Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2FJg4ByLHuuBfQk68EIlq8AgyY0.roa
File: 2FJg4ByLHuuBfQk68EIlq8AgyY0.roa (raw, json)
Hash identifier: xzYVTFx++VO+wIlZFiiiIjtr82BFeD9qmt0dxNB+H1k=
Subject key identifier: D8:52:60:E0:1C:8B:1E:EB:81:7D:09:3A:F0:42:25:AB:C0:20:C9:8D
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0185DDBC83972D04DF8AA962098FC0B31331
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2FJg4ByLHuuBfQk68EIlq8AgyY0.roa
Signing time: Mon 23 Jan 2023 08:26:37 +0000
ROA not before: Mon 23 Jan 2023 08:26:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33387
IP address blocks: 188.191.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 20:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:bc:83:97:2d:04:df:8a:a9:62:09:8f:c0:b3:13:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 23 08:26:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d85260e01c8b1eeb817d093af04225abc020c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:e9:2c:57:71:eb:b6:94:bd:7c:fa:cf:81:
03:84:d3:05:12:a2:86:dc:14:5b:e0:cd:79:d7:36:
ef:bb:8c:76:0c:86:c7:6d:6e:2b:1f:f4:43:a2:48:
ee:54:27:f0:6d:79:c4:cd:6d:b5:d7:35:76:50:ee:
a9:91:5f:c2:e4:ba:32:cb:6d:8b:0a:41:ad:7f:84:
64:c3:8d:0a:e5:08:d9:37:94:53:4e:40:99:78:45:
06:20:8e:01:c4:75:ff:d5:1f:76:34:6b:f9:b6:dc:
32:44:37:5e:10:14:0d:30:60:8c:1f:c6:6c:19:42:
a9:b0:ff:a2:08:06:17:62:8e:48:68:2e:44:ab:e7:
77:61:1e:fd:24:71:a2:b6:e0:6d:1b:16:51:eb:81:
d9:1a:d6:90:2d:d6:c8:85:27:7f:5e:70:b1:aa:db:
61:05:d8:2c:1d:a2:0f:d8:c4:6f:92:1a:67:29:0b:
25:74:e1:54:8e:5b:41:5b:6a:ec:49:57:f0:bf:e8:
06:2a:6a:93:f7:41:fb:0d:9b:3c:fa:aa:ac:07:7a:
d0:95:af:a7:5f:37:ee:cf:e7:79:ce:9c:79:39:74:
b2:c8:67:0b:d1:00:e1:1d:dd:32:a8:ab:2f:81:20:
c4:b8:c2:be:39:e7:7e:f1:34:85:53:7c:ba:49:8d:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:52:60:E0:1C:8B:1E:EB:81:7D:09:3A:F0:42:25:AB:C0:20:C9:8D
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2FJg4ByLHuuBfQk68EIlq8AgyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.105.0/24
Signature Algorithm: sha256WithRSAEncryption
88:22:05:e5:83:4f:44:18:04:34:f9:63:1d:3b:66:a1:ee:59:
d9:d3:b0:06:3b:1a:64:81:ee:f7:c1:0a:b0:fb:f1:33:fd:73:
79:22:e8:e5:05:03:8d:b7:87:55:52:d7:27:47:ac:ad:a5:f1:
10:5a:3d:5f:46:01:a7:35:bf:d7:65:82:2d:ce:2d:3a:40:e8:
91:7d:e6:6f:67:3e:5f:92:85:63:55:e3:bd:eb:7b:7c:a3:d7:
96:e6:1b:ab:3b:6e:8d:11:07:ab:4d:ae:c3:62:32:b3:e3:f9:
03:02:38:ce:7d:a1:96:9a:35:df:0f:3b:5d:f4:cb:df:64:1e:
48:25:e2:5e:d1:38:5e:89:ad:58:64:d5:32:69:d8:fe:ef:de:
bc:1f:78:1b:53:4f:59:70:2f:e8:80:55:07:9e:27:bb:50:6c:
c3:40:eb:be:7a:b4:85:62:e8:b7:a5:47:4c:d2:5b:d8:3e:a0:
d4:a5:ec:4e:03:8a:25:1a:6e:d1:69:b2:a0:55:43:c7:29:71:
75:45:d2:2e:b6:c1:f3:7d:a3:8b:5a:6a:27:ff:f1:b2:0b:7d:
94:7b:eb:3f:fb:8b:bd:c7:30:e2:d7:88:9f:22:9f:89:d0:12:
a3:87:ed:95:82:0d:0c:46:04:6e:1b:23:45:8c:87:dd:75:90:
1a:c2:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:05 2024 by rpki-client on console-fra.rpki-client.org