Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/V_rz5LmOUL59VJKdQuu-os_0YWY.roa
File: V_rz5LmOUL59VJKdQuu-os_0YWY.roa (raw, json)
Hash identifier: oLp8QvfFFI6r8YoePYvD/B0meVn384lxefx1mScZZsQ=
Subject key identifier: 57:FA:F3:E4:B9:8E:50:BE:7D:54:92:9D:42:EB:BE:A2:CF:F4:61:66
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 01856DE652A9758DE3CCD7AFAF902802E1FB
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/V_rz5LmOUL59VJKdQuu-os_0YWY.roa
Signing time: Sun 01 Jan 2023 15:14:49 +0000
ROA not before: Sun 01 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59662
IP address blocks: 185.81.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:52:a9:75:8d:e3:cc:d7:af:af:90:28:02:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jan 1 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57faf3e4b98e50be7d54929d42ebbea2cff46166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:f2:d8:fe:90:28:f6:6f:ac:84:f1:27:5c:
f5:05:d7:45:bd:8c:43:48:4b:1b:72:ac:94:92:16:
fc:99:fb:af:7d:42:93:bb:6e:dc:a5:a8:94:b1:ab:
10:25:fd:26:ff:c3:0d:50:e3:91:86:c2:81:5b:71:
ca:ef:85:9a:f9:b7:af:87:80:49:7f:ae:1c:0a:79:
4f:6f:82:e0:0c:e5:83:10:8d:ba:12:85:f7:30:2b:
a7:20:0b:bd:06:c9:b6:66:4b:d8:d0:d0:35:12:f6:
38:95:56:a6:75:a4:26:33:a3:9d:47:6b:60:34:9a:
a0:80:7c:6f:91:27:cc:8f:c7:c7:37:04:d2:fa:b3:
54:bb:6d:b5:75:4a:f5:10:8b:bc:3d:8f:c8:d0:ee:
a2:da:a9:47:02:34:25:e0:ca:39:74:8b:94:4d:da:
d7:1c:a1:17:8f:b9:06:fc:00:a6:7e:f9:2f:bf:f2:
c7:c2:55:d6:a7:50:56:c6:1b:62:f7:a4:c7:09:f9:
91:d5:71:eb:27:c6:be:3a:e6:f1:dd:96:a4:ba:ef:
09:4e:16:d7:85:4c:dc:09:e3:c7:8a:75:23:0d:f6:
f4:28:33:88:4a:c2:f0:dc:9c:c8:e9:ba:9b:02:9a:
16:75:30:91:fc:b3:cf:34:5c:59:03:c7:54:f5:e1:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:F3:E4:B9:8E:50:BE:7D:54:92:9D:42:EB:BE:A2:CF:F4:61:66
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/V_rz5LmOUL59VJKdQuu-os_0YWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cd:87:a0:a2:f9:b0:f7:ba:34:87:e8:c2:aa:c5:0a:a9:0e:
e2:25:a0:d8:f7:0e:59:3f:19:68:e6:e5:13:44:62:5a:d0:61:
dc:6a:29:37:4d:07:5f:ab:80:c0:73:dc:a3:db:cd:3a:ed:40:
12:a1:75:68:59:03:83:20:33:fb:6a:ac:52:0e:65:d8:7a:c4:
fd:ce:d7:c8:f0:20:7a:8c:bb:d6:a2:b3:6a:3b:d3:c2:3f:e3:
92:a3:41:5e:31:38:50:09:ee:33:6d:03:26:2e:5b:9c:be:98:
9d:f9:9a:76:f2:ec:4e:ae:a7:96:a5:07:f4:72:f8:cb:4c:7a:
47:94:0b:ce:3a:42:d2:c6:5e:4d:4c:d6:5a:d8:83:3e:d1:8f:
47:75:8e:d3:f8:5a:ba:c6:9b:50:ee:13:fc:c7:de:40:af:bf:
39:6c:9f:ad:09:e6:c8:c0:76:c6:77:94:c3:70:73:7e:fc:ae:
96:bf:a9:ba:e4:0a:88:af:8a:f0:de:99:0a:47:bf:9b:00:ad:
df:4e:4f:6d:4c:4d:e6:06:e8:75:93:9b:24:2f:a9:d1:fd:30:
3d:80:10:96:9d:da:86:b7:c7:72:2f:cc:94:cc:e9:f7:b2:60:
68:5b:56:5c:1c:a9:20:db:f4:dd:4c:e4:cb:45:66:ee:65:47:
74:6b:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:33 2024 by rpki-client on console-fra.rpki-client.org