Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/j0sPC1xQjBREu7CiZP8m8YiDdAc.roa
File: j0sPC1xQjBREu7CiZP8m8YiDdAc.roa (raw, json)
Hash identifier: dEilLEr+ZDaYop1K6gFj0Oe+bZv8/QXU+d+jMCQWp1Q=
Subject key identifier: 8F:4B:0F:0B:5C:50:8C:14:44:BB:B0:A2:64:FF:26:F1:88:83:74:07
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018C1F4764868240AB1064ABC09C7D970904
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/j0sPC1xQjBREu7CiZP8m8YiDdAc.roa
Signing time: Thu 30 Nov 2023 08:10:21 +0000
ROA not before: Thu 30 Nov 2023 08:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216172
IP address blocks: 185.30.108.0/24 maxlen: 24
185.30.111.0/24 maxlen: 24
185.30.109.0/24 maxlen: 24
185.30.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:47:64:86:82:40:ab:10:64:ab:c0:9c:7d:97:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 30 08:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4b0f0b5c508c1444bbb0a264ff26f188837407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:89:83:c9:00:a3:84:3b:52:d6:51:47:c9:
89:8d:a6:b7:ee:fc:a2:97:49:c8:b2:67:57:c5:91:
48:37:3c:4d:ca:8e:0c:3e:59:66:52:85:f6:d7:7e:
6b:6a:2c:18:31:e6:9a:71:d6:72:98:ca:01:0b:66:
93:03:17:a0:95:9c:16:2b:09:f4:85:85:ad:78:85:
03:6f:7e:45:de:0b:9f:17:b8:fb:ca:ee:61:df:7a:
7d:9c:c3:93:3c:6f:df:fa:0e:46:12:3d:a5:cb:0c:
b5:53:d3:b8:94:d0:22:f8:ef:41:f4:3b:54:9a:00:
ed:45:c2:94:a6:4d:91:4c:cb:b1:5c:54:5e:2a:99:
eb:20:48:09:5b:3b:ba:50:fc:c8:0b:a4:14:e0:c6:
4b:59:8b:50:3e:00:b6:aa:35:ee:df:84:2e:41:c5:
f0:2a:2b:2a:85:84:d7:aa:45:49:52:0e:1e:a9:50:
77:50:9d:4d:20:38:8b:2b:87:38:e6:49:8e:15:ca:
59:6c:ca:ed:f3:15:ba:99:fc:6b:09:be:7e:4d:b3:
b9:c9:c8:09:a1:a9:85:0a:9b:b1:5a:7d:d5:24:f6:
53:e1:bc:03:cd:09:fd:f8:53:15:86:92:25:98:5b:
41:25:b6:a7:45:bf:40:f2:eb:fa:0e:f9:26:c1:6b:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:0F:0B:5C:50:8C:14:44:BB:B0:A2:64:FF:26:F1:88:83:74:07
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/j0sPC1xQjBREu7CiZP8m8YiDdAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0/22
Signature Algorithm: sha256WithRSAEncryption
47:24:56:8d:69:ec:96:b2:24:67:ae:e9:fd:39:13:75:58:75:
7c:5e:68:65:46:85:cc:bf:1f:c0:a0:e6:45:69:7b:3b:89:b8:
59:df:bd:06:3a:93:1b:51:1e:ce:01:a2:f6:43:b1:69:aa:7a:
f9:98:e1:ab:c7:f0:4e:a3:c8:c7:14:19:d7:1b:2a:9a:63:69:
da:2f:fa:90:e0:9e:61:fb:0f:30:c8:69:d7:a5:80:94:1b:48:
b0:a1:b1:75:dd:ef:9d:94:a2:31:ac:d6:e5:62:85:a0:c4:8e:
33:ba:eb:7d:e8:6b:c2:dd:cf:4c:8c:4b:04:0a:7e:45:cf:55:
c2:48:09:59:b5:1c:41:4e:19:23:ad:2d:bf:f7:24:13:4a:25:
d7:99:4f:64:b7:63:20:68:86:42:e1:ce:db:ea:f6:2f:eb:4d:
b8:02:c2:69:da:92:42:87:19:79:4a:96:2f:b7:1e:b5:6c:9d:
51:b7:a3:76:cf:b2:14:33:36:68:38:af:6b:1a:86:29:dd:54:
f2:f6:a6:65:9a:06:15:a8:03:b6:23:72:db:54:ff:d7:9d:b6:
c7:1b:d1:0f:87:13:c9:10:20:9f:d3:9a:65:fe:81:50:5c:f8:
18:4f:32:21:97:ca:5a:f6:65:e2:a4:34:4a:3c:b3:33:94:bd:
9f:6e:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:37 2024 by rpki-client on console-ams.rpki-client.org