Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/Pme0Jh3Yb7yrgA3rpZgv-oUbjx0.roa
File: Pme0Jh3Yb7yrgA3rpZgv-oUbjx0.roa (raw, json)
Hash identifier: you97i/zD1DARYUHJgzZW47xTpVOClOYhaP6pXPq800=
Subject key identifier: 3E:67:B4:26:1D:D8:6F:BC:AB:80:0D:EB:A5:98:2F:FA:85:1B:8F:1D
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0185710C0F0883830B9E2D892629FFA8067A
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/Pme0Jh3Yb7yrgA3rpZgv-oUbjx0.roa
Signing time: Mon 02 Jan 2023 05:54:53 +0000
ROA not before: Mon 02 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205388
IP address blocks: 185.107.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:0f:08:83:83:0b:9e:2d:89:26:29:ff:a8:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 2 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e67b4261dd86fbcab800deba5982ffa851b8f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:fd:e8:d1:3b:95:18:cd:84:1a:c8:8d:60:
ac:f7:bc:5d:05:75:e8:65:fb:c3:e1:bd:e6:b2:a4:
ff:5b:31:51:69:05:1b:42:95:21:25:5c:b2:dc:d7:
2a:61:8a:59:88:78:ff:db:ef:1f:f9:a1:37:2b:9f:
9e:95:cd:65:17:ca:ab:ce:8e:0b:a7:8a:72:b8:80:
88:fd:3e:81:69:96:5a:c5:2d:b7:8d:a8:c4:26:2e:
f9:d3:a3:9d:c5:87:33:f4:69:d2:62:b9:a4:0b:a4:
7a:eb:d4:eb:72:d3:5d:f5:b0:06:38:29:06:df:8b:
2e:c0:92:78:ec:2d:eb:fb:d9:17:e8:bd:8f:7c:dd:
9c:cf:b0:98:bc:40:d0:87:55:23:54:ce:98:8e:64:
60:e5:5a:68:21:e5:cd:3d:b7:af:1c:5d:a0:4f:6b:
01:cf:2c:59:01:46:6a:67:9a:12:64:cd:da:f1:e6:
55:90:b1:9f:75:cb:7e:d5:66:c9:f5:57:fb:ff:db:
6e:84:26:81:f6:fe:43:c2:53:91:d7:16:c5:23:c9:
09:15:88:94:83:f8:ff:46:a7:7f:dd:15:45:cd:04:
31:2e:6c:75:66:64:ea:21:3a:c5:53:fa:8c:a7:11:
64:8f:5e:15:cb:82:6e:11:e6:17:97:68:cc:b7:6e:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:B4:26:1D:D8:6F:BC:AB:80:0D:EB:A5:98:2F:FA:85:1B:8F:1D
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/Pme0Jh3Yb7yrgA3rpZgv-oUbjx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.195.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:c9:7a:c9:a6:33:0e:80:cf:94:36:3d:23:68:0a:eb:9e:
3d:8b:c0:b8:96:1f:86:eb:85:aa:6c:5f:3c:9e:6a:ad:12:d2:
69:cc:c2:bf:7a:53:3c:3b:31:bb:70:a6:33:00:7f:0d:90:1d:
1f:bc:33:ea:63:3f:d1:25:63:ad:df:da:7c:4f:70:5c:7e:2c:
7f:66:c9:66:79:f0:f7:91:2c:40:86:e7:1d:08:9c:e8:32:7e:
65:e6:66:9e:35:41:c0:c7:f2:05:fd:e2:40:25:86:09:94:9f:
7d:3c:4c:74:d7:25:39:a3:c1:5d:59:76:e0:28:6f:69:4b:ad:
33:10:db:8d:9e:81:d8:cb:63:f0:f0:73:5a:fe:37:b1:fa:ba:
e5:34:0e:a9:6d:41:99:41:ea:1e:bb:68:18:fd:a8:d3:88:c5:
61:2d:a2:32:a9:60:e3:d5:a0:7a:6c:64:ca:11:6f:77:7d:ae:
3c:51:fe:74:6f:ef:d7:9b:78:a3:01:55:88:df:3a:2a:72:dc:
13:84:aa:d0:16:c3:97:ed:95:03:d7:01:72:b2:49:5d:0b:c9:
f1:f1:35:1c:fb:81:12:90:b1:40:fe:fc:df:36:c0:3d:df:50:
fe:da:d4:34:09:b9:d9:94:3e:2b:3c:f1:99:9b:0e:63:4e:a2:
36:94:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:48 2024 by rpki-client on console-fra.rpki-client.org