Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/pSseTefBfk95RQsLKjrpVOkoHlU.roa
File: pSseTefBfk95RQsLKjrpVOkoHlU.roa (raw, json)
Hash identifier: djvQnsfz+uaj7ZsyQ03J2qd4jwB3pZJhEw+j92tZdNc=
Subject key identifier: A5:2B:1E:4D:E7:C1:7E:4F:79:45:0B:0B:2A:3A:E9:54:E9:28:1E:55
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018A8A95D658F28CD456EF2F8A59BF106632
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/pSseTefBfk95RQsLKjrpVOkoHlU.roa
Signing time: Tue 12 Sep 2023 18:09:50 +0000
ROA not before: Tue 12 Sep 2023 18:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 185.244.107.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:95:d6:58:f2:8c:d4:56:ef:2f:8a:59:bf:10:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Sep 12 18:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a52b1e4de7c17e4f79450b0b2a3ae954e9281e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:06:ff:85:88:d5:2c:4d:d3:34:a0:24:f0:
42:ca:a4:4f:9c:25:e9:3f:a0:f3:dc:58:34:ab:90:
33:e2:a2:f1:b5:3f:93:87:73:78:6f:c1:1c:ff:93:
ab:c1:a3:c4:8d:0f:3e:5e:08:e9:49:53:84:05:1b:
25:36:99:4d:5c:e9:7c:af:0e:71:bf:0e:bd:bb:55:
b4:56:7d:40:81:be:84:b7:1b:6c:3d:d2:a8:bd:4e:
9e:c8:f2:41:fb:55:49:bc:5a:78:65:e5:0b:43:c1:
a0:68:70:7b:d8:38:e1:a1:f9:d6:32:93:41:33:1e:
ac:d9:e4:bc:e6:7a:ff:45:0e:35:9c:d3:08:ed:0f:
1a:39:ef:71:53:13:e1:27:9d:7a:ac:c1:e4:4a:a9:
02:f5:28:ca:fa:32:41:fa:5b:c3:33:8e:ab:29:58:
fc:10:e9:57:27:8e:16:89:69:b5:d6:0b:98:8f:24:
66:cc:23:e9:83:26:3e:fb:73:c3:7c:6c:82:4a:17:
20:83:cb:ca:d8:b7:a8:2a:da:cd:d4:ab:89:db:01:
0b:00:26:81:fa:d0:98:44:2d:7e:3a:58:8f:ae:2b:
cb:1e:fb:ec:a5:fc:f8:d9:7c:59:46:07:ad:fa:ea:
9e:92:b0:30:5f:de:62:b0:20:2f:41:df:3e:e2:53:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:1E:4D:E7:C1:7E:4F:79:45:0B:0B:2A:3A:E9:54:E9:28:1E:55
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/pSseTefBfk95RQsLKjrpVOkoHlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d1:77:b5:24:f7:6a:14:1d:1e:45:75:d8:5b:35:1a:d9:4d:
bf:2c:9e:e0:2f:fc:27:ed:97:25:fe:41:b7:2b:11:50:ca:12:
84:f6:52:5b:46:d3:23:ab:6b:1e:a8:e3:39:09:f5:2e:20:8a:
05:63:3a:4f:d7:b9:22:39:57:8f:cf:d8:4f:a7:ce:4c:83:2f:
a9:7f:b9:60:1d:ba:e3:be:a7:f1:17:33:66:ac:c2:e6:51:3b:
be:c4:b4:ea:0c:5c:b6:a1:78:3e:78:02:8e:7f:81:21:53:8b:
ca:60:de:1a:5c:35:61:2d:10:4e:41:df:e9:3d:45:03:2e:f4:
29:3e:98:58:c6:24:e6:26:e7:d5:89:28:8e:ef:3a:27:4f:e5:
e1:83:ab:b6:0b:8a:ca:8d:c5:96:32:21:d3:0c:5f:91:5c:1d:
c7:6e:2b:e9:da:97:09:1c:6e:db:2b:ad:17:62:0c:34:5b:f0:
54:2e:47:2a:29:eb:76:a5:7a:d1:ca:e7:26:a6:f7:fa:a1:81:
49:3d:74:91:f3:23:a8:01:4f:ce:dc:fc:92:61:ef:1a:bc:20:
e0:fe:40:d9:be:73:30:47:5f:00:64:bb:5f:66:66:c2:c4:04:
d9:58:62:5f:0c:51:67:fa:10:a0:b7:e3:d9:02:ec:69:86:dc:
b8:bc:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:44 2024 by rpki-client on console-ams.rpki-client.org