Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/CwFODN0vAuzsUkR-X47h6VfY8Eg.roa
File: CwFODN0vAuzsUkR-X47h6VfY8Eg.roa (raw, json)
Hash identifier: iUCApN9zrK8iwFTB8X/LBjnsVKykdUO5upzFYpEM+gA=
Subject key identifier: 0B:01:4E:0C:DD:2F:02:EC:EC:52:44:7E:5F:8E:E1:E9:57:D8:F0:48
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01884008E516F518FB0FE08DDAD7A607A66C
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/CwFODN0vAuzsUkR-X47h6VfY8Eg.roa
Signing time: Sun 21 May 2023 20:38:24 +0000
ROA not before: Sun 21 May 2023 20:38:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49792
IP address blocks: 185.103.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:40:08:e5:16:f5:18:fb:0f:e0:8d:da:d7:a6:07:a6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 21 20:38:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b014e0cdd2f02ecec52447e5f8ee1e957d8f048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:d9:aa:35:d0:fb:65:8c:d7:39:00:50:2c:
d3:5a:f5:35:13:6d:c9:d6:45:fa:ba:9f:b5:41:0a:
4a:b2:49:10:87:02:2c:59:5d:b7:ff:0e:f5:e9:29:
09:97:80:c3:c0:66:83:33:b9:07:71:74:8e:64:d0:
d7:2b:df:41:fc:00:87:6d:6c:4a:06:45:29:80:86:
65:9b:67:74:97:46:e9:03:4e:0d:3c:8d:9f:4a:e3:
10:aa:13:ab:39:8e:1b:6d:10:21:3e:a1:c1:7c:93:
0e:56:dc:4d:1b:44:83:be:1f:55:bc:08:f8:60:45:
0b:f1:8c:de:36:74:c7:a6:e9:11:b0:71:d8:62:12:
56:b9:5f:f4:a2:95:74:03:95:fe:57:0c:38:f7:92:
38:19:a2:52:76:14:21:d2:8d:e6:15:c5:79:67:04:
70:5d:a7:93:e5:5f:4e:99:8c:0e:5c:7b:da:e5:5b:
61:6f:b2:b1:87:c2:32:eb:e1:5a:b5:36:87:17:fd:
a5:db:43:73:21:fb:46:fa:df:3c:6b:09:27:54:bc:
4b:b5:0d:52:12:a2:f2:33:b0:e1:69:d9:f2:cf:a3:
f9:ff:84:e6:98:97:82:fe:de:9a:92:ea:d4:b8:39:
75:58:04:26:ed:62:51:d8:34:8f:78:dc:52:24:02:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:4E:0C:DD:2F:02:EC:EC:52:44:7E:5F:8E:E1:E9:57:D8:F0:48
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/CwFODN0vAuzsUkR-X47h6VfY8Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.84.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cb:d6:0f:40:e6:a4:50:57:57:5d:2d:a1:2c:bb:b6:23:11:
73:bd:91:aa:c8:94:3e:b6:60:63:63:ec:e9:8b:b3:d2:b8:cb:
88:43:17:3a:10:50:5b:b2:9e:29:60:59:a1:2f:62:e5:e6:51:
0f:90:31:a7:ac:27:77:b8:8b:00:91:bf:95:01:68:d0:0e:7a:
c7:39:81:1b:4f:3d:38:e8:43:15:fa:66:a5:15:34:79:75:16:
62:82:1a:29:db:a6:c3:4e:35:c0:06:f7:69:72:f9:f4:f7:3b:
94:1c:5e:0b:2b:59:4c:03:79:f6:34:ed:22:d6:6e:d2:37:58:
d9:aa:3d:9a:76:b0:29:3e:89:4a:e1:6c:db:63:78:fc:4f:8f:
bc:a9:a5:bb:03:3c:3d:5c:76:f6:f6:6a:99:42:ec:69:6b:18:
07:da:dd:b1:d5:5a:fb:bc:a0:43:c6:ac:fe:dc:30:0f:89:50:
5a:da:b3:bc:f6:a9:28:36:f5:90:17:1c:9d:3b:f0:b3:87:2c:
15:ad:b0:a8:fc:b6:34:17:0a:c5:74:d0:66:d2:76:80:42:b4:
37:e7:dd:84:2c:bd:9f:e9:32:93:ad:94:d3:30:bc:76:e3:ae:
4d:35:6f:72:54:c2:4a:19:97:63:ed:f0:53:f9:e2:fc:36:a6:
16:fa:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:41 2024 by rpki-client on console-fra.rpki-client.org