Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Q12Ad1ALVWhljsMJsTDvjNnIYj4.roa
File: Q12Ad1ALVWhljsMJsTDvjNnIYj4.roa (raw, json)
Hash identifier: Ew6N4Yw1ZHoqrtC5oYB9jRvO/IMUGARfY8/WHX/D+7g=
Subject key identifier: 43:5D:80:77:50:0B:55:68:65:8E:C3:09:B1:30:EF:8C:D9:C8:62:3E
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794F814E09B231E448E56E8E45969D1
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Q12Ad1ALVWhljsMJsTDvjNnIYj4.roa
Signing time: Tue 02 Jan 2024 00:31:17 +0000
ROA not before: Tue 02 Jan 2024 00:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.104.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 14:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f8:14:e0:9b:23:1e:44:8e:56:e8:e4:59:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=435d8077500b5568658ec309b130ef8cd9c8623e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fa:bc:ad:4d:d5:cd:85:71:cc:8a:3d:d2:d7:
f4:3b:26:77:97:81:61:34:05:e2:11:c6:27:00:ee:
2c:78:c1:34:e4:bf:78:28:cf:5e:e4:7f:6e:82:5f:
7a:56:f9:99:02:d4:f9:54:97:aa:a9:ee:85:c0:5f:
f6:83:bf:28:f7:0f:76:6a:4f:32:2c:e7:ed:54:b0:
42:e1:6b:90:d7:90:c5:2e:c5:88:0a:fd:a7:83:38:
5f:9c:c9:b2:36:43:a8:19:6a:e0:9e:3f:51:f3:64:
b2:37:72:37:62:e3:43:16:03:bb:3a:16:25:ce:51:
73:06:a7:af:3c:91:e0:54:d0:2d:57:ee:20:74:4a:
3f:2a:98:e8:c7:80:d9:5f:47:17:11:25:86:82:51:
c8:ca:e1:d2:ff:11:f9:1d:cc:08:6e:03:82:8c:97:
69:87:a6:85:91:e5:82:30:b3:cd:bc:3a:91:bd:c0:
27:76:cf:ee:7f:2e:49:ab:ed:16:4a:2a:e8:8e:09:
70:99:30:40:93:99:ef:c3:a1:81:5d:21:42:39:aa:
2b:84:cf:12:6c:89:68:c8:11:9a:2b:9a:b3:be:bc:
ba:09:91:71:25:8c:ee:3b:60:89:8e:1f:9a:6d:53:
69:d8:c0:c5:15:3f:70:3b:a8:c8:23:87:83:6f:43:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:80:77:50:0B:55:68:65:8E:C3:09:B1:30:EF:8C:D9:C8:62:3E
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Q12Ad1ALVWhljsMJsTDvjNnIYj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.14.0/23
Signature Algorithm: sha256WithRSAEncryption
05:ff:b6:97:f1:a0:64:8f:24:23:74:f6:f7:55:57:8d:83:19:
a2:2d:15:09:30:b9:59:b3:7b:3e:d2:92:cd:28:b9:91:6e:ba:
25:67:31:14:79:2c:92:84:18:50:e5:50:99:34:e1:dd:16:87:
71:9f:6d:8c:29:fd:9c:18:45:04:5c:17:71:18:80:b2:9b:4b:
a1:65:7e:62:ae:db:53:6d:73:96:a3:49:fe:04:89:6f:27:6f:
72:1d:cf:02:88:f2:69:d8:81:d2:06:58:4d:a7:3f:c7:84:94:
bd:26:3d:84:8d:7d:64:45:36:b9:bf:d8:9f:01:dc:73:3b:da:
97:5c:a3:6e:dd:9d:82:b6:75:00:35:35:77:8c:21:2d:de:e3:
19:62:28:4f:7a:73:bc:70:93:9e:a3:c4:5d:cf:12:f8:70:67:
45:0f:f9:15:aa:2e:d7:de:f7:2e:53:0e:dd:55:b9:29:8f:cb:
7a:ea:85:0d:ed:fa:d3:c2:74:7a:05:ab:83:dc:d3:e6:7b:b6:
d6:a8:f7:8d:97:18:28:26:18:8d:d9:3d:8e:51:b0:b8:6b:2b:
49:67:c2:f8:58:5c:f1:df:00:c7:ae:d3:23:1e:18:91:6f:dd:
64:e4:b7:9e:76:09:14:17:1b:77:ea:b7:62:95:5a:0e:f5:fd:
8b:dc:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:10:11 2024 by rpki-client on console-ams.rpki-client.org