Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/P7G3uM5bZHvh9pUfHqt6ws2-AJI.roa
File: P7G3uM5bZHvh9pUfHqt6ws2-AJI.roa (raw, json)
Hash identifier: 5OL/Sox6pe2us3K0PeGyWV8sLNcxbRoQ6peLu8RXILk=
Subject key identifier: 3F:B1:B7:B8:CE:5B:64:7B:E1:F6:95:1F:1E:AB:7A:C2:CD:BE:00:92
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 0187FF648169AB8FC4199B4AFA516E2CDA13
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/P7G3uM5bZHvh9pUfHqt6ws2-AJI.roa
Signing time: Tue 09 May 2023 07:23:09 +0000
ROA not before: Tue 09 May 2023 07:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.230.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:64:81:69:ab:8f:c4:19:9b:4a:fa:51:6e:2c:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: May 9 07:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb1b7b8ce5b647be1f6951f1eab7ac2cdbe0092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:19:d9:0b:27:64:b1:81:ba:15:bc:a7:5b:
a8:65:bc:2c:17:24:32:e1:26:4b:62:8f:53:2e:74:
dc:f1:d6:6b:e8:8b:56:7f:44:4b:56:bb:68:04:06:
b7:ee:fe:a3:42:a0:05:c9:cf:08:41:14:97:7c:72:
c1:0d:d5:6d:da:9d:c4:e4:ae:1d:9e:67:c6:e5:d8:
f0:74:5c:19:0e:97:82:f0:47:59:ec:ef:b0:c0:eb:
e9:bf:11:18:c1:31:e2:45:bf:6b:86:aa:bd:39:93:
69:dc:12:b7:be:85:ab:17:de:57:50:56:85:e8:0a:
17:4b:c8:8c:78:e0:e0:72:eb:27:aa:c6:5d:9f:9b:
93:58:1c:0a:77:35:b4:2b:89:69:6e:3c:14:ab:05:
b0:0a:1a:b0:9a:5d:a0:4f:13:0e:53:4a:f5:ce:73:
ca:23:17:01:7e:21:55:d2:4d:ff:61:0c:3a:76:54:
c7:5d:07:8d:a4:69:49:42:8d:77:38:ba:9d:6c:96:
55:a0:e9:1e:82:a4:70:98:d0:05:eb:14:22:59:19:
e1:ba:8a:ce:de:6c:a1:ff:3f:57:1a:18:13:24:f3:
e4:82:b6:33:f1:9b:31:f9:71:6c:63:38:ac:f7:2d:
00:90:bf:6c:52:e0:6b:dd:fb:f3:0d:0f:66:f2:09:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:B7:B8:CE:5B:64:7B:E1:F6:95:1F:1E:AB:7A:C2:CD:BE:00:92
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/P7G3uM5bZHvh9pUfHqt6ws2-AJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.103.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9a:d3:31:a8:6d:8e:11:db:f4:a3:82:59:37:63:23:e7:5a:
58:07:b2:09:fa:4c:05:cf:da:df:6e:b2:dc:f2:b9:8d:4b:be:
cf:f2:e1:ed:b8:c4:28:00:4f:dc:40:16:d2:ab:4c:4f:1f:67:
8c:8c:39:5b:e9:d1:52:47:7a:ff:82:31:5b:00:c7:ae:91:97:
54:0b:0f:5d:5d:75:d2:bb:ad:e3:fd:9c:0a:43:f6:6c:7d:10:
d5:19:49:1e:28:47:35:0a:a1:d2:84:06:0a:20:e2:fa:2c:8e:
23:2e:43:ab:e8:81:e7:f5:ac:8e:f5:c5:53:b2:56:01:fb:ee:
c7:1d:c7:17:67:fc:29:4b:6b:62:15:6c:6a:fc:e7:4e:e6:3d:
8a:50:bf:5b:74:cc:e6:ed:9a:e8:6f:fc:89:25:1e:6b:3a:22:
53:4c:d9:c1:22:5c:f8:ba:62:15:40:9d:f1:63:4b:16:00:97:
6b:fc:92:d8:de:28:ea:19:42:51:78:5e:86:c4:2a:a9:f7:7c:
ce:3c:2d:61:d4:f0:c5:09:62:a2:df:ff:c2:d4:2c:b2:f9:79:
56:5d:b5:6e:9b:47:c5:7b:95:d7:97:a2:83:b7:c4:19:8c:bb:
15:e3:d9:ec:b9:39:80:16:b0:6f:37:be:0d:cc:dd:a0:9b:f5:
a9:3d:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:43 2024 by rpki-client on console-ams.rpki-client.org