Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1-yLaXDLzNjHfg-76iQ7z8Qwam90.roa
File: 1-yLaXDLzNjHfg-76iQ7z8Qwam90.roa (raw, json)
Hash identifier: QnXrqG3/sEmOOTs7HkAnNkOGxsjeb56D9T8Mw0PBLYg=
Subject key identifier: FB:22:DA:5C:32:F3:36:31:DF:83:EE:FA:89:0E:F3:F1:0C:1A:9B:DD
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018984924B0E110363CF25A3AEF32D69F51D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1-yLaXDLzNjHfg-76iQ7z8Qwam90.roa
Signing time: Sun 23 Jul 2023 21:05:27 +0000
ROA not before: Sun 23 Jul 2023 21:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 185.104.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 17:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:92:4b:0e:11:03:63:cf:25:a3:ae:f3:2d:69:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 23 21:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb22da5c32f33631df83eefa890ef3f10c1a9bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:0a:32:ef:1e:ed:5c:ac:a5:ff:d9:56:5a:
0f:80:1b:dc:c7:e7:43:c7:b2:50:7e:5d:d4:fd:bd:
2b:d5:bd:0a:9d:0c:20:42:b8:d9:f2:5f:79:4e:d7:
70:7e:1a:d3:28:d9:b0:e8:1d:71:d5:3c:71:e0:09:
d0:94:a7:06:b8:db:06:ff:c0:2e:e3:50:a7:40:90:
c9:cd:18:87:eb:8d:6e:81:d3:39:1f:6e:f7:cc:2e:
5b:ec:31:ea:da:cf:29:86:f6:48:f2:66:58:84:67:
96:ce:e5:23:62:23:01:b5:0a:06:96:a9:c6:35:b9:
68:8b:92:90:92:30:a4:0d:63:de:ee:d5:9f:12:71:
8c:d7:3e:ce:2c:82:46:bf:4c:29:f4:6c:89:4a:18:
8c:70:41:0b:dc:99:4f:18:85:a7:36:62:e8:86:c8:
b4:78:ec:5f:c7:ab:bf:15:32:1a:45:a6:07:a7:f8:
bc:34:cc:e7:41:b0:55:55:1e:3f:31:36:a0:dd:69:
19:30:5d:62:30:1d:a7:64:ff:a6:b4:99:5a:79:75:
2f:e8:35:55:fa:0b:ed:fd:db:52:3c:85:8a:72:5e:
e0:44:63:b7:14:0e:69:0f:76:5e:f2:b2:77:1b:ab:
1d:dd:e1:6c:ac:dc:cc:57:7e:fe:08:90:13:54:97:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:DA:5C:32:F3:36:31:DF:83:EE:FA:89:0E:F3:F1:0C:1A:9B:DD
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1-yLaXDLzNjHfg-76iQ7z8Qwam90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0a:72:98:e3:51:22:85:b8:91:27:2d:8d:9b:d9:9a:41:df:
3c:d1:cf:03:e2:b2:7e:55:5c:e3:bb:45:73:85:22:ac:df:d1:
55:2e:cc:c7:f8:d3:4f:f8:4b:8e:df:10:21:34:c1:e4:20:24:
ac:3d:e4:a5:ac:bb:3e:fb:a7:a7:ae:2a:60:ac:4d:d4:82:9b:
34:e5:d1:66:9f:1b:34:55:c9:6a:e6:28:93:55:78:68:04:11:
40:c3:be:da:61:67:17:30:00:97:59:b7:19:d0:30:0b:73:ef:
e8:26:32:6d:47:fe:87:a0:7d:29:f5:af:a0:3b:b3:ae:b0:22:
2f:68:3e:03:ec:b2:bf:3a:5a:f8:dd:a4:2a:a5:92:02:38:0e:
19:2d:ca:0f:4c:5a:b9:f8:34:81:ea:f2:0c:57:7f:27:df:79:
f3:e2:c3:a5:a9:73:8a:d9:0d:92:01:c5:ef:92:1d:12:33:e3:
3e:a6:0e:98:7f:47:dd:87:e5:f4:3e:bb:dd:eb:08:83:6e:93:
93:f6:8f:f7:04:a0:0c:5d:5c:88:8e:58:1c:42:f1:2f:46:fb:
4d:c8:c3:42:a3:2c:3d:ad:64:32:4f:90:26:f7:b6:5b:3b:d1:
54:3a:e3:00:cb:fb:82:09:7c:5c:a1:2e:5f:3f:91:09:85:c9:
f4:dd:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org