Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/8vnTX1EgVu1lfEsz740WRdvp_3E.roa
File: 8vnTX1EgVu1lfEsz740WRdvp_3E.roa (raw, json)
Hash identifier: lhw3yJTEkYVPUFkhGUN+JFPYKAIVDVZQ8SsiPLDw1ig=
Subject key identifier: F2:F9:D3:5F:51:20:56:ED:65:7C:4B:33:EF:8D:16:45:DB:E9:FF:71
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 018571153D925D9AB395067A18C598CEAA1E
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/8vnTX1EgVu1lfEsz740WRdvp_3E.roa
Signing time: Mon 02 Jan 2023 06:04:55 +0000
ROA not before: Mon 02 Jan 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.103.188.0/24 maxlen: 24
185.103.189.0/24 maxlen: 24
185.103.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:3d:92:5d:9a:b3:95:06:7a:18:c5:98:ce:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jan 2 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f9d35f512056ed657c4b33ef8d1645dbe9ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:26:79:47:ee:5e:d1:7b:b0:e1:0c:7e:c9:
d8:d3:27:bb:c4:c8:01:af:e3:d6:48:57:23:aa:7e:
b2:41:66:32:62:5d:c4:24:2d:da:93:e1:ae:21:ab:
5a:5d:58:94:5c:dc:d1:c7:bd:2f:b5:15:1a:87:a5:
7b:c6:e1:6b:99:c4:db:1d:1e:38:64:a3:bc:25:03:
98:17:78:2f:37:26:d6:75:08:07:80:fe:39:d4:d6:
4a:92:74:eb:fa:6a:7f:41:a9:02:77:02:22:7f:f5:
ad:8b:cf:bd:2e:78:2f:77:3d:d9:05:f2:47:f3:09:
04:74:97:56:36:59:c4:3f:b9:c0:99:0d:62:25:7d:
2d:b4:b9:4a:ff:43:34:4e:1e:0e:39:40:63:55:cd:
b4:f9:c4:5d:55:c9:37:93:e0:4a:59:54:eb:8c:92:
d3:37:92:3a:85:c8:6f:50:8c:bc:a8:5f:58:e6:6c:
a4:87:2e:9f:fb:a9:56:63:98:c2:0f:22:3f:ef:fc:
b5:84:1c:2c:28:6c:6f:72:6d:4b:7d:96:28:42:6f:
a1:d5:40:14:b3:36:e3:5f:21:d7:ed:c0:0a:2f:c1:
ca:d9:6b:da:df:c5:9c:62:ee:2f:a7:13:4e:9d:00:
cb:08:5d:c5:b2:43:f8:e7:25:f3:9f:5e:b2:2c:72:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:D3:5F:51:20:56:ED:65:7C:4B:33:EF:8D:16:45:DB:E9:FF:71
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/8vnTX1EgVu1lfEsz740WRdvp_3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.188.0-185.103.190.255
Signature Algorithm: sha256WithRSAEncryption
85:6f:46:fa:a6:c0:20:82:55:d2:95:0e:34:07:ee:a3:a3:70:
7b:91:a9:ab:79:de:ca:6c:d2:28:d0:ae:bd:f5:e3:3d:f5:e6:
73:f1:6e:17:3d:86:3c:eb:f5:eb:d7:4a:42:a9:73:b6:1e:dc:
69:4e:f4:a6:e7:26:75:34:61:4f:45:8e:72:dc:78:5d:79:9d:
7a:df:7f:d2:2e:c9:3d:16:d6:1e:37:e3:bd:0e:a0:de:b7:07:
9a:75:cc:a9:6a:4b:10:a2:5f:79:02:7e:54:ef:22:57:d4:d9:
23:24:6c:54:d4:85:ee:f3:09:11:82:bd:ab:13:22:be:09:33:
0c:b6:58:40:19:7e:f2:75:96:74:a9:e2:96:1d:b6:42:64:cb:
6f:f5:21:a6:6b:b1:0e:92:f0:51:90:41:4e:e0:4c:35:1d:10:
b5:c9:de:c5:c0:e9:57:78:8b:d3:18:f2:41:7f:04:2b:da:f3:
37:97:9b:fa:a4:0a:8d:6e:23:82:ad:56:05:94:52:3d:0f:af:
c8:5b:c7:73:da:05:7f:95:71:1f:ee:68:e6:32:17:2d:02:a1:
f4:11:ed:26:06:ce:4f:24:ef:7c:52:7d:31:4f:87:71:43:ef:
a8:28:e6:a7:02:43:c3:d9:f9:76:8f:08:10:e6:2e:77:b8:3e:
0f:16:2e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:37 2024 by rpki-client on console-ams.rpki-client.org