Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/XFRONxVMU2tpMIUokJqUTCZAet4.roa
File: XFRONxVMU2tpMIUokJqUTCZAet4.roa (raw, json)
Hash identifier: mnNSsHBV3E2cZQSb89l+x1CKFBqY5Ink2kGyx4ZWRZo=
Subject key identifier: 5C:54:4E:37:15:4C:53:6B:69:30:85:28:90:9A:94:4C:26:40:7A:DE
Certificate issuer: /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial: 01856D9D22ED658AB6FBE373CCF059A788EB
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/XFRONxVMU2tpMIUokJqUTCZAet4.roa
Signing time: Sun 01 Jan 2023 13:54:52 +0000
ROA not before: Sun 01 Jan 2023 13:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25281
IP address blocks: 185.103.13.0/24 maxlen: 24
185.103.14.0/24 maxlen: 24
185.103.15.0/24 maxlen: 24
185.103.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:22:ed:65:8a:b6:fb:e3:73:cc:f0:59:a7:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
Validity
Not Before: Jan 1 13:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c544e37154c536b69308528909a944c26407ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:88:f6:0b:38:46:ba:0f:73:82:92:4f:e4:
62:6f:ea:19:81:37:a8:f6:4a:22:bd:96:fe:53:a4:
b4:1d:07:28:4a:48:f3:d5:cb:3c:71:1b:bd:9a:27:
ff:61:23:d3:1c:39:a2:7d:3c:64:bb:60:77:6b:6b:
e2:c8:83:90:a8:e1:06:3e:dd:2f:2e:6d:d9:97:77:
cd:30:50:31:b6:b1:e3:ca:a8:02:b9:d4:93:bf:a9:
66:17:aa:4f:aa:93:15:c3:7a:13:19:4b:62:54:c0:
ae:13:7b:23:4d:df:4b:13:36:0b:49:b5:e1:68:ef:
e6:e0:30:9c:c5:b2:d8:96:8c:c3:13:8c:5c:b5:9d:
ce:e7:ee:ec:67:2e:87:e1:d1:da:40:0f:eb:fc:99:
ae:f7:ce:4a:b5:91:55:56:d6:2f:89:83:0c:c2:ff:
64:0a:df:e6:61:b3:ab:a2:1a:72:d9:a5:2c:49:d0:
9b:60:c5:be:87:15:56:2b:20:c2:c6:4e:ef:89:a6:
0f:e6:2b:e4:4b:6e:51:99:8d:a2:48:6f:7c:0f:58:
1e:8c:b8:0d:b5:7f:b6:29:78:9b:4d:42:86:71:9a:
0b:71:ed:8e:db:97:2c:d9:fd:82:ae:fa:ee:30:7a:
d1:43:0c:b2:45:dd:11:da:32:d8:10:85:49:f9:19:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:4E:37:15:4C:53:6B:69:30:85:28:90:9A:94:4C:26:40:7A:DE
X509v3 Authority Key Identifier:
keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/XFRONxVMU2tpMIUokJqUTCZAet4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.12.0/22
Signature Algorithm: sha256WithRSAEncryption
be:5f:d8:89:c5:28:ee:85:8a:74:73:24:b0:30:4e:13:43:5a:
d6:66:e5:64:04:ee:43:04:7b:6b:81:67:56:38:f3:29:42:47:
c0:79:61:c9:1f:2b:9c:21:a2:28:5c:9a:0c:fe:f3:0a:d7:be:
a2:39:bc:6b:6a:2e:9f:05:7b:74:1e:7c:34:d4:e1:02:8c:72:
c2:f0:66:33:7c:fa:05:a9:00:29:ca:af:3e:58:97:81:d1:b3:
d3:e7:89:dd:53:9b:4d:e2:6a:98:b6:a9:a3:12:b3:6d:aa:c8:
a5:d3:7a:f2:26:c1:d1:82:79:2d:1b:b1:c0:1d:a4:24:68:9b:
61:a0:55:af:86:51:a5:60:64:6c:a3:d3:3c:08:93:6f:f8:11:
3f:be:0a:11:b2:01:fd:13:42:34:a2:d9:f9:18:ce:8b:ca:ab:
aa:12:22:8d:2a:3f:ff:59:61:73:a4:20:da:30:b4:53:49:6a:
f6:6e:44:0d:26:03:00:3f:e5:3e:f9:d6:0b:8c:26:41:c2:65:
54:ee:65:2d:db:38:e2:cd:a7:f4:bd:31:e3:46:84:4c:40:5f:
c5:d2:78:f3:eb:78:25:d0:4c:2f:fa:20:80:af:fc:e9:54:4b:
35:6d:6c:af:bf:9b:8f:2e:bd:08:dd:fe:15:30:ef:e8:69:23:
fc:f8:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org