Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/ErGMiXJhQvnZ6NjXqN1i7iEmums.roa
File: ErGMiXJhQvnZ6NjXqN1i7iEmums.roa (raw, json)
Hash identifier: TdBS/naRaHbLWyRTGhIoik7D5u/XvI05meYzexHYDFA=
Subject key identifier: 12:B1:8C:89:72:61:42:F9:D9:E8:D8:D7:A8:DD:62:EE:21:26:BA:6B
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0186979CE4B9B8D9F7EA95B0A0E292529EAB
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/ErGMiXJhQvnZ6NjXqN1i7iEmums.roa
Signing time: Tue 28 Feb 2023 10:41:27 +0000
ROA not before: Tue 28 Feb 2023 10:41:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204479
IP address blocks: 185.107.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:9c:e4:b9:b8:d9:f7:ea:95:b0:a0:e2:92:52:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Feb 28 10:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12b18c89726142f9d9e8d8d7a8dd62ee2126ba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:2a:ff:b0:a0:59:2b:69:1e:d7:6d:76:cb:
66:47:77:df:fc:40:2f:d1:db:df:c9:9c:d9:83:04:
2a:cc:f3:0c:8a:a6:9d:f1:d2:47:09:99:1c:ee:ac:
17:95:ff:83:ee:64:3d:17:11:ca:f1:f6:91:8c:1d:
77:8a:c3:07:7f:85:df:ba:c8:8d:64:52:6c:6e:b2:
f3:75:0d:1a:36:91:42:39:e0:9d:de:be:49:fa:1c:
be:dc:60:65:cc:3f:85:09:c1:7f:ae:f9:fd:e3:42:
0c:70:bb:04:cb:2a:96:d3:59:ba:dc:21:4e:a8:df:
2f:0d:be:b3:b6:0a:ba:4b:9f:f3:f9:d4:fc:db:8f:
54:fb:9a:cf:39:a0:2a:0d:d5:dc:0b:f9:bc:cc:81:
05:e0:05:d6:f5:9e:56:c9:20:53:98:d4:62:fd:f7:
24:6d:6c:3d:ed:3f:78:73:b1:e1:d0:50:f9:ca:21:
24:99:dc:8e:4e:18:64:53:ee:75:ff:31:79:2b:96:
75:28:ef:72:96:61:41:c2:51:26:0e:dd:79:18:40:
ad:9c:e0:42:04:9b:48:87:a7:54:6b:39:dd:a5:58:
2f:71:af:12:c6:3e:4c:17:df:25:f5:70:63:7b:58:
1b:31:51:44:97:63:b9:9a:fb:a2:13:90:85:c0:d8:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B1:8C:89:72:61:42:F9:D9:E8:D8:D7:A8:DD:62:EE:21:26:BA:6B
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/ErGMiXJhQvnZ6NjXqN1i7iEmums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:d3:e2:70:12:85:e2:3e:27:d2:c8:b6:59:ef:99:2e:09:
dc:94:18:3b:a9:5a:57:3d:a5:3c:df:98:25:52:b9:22:6c:97:
92:d0:df:4d:c0:30:56:91:46:00:d9:2b:e3:3e:6a:5e:18:f2:
ef:69:67:7a:51:be:93:ff:9f:16:7d:59:f7:cc:ec:22:90:4d:
7a:0e:80:70:4d:6c:56:98:54:be:3e:be:e3:1d:1b:1c:59:93:
98:ff:0e:82:c8:e6:6f:96:e1:a5:0c:86:f0:68:77:c6:cc:3a:
69:59:59:1d:ce:7d:4d:3d:f3:50:eb:33:d7:f0:39:06:d9:b6:
e2:26:02:88:58:85:57:7d:9b:16:b6:1a:e8:6d:35:83:56:03:
b6:06:2f:73:5f:af:b1:d4:63:20:e7:77:94:3f:cf:55:22:bf:
22:99:e4:9f:b3:89:5f:72:cf:f7:84:ce:c0:b3:45:c3:3d:22:
0d:d3:37:66:94:a7:c5:f2:83:9e:71:75:cb:fd:f2:37:50:f4:
5a:05:11:f9:6b:fc:d7:ef:ae:7e:9e:b7:bd:31:c0:d6:5c:38:
c1:98:90:3a:22:83:19:20:d2:a9:16:9b:38:4a:cb:9f:c8:de:
15:ab:dd:56:6c:4a:d5:2a:f0:97:74:6e:f4:cc:27:23:26:18:
18:47:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:16 2024 by rpki-client on console-ams.rpki-client.org