Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/do9zGfANs7kcum882bo61946wlE.roa
File: do9zGfANs7kcum882bo61946wlE.roa (raw, json)
Hash identifier: 57xMu4NKi8WMamPB7SYr40vTsv+h1b65zkBBThPN+ng=
Subject key identifier: 76:8F:73:19:F0:0D:B3:B9:1C:BA:6F:3C:D9:BA:3A:D7:DE:3A:C2:51
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 018B139B430625CBD264274CD2D70BAD8B79
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/do9zGfANs7kcum882bo61946wlE.roa
Signing time: Mon 09 Oct 2023 08:43:44 +0000
ROA not before: Mon 09 Oct 2023 08:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 185.102.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:9b:43:06:25:cb:d2:64:27:4c:d2:d7:0b:ad:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Oct 9 08:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=768f7319f00db3b91cba6f3cd9ba3ad7de3ac251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:de:84:09:17:c6:b6:b4:1f:8e:50:6d:e3:
f8:e8:cf:eb:2a:a2:a3:8c:11:fa:cf:bc:8e:6b:ba:
d8:c6:b6:b8:54:e7:9e:c2:23:82:04:d7:c4:06:63:
99:21:13:ad:20:7a:ce:f6:79:85:41:64:ab:e8:ae:
6c:b0:61:ca:ad:28:59:13:52:84:50:93:59:03:86:
5a:8e:b8:10:c1:06:06:8d:6e:c8:0f:d0:26:de:12:
a1:ab:14:bc:ae:53:b0:ca:a9:cd:2b:92:97:c8:53:
c4:cc:5d:b6:54:95:d4:14:8c:ce:6f:3c:f4:ec:19:
32:3c:eb:14:be:46:d2:05:ff:85:dc:ab:3b:54:a4:
c2:3b:38:90:e3:be:40:87:b2:b3:2a:6b:0f:2d:88:
f2:9c:17:b3:2a:0c:b7:53:c5:68:19:29:8d:60:77:
13:18:f8:3c:18:54:85:dc:19:48:7e:9d:b8:7c:cb:
f5:f8:d5:e5:60:17:6d:53:7c:81:aa:d6:a6:6e:36:
3a:5c:b5:78:b4:3c:fa:ef:4f:a1:3c:36:1e:b1:22:
4c:14:f1:a1:22:69:4d:d9:f9:63:cc:85:27:cf:55:
aa:b3:a7:ce:e7:4b:ee:3f:d1:83:45:f1:82:dd:d8:
0f:d0:43:3d:af:93:e2:38:79:65:65:73:98:dd:e6:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:73:19:F0:0D:B3:B9:1C:BA:6F:3C:D9:BA:3A:D7:DE:3A:C2:51
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/do9zGfANs7kcum882bo61946wlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1f:ca:ff:af:a4:20:01:00:8b:a0:19:ef:c6:b1:0c:cf:1a:
be:84:cc:c6:e6:0b:3a:93:47:e8:48:a6:40:3a:a2:d0:f8:40:
0b:b8:f4:ef:02:7b:13:5b:de:01:88:86:34:0a:77:de:8c:ea:
04:7f:f0:ad:ed:dc:14:e6:ec:83:8b:d5:5c:07:85:0e:70:39:
c4:4e:b5:41:b1:60:75:27:f7:a9:b2:81:7d:59:00:72:39:85:
94:6f:97:63:1c:06:89:a2:81:06:89:4f:f1:2d:42:8a:f1:27:
f0:5b:f5:07:e7:d5:2e:de:04:62:44:f7:13:fc:fe:95:cb:f8:
15:c2:cf:d7:7a:cc:b9:44:64:af:bb:b8:ff:b8:6d:42:6c:01:
5f:e1:74:d8:37:79:a1:e9:13:51:ba:aa:69:00:47:c2:7e:3d:
20:36:86:78:12:73:70:13:2e:7c:66:72:9d:93:f7:dd:be:30:
53:6e:66:98:c2:01:c1:24:42:e3:d7:50:1e:78:a2:4b:c0:62:
6a:4c:6b:58:1d:73:4c:be:5a:53:c9:71:0c:0d:f1:a2:34:c3:
80:b4:65:d7:fa:1e:c8:44:19:26:92:b9:51:5a:06:6e:d9:6a:
45:9a:13:3c:98:c4:01:c9:59:e7:05:f4:6c:bb:c5:e6:87:4f:
31:0d:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-fra.rpki-client.org