Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/A8fAZOVG-7VD6jfc7Hx70W0oVS4.roa
File: A8fAZOVG-7VD6jfc7Hx70W0oVS4.roa (raw, json)
Hash identifier: zb2t74dUgdP0F0Tsl+//iYUjSXzu72W0533ffCxnkjM=
Subject key identifier: 03:C7:C0:64:E5:46:FB:B5:43:EA:37:DC:EC:7C:7B:D1:6D:28:55:2E
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 018570C2D98C4AE5017F867DAFC385FA857F
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/A8fAZOVG-7VD6jfc7Hx70W0oVS4.roa
Signing time: Mon 02 Jan 2023 04:34:55 +0000
ROA not before: Mon 02 Jan 2023 04:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.104.0/24 maxlen: 24
185.1.101.0/24 maxlen: 24
2001:7f8:bc::/48 maxlen: 48
2001:7f8:be::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:d9:8c:4a:e5:01:7f:86:7d:af:c3:85:fa:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 2 04:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03c7c064e546fbb543ea37dcec7c7bd16d28552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:96:86:f2:00:77:61:57:2a:56:34:23:21:9c:
b4:e1:89:fa:5c:42:0a:0d:32:b6:85:3e:d0:42:62:
8e:6d:89:f5:6b:03:40:fe:8b:58:4d:9f:99:3b:cf:
80:a2:61:bb:35:d7:1a:e0:22:1d:c2:59:55:86:c8:
44:4e:8f:e4:07:1e:0b:3a:9e:ad:cb:6f:7b:ce:53:
fc:ba:f9:b9:38:6a:52:99:74:09:e8:4e:24:98:ae:
f6:ee:26:22:3b:b2:cf:47:61:b5:8d:74:59:bb:bd:
f0:79:3b:1f:95:6d:cf:7b:a3:ea:99:2b:42:69:6f:
df:90:d0:ee:da:69:fb:07:95:cc:a9:3b:93:6c:91:
32:96:75:7a:00:2a:86:d4:02:e4:9c:0a:ff:e0:a0:
97:22:5d:9f:6e:8e:88:6d:a2:ce:a6:d1:35:1a:0c:
18:07:e2:79:b4:f3:09:bc:43:76:4b:ee:6e:69:d6:
00:20:31:76:80:9b:1b:53:e9:f4:68:25:b2:58:78:
2b:52:0e:91:7e:14:33:1a:2f:5f:f7:3e:0a:9e:43:
3f:30:a8:7d:2a:c7:8b:dc:d8:07:03:9d:20:f3:4e:
1f:cd:21:a7:eb:63:0a:78:4b:a0:60:ea:e3:78:ca:
96:71:bf:1c:87:6d:2c:8d:19:12:08:4b:a0:7d:ee:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:C0:64:E5:46:FB:B5:43:EA:37:DC:EC:7C:7B:D1:6D:28:55:2E
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/A8fAZOVG-7VD6jfc7Hx70W0oVS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.101.0/24
185.1.104.0/24
IPv6:
2001:7f8:bc::/48
2001:7f8:be::/48
Signature Algorithm: sha256WithRSAEncryption
2c:bc:3b:1d:7e:a4:48:67:92:b1:b0:c7:8d:85:62:fd:7d:b4:
dc:fb:38:48:46:59:32:b5:6a:b7:a1:ea:ed:90:48:6f:6f:19:
92:af:6a:ca:b4:c0:55:89:ab:b9:5e:6c:a9:92:e6:12:0b:2f:
a0:c7:57:21:78:fd:91:a7:83:83:c8:7a:a6:60:5f:4f:f4:1d:
8b:fb:a0:a0:e8:df:03:53:02:76:7e:d1:cd:f2:2f:b1:d4:5a:
ff:a8:03:59:4c:f4:e6:b4:70:94:d7:e7:9b:13:3e:9d:6c:68:
c2:17:ad:22:44:01:91:cd:ee:7c:36:5d:e4:98:3c:27:2e:8e:
ef:41:49:c1:65:64:12:f8:b6:a4:f0:26:6a:c9:a7:03:1a:6d:
11:2b:0b:8f:6a:fd:5c:35:21:4a:79:f5:59:28:f5:ea:4d:44:
81:d6:f1:ce:73:8b:d8:13:d4:2c:47:1e:d8:a8:37:91:40:2d:
f6:d3:71:47:44:a2:1d:2c:87:b6:87:29:8d:de:3b:b4:70:39:
00:ba:2e:a8:35:b6:be:b5:a0:a6:78:f2:38:8b:c8:8c:e6:68:
65:90:0b:e1:58:1e:bc:a2:2d:9b:b9:9e:d1:cc:4e:2d:54:99:
a3:69:d3:e1:f3:1d:f6:9a:be:dd:89:6a:8c:da:2c:6d:a0:34:
63:7d:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:30 2024 by rpki-client on console-ams.rpki-client.org