Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1f_Z_oPixRZRPg0_PzDvDOvRyKk.roa
File: 1f_Z_oPixRZRPg0_PzDvDOvRyKk.roa (raw, json)
Hash identifier: +EsnI0hv+zud3O8vUWQkio4GyKTFTA/Pm2gGN8+/zgg=
Subject key identifier: D5:FF:D9:FE:83:E2:C5:16:51:3E:0D:3F:3F:30:EF:0C:EB:D1:C8:A9
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01863B0EC11843C13D5CE4F5999AF2C62448
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1f_Z_oPixRZRPg0_PzDvDOvRyKk.roa
Signing time: Fri 10 Feb 2023 11:21:08 +0000
ROA not before: Fri 10 Feb 2023 11:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 185.103.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:0e:c1:18:43:c1:3d:5c:e4:f5:99:9a:f2:c6:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Feb 10 11:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5ffd9fe83e2c516513e0d3f3f30ef0cebd1c8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:6e:96:e4:4b:0c:a2:a1:05:83:f7:47:35:
9a:fc:2f:1e:4f:bc:b1:ab:0b:6c:3c:bb:f4:0b:56:
53:95:09:50:b1:1f:f6:82:84:f8:a5:6f:58:95:a4:
0e:ca:f6:38:de:d4:68:32:95:43:60:32:5c:fc:ed:
9c:9e:50:9c:ef:62:62:03:82:dd:14:f3:c0:90:0e:
6e:9f:c3:64:44:b5:c9:36:2c:35:2e:d8:fc:8f:27:
d9:62:e3:5a:f3:9f:93:d2:fc:9b:28:78:7f:ec:ea:
1e:3a:5c:27:92:a0:ef:2c:19:7b:28:ef:63:77:ef:
27:38:02:55:da:2b:d1:ee:80:99:7e:85:1f:a5:55:
a6:9b:ae:50:3f:47:82:72:20:b3:c7:14:5e:66:cc:
05:05:6d:5a:5e:1d:5f:53:d6:a5:e3:b4:2b:16:9a:
f6:97:ee:4d:a7:fa:6e:67:1c:bd:9f:ac:92:1b:7b:
47:81:13:a0:ea:2c:ea:65:fb:63:75:7e:52:22:a2:
b0:1d:8b:f1:32:cc:21:48:51:f9:ec:47:37:35:b2:
a1:1b:ea:ef:11:8c:27:5a:c1:57:56:ee:0c:20:fd:
f1:6f:92:ef:cf:6b:6b:9c:e8:b3:b9:8f:b3:c4:84:
b3:1f:e8:15:7f:14:7a:6c:62:3a:40:03:60:de:c2:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:D9:FE:83:E2:C5:16:51:3E:0D:3F:3F:30:EF:0C:EB:D1:C8:A9
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1f_Z_oPixRZRPg0_PzDvDOvRyKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.6.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e8:c8:43:37:22:95:db:44:e2:f1:cf:3e:74:fc:89:06:a5:
7d:9d:54:0b:e5:c0:c8:90:55:9d:bc:a0:e0:0b:e9:c6:7e:60:
52:e2:9a:a9:94:1a:03:a6:96:fb:d9:3b:03:21:4c:e3:be:59:
db:bd:73:ab:ee:cb:6c:5e:a2:51:a5:db:4b:c4:29:7a:4d:31:
4f:4c:f1:a8:b5:f7:64:8b:78:ac:c2:9f:ab:9f:6a:76:98:10:
cd:a4:75:d9:e9:f0:5c:ab:73:34:06:fe:eb:48:b3:a5:42:b0:
b9:cf:ce:79:92:23:71:0c:17:db:d2:be:f7:fa:b3:86:0c:be:
ea:1e:63:5e:d7:ee:a8:b9:65:e0:e8:39:b5:3d:06:e5:6c:5f:
c5:0c:99:81:64:ba:89:0f:b0:63:77:30:66:94:5e:cd:03:14:
41:2d:78:33:62:62:59:6e:56:e5:49:a3:f6:fc:26:1c:12:3a:
38:2f:b2:ab:f0:d9:d1:e2:2e:fc:61:ae:63:90:2e:bf:79:8c:
14:2f:a5:26:9e:22:11:da:ea:b0:ad:64:19:ac:f2:15:4e:df:
40:a4:47:e2:c2:6e:9e:66:aa:ea:79:95:37:5e:7e:45:51:ad:
c4:7e:b8:2f:57:35:af:01:bf:dd:f8:0d:4f:19:9f:af:7b:2c:
99:43:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org