Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/O7Iva1nCVk1ykuku13hCONQmCFM.roa
File: O7Iva1nCVk1ykuku13hCONQmCFM.roa (raw, json)
Hash identifier: teuX8mDR/joDyOwzlJSfCR6e3HokdB2u9Bk2xNA4+Es=
Subject key identifier: 3B:B2:2F:6B:59:C2:56:4D:72:92:E9:2E:D7:78:42:38:D4:26:08:53
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BDDE4CDC36483573EF48B1F0147E7A53A
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/O7Iva1nCVk1ykuku13hCONQmCFM.roa
Signing time: Fri 17 Nov 2023 15:27:21 +0000
ROA not before: Fri 17 Nov 2023 15:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216172
IP address blocks: 185.30.108.0/24 maxlen: 24
185.30.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:e4:cd:c3:64:83:57:3e:f4:8b:1f:01:47:e7:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 17 15:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bb22f6b59c2564d7292e92ed7784238d4260853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:b6:4f:99:1d:74:57:72:e3:0b:cb:fc:ba:
4c:68:1b:03:8b:95:ea:70:26:35:e3:7b:fc:37:cf:
7b:22:73:a1:60:eb:8d:15:c6:28:6f:e7:58:4c:cd:
71:8c:cd:dd:d0:fc:a2:57:bf:33:b1:de:bf:b6:e9:
4c:f8:54:79:78:aa:17:b3:4f:21:bb:a7:f4:a1:5e:
46:c8:96:2a:5b:e3:b4:35:e4:9d:e1:eb:64:a4:d2:
82:bb:8d:7b:28:59:2c:2a:4b:68:a7:75:94:d3:3e:
c6:2d:76:f6:12:dc:19:82:24:0f:56:37:98:6b:41:
f9:e4:4d:26:56:2b:bf:44:36:3d:5e:70:a3:2c:a8:
21:db:36:6e:17:08:67:d7:86:5a:a7:bb:8b:9e:6f:
ed:fa:c2:54:57:53:bf:e1:c5:d2:f6:ec:ba:4a:97:
ec:e3:6a:c8:31:10:0d:24:90:53:65:dd:2c:95:ae:
43:87:3b:b4:56:90:e6:54:4a:f0:ce:d7:38:e5:57:
37:dd:a0:91:a5:db:1b:6c:99:1c:38:41:38:17:82:
9e:05:cc:73:d6:05:1e:8a:ff:c1:48:cc:2e:d6:84:
1c:7e:3f:e5:c1:d8:30:d8:14:a4:de:7b:c1:20:7e:
7c:30:13:bc:51:c8:60:98:ee:c8:5a:73:d4:c0:9c:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B2:2F:6B:59:C2:56:4D:72:92:E9:2E:D7:78:42:38:D4:26:08:53
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/O7Iva1nCVk1ykuku13hCONQmCFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:2c:70:0a:d2:2b:15:16:d5:38:61:85:c1:31:f6:85:df:4e:
17:41:5d:9e:14:ae:09:08:d4:9a:9e:6d:b6:2a:8a:57:90:05:
e1:87:e6:3e:6f:c0:40:6b:d3:d7:d1:75:f7:8a:46:88:97:a7:
be:45:d3:72:ad:13:3c:4a:44:a9:0b:02:2e:8d:56:a7:4a:bc:
b7:92:75:d1:fa:00:ed:c3:d7:15:fb:3a:36:d7:f5:6b:cc:92:
9a:a6:d1:0d:90:74:61:93:29:b6:f9:3f:52:2d:30:32:83:31:
03:92:45:62:dd:f3:46:0a:38:04:c2:48:ce:43:ca:55:a1:5b:
d4:5a:dc:1f:b8:4a:49:59:7c:fb:38:92:89:55:18:d7:e2:da:
46:db:55:0b:c8:63:45:7c:eb:d5:6f:34:45:ef:88:90:4a:7f:
0f:a7:25:13:fb:fa:14:dd:f3:8b:ed:d4:2a:a3:78:35:87:23:
6e:93:9c:45:f7:7a:0f:ea:ad:a0:0e:db:c0:7a:a3:9f:46:62:
24:ab:34:99:7c:08:61:de:cc:3c:84:6d:da:a2:e7:e4:cc:f1:
c8:fd:98:70:13:6a:23:87:ac:c8:a2:a6:ac:97:b4:c7:eb:d5:
18:7c:2e:e5:88:f2:3b:d6:7d:88:17:f5:c4:9c:59:c7:e0:b0:
7f:33:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 16:40:09 2023 by rpki-client on console-ams.rpki-client.org