Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa
File: iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa (raw, json)
Hash identifier: MzV6Pg/IEbWSLLpHe6jS/LNZtnPl8uTv99bELY6QEUw=
Subject key identifier: 89:8D:5D:8F:78:E3:69:F1:D6:98:9F:9D:08:3F:56:EA:DA:63:2E:61
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01857042AA9A4EF05ED1F746817B186D379F
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa
Signing time: Mon 02 Jan 2023 02:14:55 +0000
ROA not before: Mon 02 Jan 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.103.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Mar 2023 06:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:aa:9a:4e:f0:5e:d1:f7:46:81:7b:18:6d:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jan 2 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=898d5d8f78e369f1d6989f9d083f56eada632e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:14:75:45:94:20:73:f4:16:0a:0e:c1:6f:
62:3b:96:d5:47:de:22:80:00:d7:37:9f:ed:a8:89:
1a:aa:47:a1:96:83:74:11:ac:2f:e9:a3:89:e1:79:
8c:19:29:fd:05:5d:87:b3:8b:4b:62:36:e4:90:8e:
c0:7f:9c:5b:9e:6b:5c:20:1e:50:88:5e:01:c1:aa:
45:ce:fe:8d:18:34:ba:59:9e:6e:4e:9d:df:ca:57:
40:5e:19:5e:75:c3:d6:cb:75:0b:c3:b8:aa:7d:fe:
7b:fe:d7:ac:a6:e1:b0:92:c7:a4:d9:bd:7e:f8:3d:
9f:e7:3e:35:ac:0d:1b:1b:83:58:8c:af:6d:12:85:
57:e9:db:fa:de:19:3b:38:35:4d:c1:1b:11:cf:a4:
09:17:eb:b1:6b:49:b5:8c:9d:8f:7d:7b:a7:00:fd:
4a:70:19:6b:dc:db:1e:8d:79:73:d1:44:da:a4:b1:
7b:40:f8:19:a0:37:60:3b:00:58:b4:7b:13:66:cc:
a5:1e:39:9f:62:80:eb:c7:f4:29:7f:46:11:d6:74:
62:42:bd:47:ac:cc:2c:cf:26:f8:2d:cf:2e:44:9b:
65:16:ee:43:c2:f9:c6:e9:e7:09:cf:c6:0e:f1:33:
07:c2:84:06:77:a3:b7:89:eb:9f:56:f6:6f:66:f0:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:5D:8F:78:E3:69:F1:D6:98:9F:9D:08:3F:56:EA:DA:63:2E:61
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/22
Signature Algorithm: sha256WithRSAEncryption
26:28:82:33:1b:de:2c:ea:f3:56:c6:f6:4c:72:ad:27:80:0e:
1e:28:61:e1:70:52:6d:3b:08:bc:ee:84:bf:41:73:a5:06:b6:
ca:c2:15:01:24:03:3d:da:f5:82:d8:cc:6b:79:9a:7d:28:b3:
d1:5a:b6:7b:19:f1:1a:8e:8a:b4:17:12:bf:bf:73:b9:30:80:
bd:bd:7c:67:2c:de:d5:8d:5b:f6:af:77:84:08:08:22:61:29:
48:bd:17:a8:6e:b1:68:a5:35:21:33:b1:34:68:f1:be:6f:39:
b8:ee:d4:17:58:35:52:09:95:79:12:73:36:74:be:42:b6:41:
2b:f4:60:b2:4d:5a:49:c4:41:cf:c2:4c:55:da:46:99:89:1d:
f1:88:63:e3:c5:6b:0a:2d:51:d2:c8:76:65:8a:37:9e:98:50:
77:22:fa:2a:5b:18:4a:54:90:31:3a:9c:68:e9:3a:93:f1:5e:
51:ff:61:72:29:08:8c:e0:1b:20:71:7f:be:34:6a:96:ad:48:
3e:77:48:9d:ec:54:41:dd:8c:5c:3d:6e:19:f0:33:ae:5c:f6:
8d:bb:ba:1f:2a:7e:ce:54:da:11:5a:0e:d8:18:08:1b:1a:cb:
c7:6b:00:53:77:0c:10:d5:ea:88:cc:06:e8:c8:ba:ff:fa:9b:
bd:9b:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:39 2024 by rpki-client on console-ams.rpki-client.org