Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/lA4uwFp-QuwSB-DKGWbHtWs634o.roa
File: lA4uwFp-QuwSB-DKGWbHtWs634o.roa (raw, json)
Hash identifier: ghvUBFoLdN7fdYALwMYMdWgZwFoGEkUwsN3s8Y+4fQM=
Subject key identifier: 94:0E:2E:C0:5A:7E:42:EC:12:07:E0:CA:19:66:C7:B5:6B:3A:DF:8A
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01856F14EA8DBCD47C2ECED3B81BC52AFF62
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/lA4uwFp-QuwSB-DKGWbHtWs634o.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 185.104.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ea:8d:bc:d4:7c:2e:ce:d3:b8:1b:c5:2a:ff:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=940e2ec05a7e42ec1207e0ca1966c7b56b3adf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dd:b1:02:7f:ff:6d:61:56:20:6e:5c:35:fe:
a7:b4:d5:83:04:62:b1:a7:33:35:42:67:74:43:73:
9a:fe:29:98:80:cf:7b:c0:2f:82:c6:5a:d5:6b:3b:
ab:70:5d:ae:2a:d2:eb:bc:2b:37:37:b2:17:e7:fe:
48:2b:76:20:85:81:44:a3:9f:ff:ef:a7:4a:63:74:
a7:f3:60:d4:8e:bb:ae:94:d2:e1:82:b3:30:9f:95:
5b:6e:11:39:81:fd:c9:0c:18:e9:d9:98:1c:f6:b3:
ec:2b:cb:54:06:83:f6:a6:ef:05:ae:87:cc:9b:e7:
b3:38:1f:b1:39:01:7b:0a:56:33:ea:fa:bd:d9:ab:
53:72:96:32:df:0e:b4:20:2c:82:b3:d4:cc:48:63:
0d:51:19:fd:f0:c2:2b:80:0f:45:0b:a2:2c:4e:d5:
0a:16:f9:4d:a7:ac:e8:b2:79:75:43:11:57:10:18:
80:98:40:55:b0:e0:85:10:b4:e1:e5:d1:2d:54:bc:
5c:f0:cb:fa:bf:ef:c7:ff:a8:4f:52:e0:53:10:1b:
c3:72:76:17:12:43:cf:78:8e:5e:71:87:d7:88:18:
0d:e3:94:24:df:8c:1f:9b:7f:a7:c2:17:67:47:28:
65:07:0b:35:50:5f:11:75:91:db:80:67:a8:be:34:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0E:2E:C0:5A:7E:42:EC:12:07:E0:CA:19:66:C7:B5:6B:3A:DF:8A
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/lA4uwFp-QuwSB-DKGWbHtWs634o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.32.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2d:64:2e:a9:41:a3:3d:81:c8:5c:b3:1e:88:f4:68:53:a5:
bf:8b:59:a0:98:ac:11:a0:0c:ab:c5:4e:5c:b3:9c:23:57:51:
77:ea:1a:d3:df:1d:38:f2:12:03:ce:00:07:32:bd:80:3d:ee:
fb:b3:e0:81:db:d6:46:a0:d5:fd:50:05:ce:33:a3:42:43:ef:
53:df:15:d1:c4:38:09:74:bf:fc:eb:39:88:05:9a:53:f2:7c:
6a:3b:dc:af:1d:5d:ad:03:45:e5:ca:45:ba:77:56:f4:8c:d4:
66:b7:7e:8a:1e:68:f4:c0:fc:8e:9c:f1:f6:a5:fe:27:55:8e:
6f:53:c3:a8:29:0a:35:00:ad:ac:e5:67:8f:72:ad:0e:a0:eb:
06:00:67:13:2a:95:21:01:a1:dc:da:68:ce:73:77:c6:a4:25:
47:1b:86:cf:34:d6:a2:5a:f3:3c:d0:db:5e:91:88:9b:d3:2f:
c1:10:e2:0d:b2:67:9c:0d:32:d6:e4:36:0c:5b:af:bd:0c:09:
3c:40:e9:a7:e9:d7:98:47:9b:b7:67:1e:b0:d9:27:6d:34:4b:
21:4b:7e:13:84:0c:9e:66:c3:ab:f2:96:62:86:66:7d:a4:8a:
85:f3:81:66:ca:3a:ef:3d:1c:34:72:2b:9c:2c:5f:c6:af:16:
6b:91:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org