Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/n7PUNRquq4mwPA3qW8fN6Sfy_kM.roa
File: n7PUNRquq4mwPA3qW8fN6Sfy_kM.roa (raw, json)
Hash identifier: 0O1NSZiA4YivDKbgLLINVEY81H3cqo9NlqLv/EUyfno=
Subject key identifier: 9F:B3:D4:35:1A:AE:AB:89:B0:3C:0D:EA:5B:C7:CD:E9:27:F2:FE:43
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BED9E858F8B76F8B5D9EB9B6A254754A3
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/n7PUNRquq4mwPA3qW8fN6Sfy_kM.roa
Signing time: Mon 20 Nov 2023 16:44:30 +0000
ROA not before: Mon 20 Nov 2023 16:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203787
IP address blocks: 185.30.109.0/24 maxlen: 24
185.30.110.0/24 maxlen: 24
185.30.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:9e:85:8f:8b:76:f8:b5:d9:eb:9b:6a:25:47:54:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 20 16:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb3d4351aaeab89b03c0dea5bc7cde927f2fe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:b6:1c:a9:4d:e5:b5:a0:8f:0a:e3:a6:89:
77:50:f9:70:a5:d7:c6:60:72:8b:87:c4:fc:80:a8:
31:24:dd:30:da:98:68:95:3a:e4:ed:91:d5:94:77:
54:fa:a3:6d:3a:b8:10:1a:7c:67:93:21:c6:d9:c1:
1c:2c:1b:ea:2a:73:4d:36:dd:2d:66:9d:05:fd:92:
f8:37:55:bc:17:19:96:6a:a7:d3:6d:b8:f3:e7:c5:
35:a4:e9:b1:f1:6e:7c:a7:35:c4:61:45:ec:67:f0:
0c:0a:49:a0:12:d9:75:9a:4c:8f:76:3c:57:da:3a:
01:48:a2:20:4c:39:dd:c3:59:58:ef:85:7e:bf:34:
e8:1e:18:aa:96:1b:52:a8:2e:56:25:85:97:78:b8:
e6:f8:6d:b1:d0:e0:99:d9:0f:bc:55:ea:17:ab:31:
87:29:96:08:2e:e5:ac:67:00:ec:c2:c7:7e:f5:39:
87:60:3b:86:1c:bf:aa:16:bd:ed:29:fe:5e:f6:68:
92:79:87:67:39:0d:fd:44:ad:b8:48:04:8f:a3:85:
5f:fe:54:1a:33:52:13:13:e9:13:2d:92:5f:a2:df:
29:0c:e8:9b:da:1f:47:71:39:f6:89:c1:fa:90:4f:
e2:4a:1a:73:5b:7d:6c:5c:0a:ab:63:26:11:7c:ea:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:D4:35:1A:AE:AB:89:B0:3C:0D:EA:5B:C7:CD:E9:27:F2:FE:43
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/n7PUNRquq4mwPA3qW8fN6Sfy_kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0-185.30.110.255
Signature Algorithm: sha256WithRSAEncryption
94:2b:9c:60:34:1e:74:19:d1:2f:a0:91:2b:91:3c:44:e6:89:
cc:44:00:46:cd:1f:9f:a4:3f:6f:84:15:4d:1c:1a:f5:70:c3:
df:fa:b7:ad:8e:ec:04:c8:84:ba:d2:be:76:85:b6:e9:39:f8:
40:e6:ce:af:94:c2:6a:21:c5:f6:7d:30:b4:22:aa:2e:c5:59:
f9:68:8c:9d:c1:f2:45:7f:0e:af:9c:59:04:6b:8e:06:28:eb:
98:3e:3a:d1:02:44:55:c0:46:3f:18:0e:5b:b7:ba:72:ef:5b:
f6:a2:0b:2a:06:fa:fa:1a:47:35:28:ed:6a:76:be:89:eb:e0:
b1:1a:ec:26:f2:2e:d9:24:43:8a:c7:0e:86:a7:d0:85:e6:52:
6e:21:f4:b1:50:a4:51:26:2d:25:20:3e:9a:ec:d1:5c:32:bb:
ef:68:97:9a:23:82:f7:36:e5:db:8f:ef:ee:1a:5b:a8:a5:60:
63:4e:49:ab:f0:53:3c:4a:b0:c1:fd:00:bb:10:98:1c:eb:ed:
47:10:d3:13:42:89:9c:fb:e1:57:d3:ea:5a:8b:36:a8:17:be:
56:1d:00:ec:a4:98:e4:9c:5e:71:6c:dc:f7:d3:89:d2:0b:e7:
28:b4:38:ad:b7:d0:52:b6:33:1b:d8:cf:32:74:9a:8d:58:d4:
62:a8:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 08:52:18 2023 by rpki-client on console-fra.rpki-client.org