f8:7b:60:
46:48:ee:3a:dc:b4:ab:8d:f2:8b:bf:53:ff:fe:e4:
fe:fc:d8:42:cf:21:33:2e:f2:65:ce:47:f9:b3:5f:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:0C:44:64:97:AC:BA:C1:31:01:A3:67:C2:09:9B:5D:28:2D:A9
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/C8MMRGSXrLrBMQGjZ8IJm10oLak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.176.0/22
Signature Algorithm: sha256WithRSAEncryption
14:71:6c:f7:22:72:dd:21:e8:47:29:2d:15:85:bc:b9:38:2a:
6e:f9:e6:c2:f7:5f:1a:92:cf:be:2c:e7:b6:59:35:01:21:86:
e5:25:29:56:b6:4e:c1:69:98:fa:e3:db:2b:f7:d5:a6:f6:88:
d4:ec:d6:39:48:22:a6:cf:7c:25:64:cc:da:ea:82:1f:e9:59:
ca:26:88:7c:c2:8b:21:8c:8a:65:1a:da:bc:9a:68:24:8f:5a:
4e:00:60:46:19:26:32:cf:7e:29:06:22:4c:e5:dd:ec:0b:94:
19:cd:3b:9b:d7:ca:c2:bd:7b:d8:e7:a3:7a:d9:2f:28:8c:c3:
01:05:ad:bb:ea:33:50:26:42:95:1e:19:df:bd:17:c0:1f:9f:
ac:fa:9d:51:3d:86:75:26:83:46:24:21:75:91:f3:0c:52:83:
7d:c2:b3:a0:61:a9:b0:0b:af:8f:00:7a:dc:81:2e:2c:b9:c4:
33:06:b3:88:2b:19:37:f8:a0:c7:60:e7:a0:c5:35:ba:bc:79:
ed:d0:bf:6b:d9:ef:c7:0e:60:75:4c:15:29:c0:7e:67:db:fd:
7b:25:11:37:0d:0a:ec:c5:2d:f3:01:14:f7:c3:21:bd:bd:94:
21:9d:f2:4f:30:68:99:b3:f6:da:19:d7:72:bb:db:be:f0:14:
56:3a:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:56 2024 by rpki-client on console-fra.rpki-client.org