Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/RuelvBaX80vaabgw8I8kYuqndj4.roa
File: RuelvBaX80vaabgw8I8kYuqndj4.roa (raw, json)
Hash identifier: BCohfLM7n+TgW1THkVHu+5HdbY6+5s82KmHKxT+I3IA=
Subject key identifier: 46:E7:A5:BC:16:97:F3:4B:DA:69:B8:30:F0:8F:24:62:EA:A7:76:3E
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 01857230F06ACC0530479856CA1F22054DCA
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/RuelvBaX80vaabgw8I8kYuqndj4.roa
Signing time: Mon 02 Jan 2023 11:14:47 +0000
ROA not before: Mon 02 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206281
IP address blocks: 185.104.31.0/24 maxlen: 24
185.104.28.0/24 maxlen: 24
185.104.29.0/24 maxlen: 24
185.104.30.0/24 maxlen: 24
2a06:2ec0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f0:6a:cc:05:30:47:98:56:ca:1f:22:05:4d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jan 2 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e7a5bc1697f34bda69b830f08f2462eaa7763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:3e:f4:06:06:50:8e:00:bc:88:df:b9:15:
46:98:ce:e7:dc:b4:da:9f:c8:73:b3:24:c7:ef:24:
55:ef:f9:43:03:6b:a8:8a:d6:38:15:b5:3b:25:73:
6c:ae:f0:ab:67:86:8f:d4:34:30:f4:e7:17:23:1e:
32:ea:6c:03:f5:45:81:d2:9b:d4:c9:4a:5a:5d:37:
3d:03:f1:9e:87:26:e7:8a:ed:3d:d3:0d:03:a3:38:
be:cc:e4:d5:62:9c:05:4c:05:f3:5d:68:df:b2:f4:
7a:ff:26:af:dd:ee:e7:d0:96:60:7a:2f:79:89:a5:
3d:ea:69:d0:dc:97:37:81:b0:1c:00:56:3b:d5:53:
7c:a9:a7:cc:5b:90:8a:8c:60:6c:4d:19:c6:ef:3f:
f6:8e:f3:b2:e6:ca:f8:a9:6f:3a:38:c5:8d:04:1d:
73:42:55:72:3f:de:c7:9b:ab:69:21:4f:9e:ff:e6:
a5:78:aa:3a:9b:c3:38:f2:f4:93:22:12:56:28:4d:
ce:fc:7b:7c:e5:92:51:91:80:9e:51:af:48:78:b7:
62:4c:0f:c7:b8:35:85:97:d3:1b:71:26:92:d0:d7:
33:68:3e:66:dc:ae:da:dc:42:3d:be:d0:c8:59:35:
37:86:60:5f:0e:7d:d1:e5:02:72:8f:4c:e9:b7:a5:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:A5:BC:16:97:F3:4B:DA:69:B8:30:F0:8F:24:62:EA:A7:76:3E
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/RuelvBaX80vaabgw8I8kYuqndj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.28.0/22
IPv6:
2a06:2ec0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:4c:28:62:e7:b4:a4:e3:da:ae:5f:3f:f4:de:c1:f4:a7:9c:
ff:49:2f:6c:1a:6d:33:6c:bb:d8:b3:86:be:3b:7a:5b:da:8d:
0e:c7:f7:c7:51:50:96:14:40:ec:bf:cd:06:6f:3f:01:0b:c0:
cc:56:6d:f5:3e:7a:85:4a:13:24:2d:26:5e:44:a8:5b:7b:b8:
4c:44:8c:5e:04:77:67:c1:89:65:46:1b:ae:a1:3d:d8:48:0f:
b1:53:d9:5c:fe:f0:82:5d:11:29:2d:64:0c:1a:da:9d:7f:26:
8e:3c:06:be:7f:72:fc:84:73:47:2e:da:72:ba:43:39:28:96:
6e:64:4e:73:a3:6f:ef:40:b9:36:8d:d3:24:d5:12:5b:85:18:
a2:e3:9e:2b:bb:b6:58:88:10:13:37:39:aa:08:0f:1b:5c:34:
55:f3:46:fb:c9:9b:a0:78:ac:06:77:96:7a:b2:25:b2:7a:84:
cd:87:86:fa:c2:cb:7c:d2:5b:69:7a:a7:39:44:81:6f:be:d8:
27:97:c6:d4:16:19:51:4f:85:09:70:eb:9d:ec:8c:bf:20:66:
b8:5c:8f:48:85:6b:bb:43:bc:17:42:96:f8:ca:05:5b:69:a3:
d1:e2:c7:c2:c4:92:78:8a:2d:54:2a:51:bf:db:e8:45:37:c8:
af:1e:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:25 2024 by rpki-client on console-ams.rpki-client.org