Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/DdRzH_miD48Yz9t1rEW1PWmOWlg.roa
File: DdRzH_miD48Yz9t1rEW1PWmOWlg.roa (raw, json)
Hash identifier: MmXQiJaZf9YEwYwsE1NgA9N8vcU0j63P9RybzJ/DHYI=
Subject key identifier: 0D:D4:73:1F:F9:A2:0F:8F:18:CF:DB:75:AC:45:B5:3D:69:8E:5A:58
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 018844204238459DFBA2B1DE34C82C4A28F7
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/DdRzH_miD48Yz9t1rEW1PWmOWlg.roa
Signing time: Mon 22 May 2023 15:42:24 +0000
ROA not before: Mon 22 May 2023 15:42:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.93.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:20:42:38:45:9d:fb:a2:b1:de:34:c8:2c:4a:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: May 22 15:42:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dd4731ff9a20f8f18cfdb75ac45b53d698e5a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:05:20:eb:e6:a0:87:4d:a0:30:97:b6:99:
93:d5:88:6d:87:62:59:e2:cf:80:36:f1:7f:77:07:
7c:0b:0f:d2:43:a0:c2:11:9f:12:5d:c8:ae:c2:a9:
ed:d8:46:25:ec:9c:3e:74:3e:3b:4a:3d:f4:b1:c6:
cb:7c:fd:67:c4:37:4b:1f:ff:44:a0:ae:b6:28:f6:
0c:9e:fe:b5:42:29:fc:6a:69:90:84:fb:df:ff:15:
34:f7:22:18:90:bb:93:9b:53:7a:6e:1c:12:bc:c7:
59:17:06:a7:35:91:41:6b:e1:d9:e7:9d:52:c7:94:
8b:4a:c6:9d:4a:0a:db:e6:ae:8c:9c:a1:ab:48:44:
03:d5:3f:25:36:dc:d5:13:96:34:df:ea:16:f0:fc:
a1:c0:d4:05:3d:07:20:14:5a:35:22:92:58:84:e9:
18:ef:17:20:16:e9:45:89:41:a4:8b:bc:9e:37:3c:
e2:76:03:da:5a:e1:82:e2:0e:f0:04:0a:27:3e:98:
e9:12:cb:4c:4f:af:4a:a0:13:06:5f:bd:b1:27:81:
5c:fa:5e:89:94:d2:3b:3e:0d:02:17:4c:40:86:11:
fe:38:07:4a:36:fc:32:6a:14:a4:cc:2c:8a:25:82:
63:25:16:65:97:c5:78:15:9e:c3:30:82:94:52:b0:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:73:1F:F9:A2:0F:8F:18:CF:DB:75:AC:45:B5:3D:69:8E:5A:58
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/DdRzH_miD48Yz9t1rEW1PWmOWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:06:98:57:0e:5a:6e:f7:50:2e:ad:fa:04:43:c8:d5:51:47:
1c:a5:d9:90:b6:51:1f:d5:a6:01:f4:e8:41:eb:ae:7d:df:e2:
8d:d2:e7:c1:b7:c6:6e:56:34:51:05:76:46:ef:a5:1a:b4:d1:
52:f5:d8:50:77:dc:87:05:04:44:37:70:04:59:1d:2d:36:73:
30:eb:9c:a0:68:f3:81:e9:6f:1c:38:75:c8:fc:74:f9:3b:de:
79:9d:6e:a5:9e:93:ae:54:02:f8:47:7e:b7:a1:02:cf:57:17:
f4:8d:89:a7:d8:88:cd:fa:5c:d6:71:10:65:f5:c1:87:ac:e8:
c9:80:84:e8:f2:56:e8:c0:19:db:3d:0f:bd:4e:a2:91:cd:b4:
87:09:ee:c9:47:e9:a0:70:f3:c0:9f:61:96:06:16:7d:bc:7f:
93:33:33:9c:90:cb:4b:df:64:c3:2b:92:19:2a:6f:f4:71:bb:
99:e9:10:f7:67:11:37:55:2d:18:07:39:59:d8:25:ba:58:e9:
af:06:c2:b8:88:1d:a1:bf:70:6b:a3:45:0a:66:ef:25:4a:a4:
8d:ed:8c:87:b6:6d:40:3a:86:23:12:71:46:4f:48:e9:a3:7a:
34:80:56:09:21:d4:4b:1c:0b:eb:6d:7e:31:38:3f:46:2a:9e:
aa:1c:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 14:40:21 2023 by rpki-client on console-ams.rpki-client.org