Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/jeMMf7kUvVLlkr222GgKyBEV-f0.roa
File: jeMMf7kUvVLlkr222GgKyBEV-f0.roa (raw, json)
Hash identifier: ihlM416erWuQgPODJYaxp7HTbe0CdZDITdQ5ExyaUEc=
Subject key identifier: 8D:E3:0C:7F:B9:14:BD:52:E5:92:BD:B6:D8:68:0A:C8:11:15:F9:FD
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0189E4DDD7A6CBE09F1BD97ECD8DDFFC4AB3
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/jeMMf7kUvVLlkr222GgKyBEV-f0.roa
Signing time: Fri 11 Aug 2023 13:51:31 +0000
ROA not before: Fri 11 Aug 2023 13:51:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 193.104.96.0/24 maxlen: 32
185.144.13.0/24 maxlen: 32
185.222.213.0/24 maxlen: 32
185.25.107.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:dd:d7:a6:cb:e0:9f:1b:d9:7e:cd:8d:df:fc:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Aug 11 13:51:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de30c7fb914bd52e592bdb6d8680ac81115f9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:60:85:81:30:0d:47:b9:e3:f3:29:4d:ac:
af:ec:e1:19:b6:32:6a:ac:c0:65:73:de:d3:a7:f2:
2f:99:34:c5:34:29:ed:87:56:17:3b:4e:d0:77:ed:
43:d2:94:1f:24:b4:ef:e5:4e:f3:20:a6:cb:ed:4e:
09:b1:23:85:9f:84:b3:89:6c:5d:ec:2b:85:e2:58:
66:db:24:65:9a:78:e6:af:17:b5:50:b7:27:17:8b:
ea:fb:46:21:8b:12:c2:2e:ab:0e:cf:28:15:ca:e9:
ed:90:ca:ed:8d:a2:d7:57:b6:c6:fd:27:4d:47:66:
0f:2f:fb:2f:9b:31:78:b7:a6:6a:f1:30:05:cf:75:
12:d5:a6:12:df:b9:00:7c:d7:39:ac:32:12:94:47:
92:43:bd:4a:d6:5d:21:67:72:50:06:07:f3:6f:7f:
f0:f4:e1:44:29:32:ac:ff:8c:fe:7d:23:45:e3:3a:
a8:79:54:d4:0d:92:de:4c:ac:59:f7:6a:42:79:b4:
2a:c2:7b:cd:80:65:89:a5:a4:9d:4b:5f:04:52:22:
9e:0a:95:ce:5f:24:d6:c4:7c:c6:9d:a8:38:21:47:
40:f9:61:c9:8b:91:24:66:9f:11:b6:b3:78:cb:09:
36:c4:8d:ea:fd:c4:76:78:e0:6b:c0:78:5d:e6:78:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:0C:7F:B9:14:BD:52:E5:92:BD:B6:D8:68:0A:C8:11:15:F9:FD
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/jeMMf7kUvVLlkr222GgKyBEV-f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.107.0/24
185.144.13.0/24
185.222.213.0/24
193.104.96.0/24
Signature Algorithm: sha256WithRSAEncryption
37:83:d9:94:2e:3e:7b:04:54:f4:57:06:94:18:cc:d8:6a:2f:
d7:81:69:87:13:e9:f9:4f:98:a3:2a:15:0e:c6:95:9d:a6:b3:
d5:11:ef:41:c0:d4:39:14:d1:3a:50:25:bb:6d:21:eb:4a:70:
8f:e5:49:6f:10:30:af:50:53:ef:28:25:b9:97:93:9f:ca:48:
5e:a4:ff:f4:7b:9a:ce:aa:ce:6b:c4:6b:65:09:b7:3d:49:26:
6e:2d:a3:34:37:32:61:3c:b2:e6:33:60:ad:d8:53:a0:70:1a:
67:47:7c:8c:73:d8:9d:df:24:be:8b:2c:cb:4a:00:86:d9:34:
f5:c0:d0:37:5f:b2:64:2c:ae:cb:3b:82:2a:82:a8:e4:5b:1e:
ac:51:47:16:73:d8:6d:7c:db:3c:89:ca:1b:5f:f3:89:0b:70:
92:13:b4:92:7b:47:df:67:a1:b7:d2:c2:77:ec:da:21:45:7d:
a4:45:57:df:1e:40:95:39:c1:3d:fc:f9:5c:70:f5:d1:5d:2c:
65:b7:dc:a2:ec:fa:1f:91:f4:66:e1:04:8b:7c:e6:58:1b:c0:
b2:27:dd:73:69:9a:23:dd:c1:de:fe:7b:d7:6e:21:7e:37:51:
44:8e:74:87:20:c4:b9:e8:0f:20:60:9f:ad:f3:bc:76:5f:f1:
d5:fd:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:49 2024 by rpki-client on console-ams.rpki-client.org