Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/T0UBkHmOD1whI6pM2Ew1Rl0SQLk.roa
File: T0UBkHmOD1whI6pM2Ew1Rl0SQLk.roa (raw, json)
Hash identifier: OFMYaVtc6YYe0jYWESSjRZunj92ADdxHmDa9aTEiUDs=
Subject key identifier: 4F:45:01:90:79:8E:0F:5C:21:23:AA:4C:D8:4C:35:46:5D:12:40:B9
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018CA6DD6CC92CE62B0D9BD1599C817C2552
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/T0UBkHmOD1whI6pM2Ew1Rl0SQLk.roa
Signing time: Tue 26 Dec 2023 16:02:58 +0000
ROA not before: Tue 26 Dec 2023 16:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 185.202.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 03:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a6:dd:6c:c9:2c:e6:2b:0d:9b:d1:59:9c:81:7c:25:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Dec 26 16:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f450190798e0f5c2123aa4cd84c35465d1240b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:46:eb:c4:91:7a:52:6f:84:e4:72:a0:7b:
d5:ac:f0:d3:b0:24:47:d8:e7:b3:96:f1:6c:3f:88:
c2:fe:49:03:e9:dc:01:31:b2:3f:ed:3d:1c:3b:c5:
75:e9:72:87:ea:d2:bf:5a:b8:32:91:f3:38:fa:f9:
9a:93:cf:04:09:65:83:d8:d6:cf:71:a0:2f:15:4a:
ce:e9:41:de:79:4e:82:19:14:49:a6:e0:0d:53:cc:
4f:7a:ab:bc:67:e1:59:ef:a1:9e:99:3b:dd:dd:26:
a6:1d:dd:82:a8:92:a7:04:82:23:c2:84:90:14:8f:
d7:79:8b:03:a5:13:17:a7:44:38:62:8c:cf:ed:3b:
7d:53:63:14:3f:8c:59:9a:3f:64:0b:60:77:38:1b:
cf:6e:ef:03:30:c8:a8:17:26:17:77:84:6d:ef:ee:
ae:55:12:7a:8b:0e:c8:5e:91:75:54:f2:73:a0:14:
9d:87:b9:6b:b2:cc:2c:6c:3c:f8:ef:a0:4c:c6:0f:
8c:f8:d9:04:19:8d:f9:b7:12:f9:82:52:2d:2b:fb:
06:6e:21:3b:a0:a4:07:89:a3:ea:6a:21:c0:28:6b:
31:05:20:0c:2c:f1:46:22:46:9c:fb:df:b8:92:8f:
2b:99:52:1e:a8:cf:0a:81:08:9f:e0:b3:31:c8:6e:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:45:01:90:79:8E:0F:5C:21:23:AA:4C:D8:4C:35:46:5D:12:40:B9
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/T0UBkHmOD1whI6pM2Ew1Rl0SQLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:85:12:29:70:8f:97:a3:d4:a5:85:f9:3f:7a:bd:1f:d7:75:
2e:e0:3a:88:ed:cc:66:86:ae:a7:43:6d:0a:1d:4e:e3:01:22:
c9:d5:25:55:08:90:17:02:69:36:68:db:c3:bd:eb:14:f7:e5:
29:48:a5:16:23:f4:2a:be:b4:99:55:a1:ca:db:fd:0e:3a:34:
0c:48:17:a4:63:40:e1:ac:5b:15:3b:e1:08:fb:4d:a3:b7:5c:
c3:9e:7c:10:b0:40:58:d2:dc:75:a8:51:fc:cc:c6:cd:22:b7:
96:23:3a:5d:6d:fc:43:1c:e4:20:56:01:7a:09:2f:fc:dd:4b:
9d:6c:49:12:e1:be:5a:2d:7b:c0:e0:95:9b:1d:3d:c0:a5:ec:
d7:83:3b:93:62:2e:2a:70:02:83:71:a2:c9:b1:14:29:75:e7:
69:89:ae:50:88:6c:5a:de:3f:8c:61:c9:f0:40:4c:8f:e2:85:
83:17:df:02:08:04:27:0f:c1:7c:82:0c:03:9b:6f:1f:a0:c7:
f9:6d:f0:98:c4:95:1b:ed:74:fc:96:02:8b:eb:ca:fa:24:e0:
c6:f7:d6:fc:c4:7a:f3:b0:49:b0:c9:57:2d:22:08:23:85:7b:
5b:60:2d:ff:ef:21:86:78:18:c6:35:2f:7e:b3:2b:98:20:2c:
ca:7e:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org