Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/8J_W4AmU1emR4d8quAGS_NxqGkU.roa
File: 8J_W4AmU1emR4d8quAGS_NxqGkU.roa (raw, json)
Hash identifier: nls1S+ql7XDHEAvNv9MxwuZbpRBnvqrIUqGicJrYMDw=
Subject key identifier: F0:9F:D6:E0:09:94:D5:E9:91:E1:DF:2A:B8:01:92:FC:DC:6A:1A:45
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01857042A9C51067A8AD56859DDFF4E43922
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/8J_W4AmU1emR4d8quAGS_NxqGkU.roa
Signing time: Mon 02 Jan 2023 02:14:55 +0000
ROA not before: Mon 02 Jan 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 185.103.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a9:c5:10:67:a8:ad:56:85:9d:df:f4:e4:39:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jan 2 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09fd6e00994d5e991e1df2ab80192fcdc6a1a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:5f:c8:20:64:99:05:9e:e2:26:f3:0b:d6:
1d:b3:fb:9b:b7:d6:34:01:e9:3c:fb:c6:9e:4e:fb:
68:cf:95:3d:6e:f2:27:e1:0f:9b:ae:a7:7f:04:f3:
f4:db:59:3b:e1:1e:42:33:ee:fe:06:37:3e:30:57:
97:8d:c4:77:fa:62:e2:bb:f7:30:c8:6d:bf:d4:af:
93:70:48:91:cc:89:9d:a6:89:8a:61:de:5c:7a:c3:
1c:8a:26:6e:12:01:eb:7a:8d:12:c3:b1:7d:85:ac:
2e:9f:f6:fd:5e:46:51:35:8f:a7:b6:15:ea:94:ff:
5d:06:3b:3b:b8:20:f6:f0:25:35:ba:4e:9c:98:bc:
42:07:e5:84:71:47:e8:26:0d:00:ec:ef:ed:74:6a:
1f:45:98:a2:16:bc:fa:a9:c1:3a:88:d4:7e:e8:1d:
13:4d:87:5f:1d:fc:a1:1d:41:13:c9:4f:87:ad:11:
e7:6e:ff:20:0b:13:56:23:a5:cc:bf:de:97:34:d3:
8a:cb:5b:97:da:6a:fe:3e:b3:37:a4:56:3d:cf:19:
0a:de:2e:1e:0b:ce:c4:b7:bd:da:08:64:ba:07:2e:
db:8c:99:b8:6d:02:ae:9b:1e:b5:e2:70:df:cd:ed:
8d:79:14:17:6e:74:df:69:75:db:c0:bf:2f:ee:5c:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:D6:E0:09:94:D5:E9:91:E1:DF:2A:B8:01:92:FC:DC:6A:1A:45
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/8J_W4AmU1emR4d8quAGS_NxqGkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f1:68:cb:40:99:36:62:b0:98:ed:7b:a4:73:1c:be:6c:14:
84:a5:35:b0:8a:9e:b8:9f:ac:70:02:6b:a1:80:23:00:38:ff:
68:92:98:99:6b:6f:21:f6:c1:85:66:27:4b:31:66:f5:63:0c:
ce:29:a3:fa:d5:b1:e3:90:2b:84:86:fc:95:e8:a9:63:5f:6a:
68:62:aa:2e:87:41:42:77:5f:8d:a6:70:02:9a:26:99:bc:88:
ce:cc:73:91:3d:e4:02:11:ad:22:c2:81:83:5c:c8:f2:f5:c1:
c2:d2:9f:07:26:14:c5:b0:62:a2:d4:f2:35:bd:50:01:32:c8:
1c:ba:6e:2a:d2:7a:0a:a6:65:3d:ae:46:3a:cd:2b:1a:97:0b:
33:38:48:d3:38:eb:58:b7:aa:21:fc:6e:e1:12:b0:3e:4f:bf:
fe:6c:fe:3c:b8:8b:85:d8:3e:88:08:93:a3:82:06:6a:90:dd:
a5:73:45:8f:11:48:00:1a:a1:7a:5f:e3:01:3c:2e:87:4f:a6:
9e:0f:e8:2e:e8:77:14:7b:04:cd:52:8f:c9:a6:06:ed:31:d4:
f9:0c:74:38:a3:7c:b3:c1:a8:4b:18:c7:5e:02:58:65:d3:7b:
53:be:ca:69:f7:18:a6:27:35:a7:0f:e7:e0:3c:5c:24:ae:84:
59:7c:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org