Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/jU3yeVWQpl-jfj2KcTnIAlFHDEk.roa
File: jU3yeVWQpl-jfj2KcTnIAlFHDEk.roa (raw, json)
Hash identifier: 6QyJLcQj4j+xwM4yrX1mg6Kml1kk3lI1c/iLHFDnDVU=
Subject key identifier: 8D:4D:F2:79:55:90:A6:5F:A3:7E:3D:8A:71:39:C8:02:51:47:0C:49
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 0188771828F58F8046F6CEEC974EF4CBACD1
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/jU3yeVWQpl-jfj2KcTnIAlFHDEk.roa
Signing time: Thu 01 Jun 2023 13:14:12 +0000
ROA not before: Thu 01 Jun 2023 13:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.103.4.0/22 maxlen: 22
185.103.6.0/24 maxlen: 24
185.103.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:18:28:f5:8f:80:46:f6:ce:ec:97:4e:f4:cb:ac:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jun 1 13:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d4df2795590a65fa37e3d8a7139c80251470c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:f5:92:9e:03:c6:9f:b7:36:e6:8d:02:41:
66:72:b6:7e:8d:56:40:da:33:be:f2:9a:0e:38:17:
ae:9a:b5:11:17:be:4e:3d:63:06:ae:75:4e:3f:3a:
d0:03:f8:e9:4d:7d:b4:8d:7c:f9:7e:1b:3d:d9:03:
45:d4:a8:5c:5c:86:5a:3e:aa:10:a1:be:29:71:a5:
8b:67:1b:d5:d4:02:b7:68:44:b2:9f:bb:fc:81:78:
bf:f7:de:ab:73:e5:4f:c4:67:19:17:9f:a3:69:e9:
7d:09:7d:aa:43:39:f9:2f:2a:5d:00:a5:a5:23:d3:
77:19:e6:cf:3c:78:03:79:eb:1f:aa:8e:ad:58:c7:
7e:f5:7b:3f:b4:6e:35:c4:4f:6c:64:5b:50:37:22:
59:23:d2:3f:07:ad:bd:19:f8:94:61:14:fe:89:32:
7d:70:99:72:e0:a2:91:5f:30:e6:52:58:39:17:40:
5e:e7:fa:05:30:ca:94:fb:94:f6:6d:a2:07:08:1f:
f9:9f:ae:5e:7b:f8:74:00:0d:31:e6:0b:ab:91:ee:
b7:05:98:b0:e2:c0:21:bc:81:c7:bf:6c:34:b3:1c:
62:8b:4f:05:0a:33:21:b6:15:9c:f7:ac:1d:b6:d4:
26:7a:2b:43:47:3a:c5:08:07:53:82:91:34:3c:09:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:F2:79:55:90:A6:5F:A3:7E:3D:8A:71:39:C8:02:51:47:0C:49
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/jU3yeVWQpl-jfj2KcTnIAlFHDEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:84:37:2c:5e:85:98:67:dc:7b:0d:67:f6:77:33:40:58:f1:
8a:a5:f0:d4:1a:c6:31:72:4b:85:ea:38:5d:82:bb:61:6d:db:
9e:6d:4e:48:ad:38:8e:52:c8:e2:3c:e7:99:d0:4e:12:a5:93:
a5:83:8b:7b:4b:ab:ee:f0:4c:bd:f0:93:78:89:40:23:93:06:
69:fc:1c:a3:8f:5d:3a:56:8f:66:1d:20:77:e0:9f:85:95:d9:
8a:e4:68:71:a8:1f:0f:91:14:92:2d:92:a9:8a:68:a4:d5:8a:
a1:dc:34:79:b4:39:78:ac:cf:98:ee:ba:6a:e4:71:88:46:06:
66:f2:92:84:79:92:a0:25:b9:ee:ce:a8:71:cd:64:0b:bf:74:
92:9e:d7:4a:60:42:10:a4:40:4d:4c:90:59:f9:21:67:71:05:
e7:64:f4:15:3d:b7:be:3e:ab:4f:bf:90:c9:23:10:94:bd:ff:
a4:6a:22:03:dd:70:dc:98:ec:14:dc:70:28:f1:60:4b:45:58:
4d:3b:48:8a:a5:5c:78:e0:f2:0a:cc:b6:2d:9e:68:d3:d3:f1:
54:f8:22:24:66:9e:26:38:02:2b:89:ee:d5:01:2e:2d:56:bf:
a2:46:a1:e6:a8:88:ef:45:b5:fc:08:88:76:e8:2a:d1:3e:17:
4a:d5:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:38 2024 by rpki-client on console-fra.rpki-client.org