Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/iL4_x7nb0jNXjdpVIwEBCOkaGa4.roa
File: iL4_x7nb0jNXjdpVIwEBCOkaGa4.roa (raw, json)
Hash identifier: 0CCLY6En4n9FYhsYVTubhCnxX2arh8N+02KCHC8CgSw=
Subject key identifier: 88:BE:3F:C7:B9:DB:D2:33:57:8D:DA:55:23:01:01:08:E9:1A:19:AE
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 01856B40FEBB657C7D21DA959C7CBB5ABFF6
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/iL4_x7nb0jNXjdpVIwEBCOkaGa4.roa
Signing time: Sun 01 Jan 2023 02:54:59 +0000
ROA not before: Sun 01 Jan 2023 02:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211894
IP address blocks: 185.203.113.0/24 maxlen: 24
2a0a:5480::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:fe:bb:65:7c:7d:21:da:95:9c:7c:bb:5a:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jan 1 02:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88be3fc7b9dbd233578dda5523010108e91a19ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:a6:b2:39:ac:bb:4a:b7:ec:31:cd:10:0d:
1a:48:64:5f:21:78:f1:81:27:50:27:65:53:1e:60:
26:ca:a3:d9:2a:82:f5:94:3b:4c:58:02:08:89:0c:
ac:af:fc:03:8f:1c:bb:ce:4f:88:79:6b:c9:d1:f3:
c4:fb:20:7e:3b:97:c1:ab:77:4f:a9:3f:15:e2:07:
8a:8e:5e:ef:66:dc:a5:96:0d:ef:fe:00:97:90:87:
40:9e:72:82:77:30:1a:ce:d5:2c:bb:48:b6:3e:e2:
9d:69:7a:6d:db:99:6d:9e:15:13:a2:f4:74:7b:3f:
67:70:40:dd:3a:03:1b:89:0e:bd:c7:8b:4e:34:04:
0c:5a:89:8b:8b:32:94:20:72:fd:33:cc:f2:0d:e1:
a9:8e:a3:dc:f8:12:21:29:39:f5:4c:f5:22:64:39:
ce:5d:f4:4d:17:8e:46:f3:15:34:50:8e:27:17:76:
a1:93:f4:91:0b:60:53:5b:6d:62:e3:9f:b5:d8:fc:
c2:08:87:2a:38:a4:ab:d6:bd:fa:6b:b9:56:0c:f5:
1e:66:8f:ba:48:3c:02:2e:5b:40:06:65:7a:11:f6:
82:57:7a:d7:8e:f3:f5:84:70:04:f7:c1:fe:cd:c2:
d1:e5:e3:e3:57:cc:a4:ad:7e:20:54:c9:02:72:24:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:3F:C7:B9:DB:D2:33:57:8D:DA:55:23:01:01:08:E9:1A:19:AE
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/iL4_x7nb0jNXjdpVIwEBCOkaGa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.113.0/24
IPv6:
2a0a:5480::/29
Signature Algorithm: sha256WithRSAEncryption
76:df:57:36:1f:23:13:fe:61:74:25:2b:91:86:3e:c5:c0:fa:
70:e6:cf:c3:94:ef:ed:88:a6:4f:d3:ec:6f:de:f6:f6:06:c1:
dd:a0:1f:f3:0b:94:45:f5:80:ae:ab:3e:cf:7c:24:2b:dd:b9:
9e:c8:75:65:1f:7d:d8:79:60:20:be:90:e1:cd:5d:08:10:f5:
d3:3c:62:34:48:09:72:7a:e8:f0:22:b2:34:5f:c9:b8:ad:b5:
14:bb:3f:26:6c:81:21:89:27:68:33:b9:ed:77:1d:3f:ed:0f:
96:a7:4f:af:d7:ce:4f:8e:1e:47:9e:37:51:21:d4:b1:9a:9b:
24:2f:b8:8d:ec:2e:5c:97:c5:b8:a9:46:80:bd:ee:2a:86:63:
45:c6:88:5a:f4:4a:8f:14:49:86:78:26:d0:50:5d:00:61:4e:
cd:3c:11:ec:4a:4c:4a:c7:95:bb:92:89:3c:dc:c5:3e:fa:9d:
c9:77:c3:4d:71:fb:17:3e:8f:ff:95:a6:70:7c:c1:96:fc:b5:
d6:a0:f7:f1:94:4e:cd:59:61:30:f5:e2:b5:e9:a3:f9:ba:2d:
e5:a3:90:61:38:04:30:07:19:f8:3b:33:78:5b:6b:79:8f:8a:
cf:4c:00:eb:6c:0a:1e:89:da:ca:2b:4b:68:2c:cc:ef:db:0c:
47:bb:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:34 2024 by rpki-client on console-ams.rpki-client.org