Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/0bAcz2aUN0jzVxwTeNpT_-LvDKU.roa
File: 0bAcz2aUN0jzVxwTeNpT_-LvDKU.roa (raw, json)
Hash identifier: Cdk8ad/cMpYnM0sG8FUGCyJCDF8TVFCwA0qMZ1EXiR8=
Subject key identifier: D1:B0:1C:CF:66:94:37:48:F3:57:1C:13:78:DA:53:FF:E2:EF:0C:A5
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: 018C9B4AC6EA38D4858A7D863E838E0AF4AC
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/0bAcz2aUN0jzVxwTeNpT_-LvDKU.roa
Signing time: Sun 24 Dec 2023 10:06:58 +0000
ROA not before: Sun 24 Dec 2023 10:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49067
IP address blocks: 194.31.11.0/24 maxlen: 24
185.98.218.0/24 maxlen: 24
185.98.216.0/24 maxlen: 24
185.98.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:4a:c6:ea:38:d4:85:8a:7d:86:3e:83:8e:0a:f4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Dec 24 10:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1b01ccf66943748f3571c1378da53ffe2ef0ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6c:31:b7:c1:6d:ff:66:e4:81:71:a2:b9:1d:
2f:da:58:5d:a4:40:4a:ab:cf:ae:e7:55:1d:a8:a1:
11:9b:3c:54:e5:ff:66:89:67:f6:c9:9c:4f:a1:8c:
61:dc:10:e9:3b:2d:ac:1b:0e:72:ba:c4:3b:b2:1d:
ce:16:83:eb:8f:85:d0:be:0d:53:d1:7b:2d:e4:4e:
41:dd:b2:d7:f6:82:0f:f2:a4:ad:fa:cb:61:5a:e5:
1a:c3:c1:d1:c6:2b:cf:29:64:3c:a9:ce:1c:b5:53:
90:2a:b5:4f:0a:60:55:a4:f8:54:d4:af:b8:62:d2:
06:0e:de:23:a1:cc:f1:b3:90:c5:3d:dd:45:c1:8b:
8f:37:4f:ba:98:07:a6:71:c8:8e:5d:07:36:56:02:
1b:5b:0e:6c:a2:fd:d0:e6:9c:ef:9d:bc:c0:1e:e0:
ee:78:1c:9e:14:cc:10:2c:f1:55:69:4a:60:ac:50:
06:8e:f9:f8:e9:fc:bf:d6:de:ba:46:7d:22:3e:ae:
87:25:d9:12:c4:48:0f:2b:86:86:40:2b:c1:08:34:
70:de:60:95:1d:64:4d:b3:96:e2:31:61:b2:02:3b:
a7:90:6f:32:47:cd:51:1a:c9:4a:9d:55:bb:4c:a5:
67:15:3f:ee:33:80:ce:5d:86:22:25:e9:4f:a1:89:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:1C:CF:66:94:37:48:F3:57:1C:13:78:DA:53:FF:E2:EF:0C:A5
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/0bAcz2aUN0jzVxwTeNpT_-LvDKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.216.0-185.98.218.255
194.31.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:33:76:5c:13:48:2b:a8:01:4c:10:eb:d7:44:83:17:30:a5:
73:5e:40:0f:c4:a5:66:b4:e5:d5:10:ba:89:7c:95:9f:7c:e0:
b4:d8:42:44:d0:a1:15:f0:1c:a7:20:c7:48:ac:99:6c:6b:29:
69:c3:f2:26:72:4f:61:97:57:45:a5:00:16:59:c5:2a:05:04:
23:7c:cd:c2:20:72:f0:c7:8d:ce:c9:f5:20:e1:1e:b5:8a:65:
98:01:db:53:da:06:35:8b:ba:17:28:21:f0:c6:82:61:b6:df:
33:fd:af:67:a2:c6:2b:7c:fa:c4:1b:0e:f3:d4:db:b6:41:a2:
18:78:4c:66:79:7a:55:4f:fb:bf:78:c3:06:6d:11:28:fb:c3:
29:3e:8f:85:c7:38:c0:d4:6c:b4:c0:18:a0:56:df:37:0d:e2:
70:b4:8b:45:cc:ab:1a:f1:55:29:4e:b6:f5:4a:db:c7:85:f4:
cd:c2:f5:dc:14:6e:f6:86:d9:64:09:58:6c:ad:74:16:e2:dc:
91:8d:00:f5:56:a9:4e:36:65:89:58:cf:56:7b:0e:b6:34:df:
58:9a:f7:c3:cd:b0:02:75:74:c5:f8:4d:38:6b:44:0b:fa:9c:
f6:12:79:23:04:a4:db:ba:b7:d1:84:02:45:c7:a8:89:bf:84:
2e:72:e5:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:15 2024 by rpki-client on console-fra.rpki-client.org