Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/9CUu1dya-VMyB3e2h2IMI9fRxic.roa
File: 9CUu1dya-VMyB3e2h2IMI9fRxic.roa (raw, json)
Hash identifier: 8j9ZVBaRmDma7YgOb9oOADK+h2HQJ+dfNGt4svlFMOk=
Subject key identifier: F4:25:2E:D5:DC:9A:F9:53:32:07:77:B6:87:62:0C:23:D7:D1:C6:27
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 018630C63788CF39666D1CB4958872486879
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/9CUu1dya-VMyB3e2h2IMI9fRxic.roa
Signing time: Wed 08 Feb 2023 11:25:42 +0000
ROA not before: Wed 08 Feb 2023 11:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 185.103.4.0/24 maxlen: 24
185.103.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:c6:37:88:cf:39:66:6d:1c:b4:95:88:72:48:68:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Feb 8 11:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4252ed5dc9af953320777b687620c23d7d1c627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:eb:f0:5d:8b:a6:00:8f:ba:3d:c9:d9:ea:6f:
6f:64:5e:3c:b7:77:7a:d4:21:82:70:48:9e:66:62:
24:b4:a9:72:5d:ce:cf:0b:e5:35:46:de:96:39:b8:
04:60:2e:62:69:88:7f:73:df:bc:d4:53:48:8a:a1:
c4:82:ea:b9:38:fc:72:dc:dd:73:51:c0:97:b8:44:
f0:c3:69:83:aa:1b:10:52:50:35:9b:05:fd:91:1c:
24:3f:92:fe:86:bc:c3:f4:ce:78:2f:c7:47:e1:16:
85:fa:26:e7:4f:0e:50:38:fd:c3:a1:32:c3:00:af:
b0:86:b8:47:af:fc:05:01:63:52:df:00:c3:91:da:
b2:0d:57:07:e9:36:3e:aa:9a:6b:28:78:5e:71:04:
1e:9a:f3:1d:69:f9:b7:b9:4b:78:9f:4a:26:0e:30:
7a:ec:c5:60:43:72:ff:50:4f:1d:3f:21:c7:6b:ba:
80:e5:64:aa:a4:20:3a:11:57:a9:53:a9:47:2a:8a:
55:c5:97:fc:04:47:30:a0:b8:74:3c:11:7b:64:3c:
ab:07:a6:02:1a:28:6d:79:cd:fa:10:22:72:55:fd:
8b:c3:1a:21:27:83:bf:e6:42:93:c2:33:74:fc:ad:
3a:4f:ac:ce:d8:21:5e:75:f7:55:58:60:d3:cb:57:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:2E:D5:DC:9A:F9:53:32:07:77:B6:87:62:0C:23:D7:D1:C6:27
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/9CUu1dya-VMyB3e2h2IMI9fRxic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:4f:30:91:ac:1a:8e:66:1c:86:92:e8:52:18:7a:0d:47:51:
bf:ac:12:52:70:1d:1c:1f:2d:13:ad:81:17:15:6a:14:8f:4c:
c7:a5:5c:37:45:0e:21:6e:fe:ca:3b:f9:b0:07:79:be:41:3c:
c7:2d:09:57:be:3c:ce:34:19:75:b1:42:02:4e:4d:86:86:80:
6d:7a:6a:f8:2f:96:5a:22:c5:b3:cb:0f:8f:c1:58:70:e9:d8:
5d:41:b4:21:5b:49:f2:1a:a5:32:6d:26:a2:95:ee:69:b9:c2:
89:c2:eb:23:0e:d1:a7:be:73:ae:b3:68:b9:7a:b8:39:55:5e:
7e:b2:42:36:e9:7f:e0:3a:9b:b7:2b:f6:e5:3c:01:24:e3:7b:
21:e3:ad:9a:b5:84:79:29:27:3d:c0:17:ef:af:39:27:b0:0e:
29:49:c7:f2:52:c7:15:54:83:a0:07:74:ed:09:ce:52:86:f2:
83:4e:88:db:b5:8c:ec:df:16:88:dd:1d:5d:09:d4:df:12:7c:
5c:d4:67:ef:9d:d5:3f:c4:75:85:0a:e7:c4:a4:52:03:31:f2:
73:d6:ac:0a:0d:d2:d2:9b:e9:23:d0:d9:7b:15:f3:19:bf:ed:
e4:ed:e5:0d:72:a8:65:c1:fd:f2:05:4a:7b:de:a9:dd:e4:18:
ea:0b:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org