Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/A7pZjTkY2N1BDBg3Y2FNTaMqqR0.roa
File: A7pZjTkY2N1BDBg3Y2FNTaMqqR0.roa (raw, json)
Hash identifier: +i7KTaoxixEQ92z2nRD75qP5aYvCMPnEJtD+5ge0mQw=
Subject key identifier: 03:BA:59:8D:39:18:D8:DD:41:0C:18:37:63:61:4D:4D:A3:2A:A9:1D
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018A4B3255997A56236241F6BC0ED29BAA41
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/A7pZjTkY2N1BDBg3Y2FNTaMqqR0.roa
Signing time: Thu 31 Aug 2023 10:45:04 +0000
ROA not before: Thu 31 Aug 2023 10:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 185.104.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:32:55:99:7a:56:23:62:41:f6:bc:0e:d2:9b:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Aug 31 10:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03ba598d3918d8dd410c183763614d4da32aa91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:f9:a1:60:ea:5e:53:1d:9b:ac:ce:5b:46:
fe:f1:85:10:b7:0f:7e:ec:62:a8:7d:03:fa:a4:63:
ee:bf:ce:b9:40:8c:29:ff:60:c2:04:56:88:3a:9f:
0a:71:91:49:62:e0:3f:a7:8d:26:09:ab:43:64:f6:
81:e8:f3:96:df:52:2a:62:fc:d5:8d:5d:c8:1a:74:
fe:64:35:e1:33:b6:03:d7:3a:c8:60:74:cc:19:8f:
5f:34:e8:c2:c6:2c:91:11:ad:4d:aa:78:63:b7:af:
79:98:b2:d9:8f:45:3a:13:e9:ae:32:b6:05:b6:41:
a4:f5:dd:5a:ed:14:14:ec:60:44:0c:02:0a:44:e5:
1e:ff:35:81:a7:00:9e:74:a3:f6:ed:c7:19:5a:28:
6e:12:80:ea:00:c0:77:15:9b:b7:c0:00:4e:6b:c1:
84:6f:16:be:32:d6:d2:c6:ea:64:9a:63:ca:5f:eb:
37:c0:7e:63:dd:c3:ed:1a:8f:02:0c:4c:e1:31:77:
77:5b:68:58:6f:f6:73:8e:c4:2c:0a:38:79:da:15:
24:5c:66:c3:4b:85:17:ea:3d:96:1e:20:21:3a:dd:
96:7e:bb:d9:27:10:60:0c:c8:87:dd:5d:64:08:2d:
48:30:a8:75:91:43:cc:c8:76:a8:6a:f8:b3:3a:c1:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:59:8D:39:18:D8:DD:41:0C:18:37:63:61:4D:4D:A3:2A:A9:1D
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/A7pZjTkY2N1BDBg3Y2FNTaMqqR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.12.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e6:36:18:9a:90:8a:72:1a:84:d0:30:92:a2:c4:db:cf:74:
96:21:8e:dd:35:5b:33:be:ef:8d:24:75:16:be:e0:e6:d5:2d:
1e:57:a8:20:2c:be:38:d1:0d:f6:17:4a:6b:1a:b0:92:88:50:
dc:68:37:7c:86:7e:a0:87:66:3a:f7:31:d8:e6:d0:c3:26:92:
32:de:bb:24:09:1c:5f:1b:a2:7d:a7:f9:ac:01:cf:76:82:3c:
70:47:53:dc:2e:e7:e0:2e:fb:8f:b0:09:56:ec:9d:06:e4:e2:
60:ef:32:a0:ea:f0:7c:a8:1d:a9:04:20:70:a6:82:a5:d1:8e:
9a:8a:85:b4:c8:a6:14:5a:1a:b5:a5:9f:c5:a2:ae:de:77:19:
3e:4c:00:c9:8d:c1:8e:46:07:89:04:b0:a2:62:20:e0:5a:8d:
9c:c9:85:a3:59:36:96:46:b6:05:bd:f6:30:36:ee:ce:83:f5:
ad:15:f2:af:dc:24:da:d7:66:15:bb:5b:af:cb:34:e2:a8:e0:
71:7d:9a:ab:01:44:41:de:be:05:62:67:81:09:10:c6:39:cb:
49:fe:5e:58:33:90:95:63:b2:5c:d3:87:fa:5a:f4:70:62:c4:
f8:59:c6:d9:25:46:f7:e3:4e:89:d7:69:95:cb:4d:d8:29:bf:
8c:a5:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org