Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/11Hcv5-YumM42pxanVhqsE2Qr7s.roa
File: 11Hcv5-YumM42pxanVhqsE2Qr7s.roa (raw, json)
Hash identifier: 0EdnKaKtoSf0jDfNdB75nZIzZUAOXnN1k77/CF4UIqs=
Subject key identifier: D7:51:DC:BF:9F:98:BA:63:38:DA:9C:5A:9D:58:6A:B0:4D:90:AF:BB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BC45613C40405644BE6F5744B8DA34146
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/11Hcv5-YumM42pxanVhqsE2Qr7s.roa
Signing time: Sun 12 Nov 2023 16:20:57 +0000
ROA not before: Sun 12 Nov 2023 16:20:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.101.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Dec 2023 08:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c4:56:13:c4:04:05:64:4b:e6:f5:74:4b:8d:a3:41:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 12 16:20:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d751dcbf9f98ba6338da9c5a9d586ab04d90afbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:a3:5d:57:21:3b:a2:e8:d2:12:43:22:c9:
46:02:cb:a0:bc:96:a0:8b:d3:17:3a:16:94:87:d4:
0f:b1:d7:3c:29:6d:ab:73:71:c0:28:f6:9d:62:d5:
ee:2c:a5:a7:5a:51:be:b4:e3:f2:ca:23:b5:4c:0b:
74:c0:63:56:7d:a7:9c:80:eb:55:dc:56:0f:f4:0b:
bd:ed:d1:59:03:48:b0:8d:1d:a2:9b:98:82:b8:ee:
10:30:6b:66:66:c7:c1:37:90:71:a8:46:a8:30:87:
c9:21:08:ba:06:b0:01:3c:f2:13:58:50:a8:3a:4e:
76:2e:ed:20:77:30:0c:b7:8f:a8:9c:13:76:fe:7b:
4d:ee:48:ba:86:93:5e:18:b0:cd:f3:47:ed:8c:16:
30:7f:e1:83:9e:c2:91:0e:2c:85:fa:b7:51:55:20:
58:89:6b:a2:f2:8f:79:3f:ec:da:0f:07:bb:71:57:
17:63:a2:c7:f1:00:7e:0c:36:d9:59:31:db:65:14:
5c:3f:d5:1d:8b:c0:3c:d4:57:26:b7:c5:5b:e1:28:
dc:32:47:8c:7a:11:52:11:10:c7:0c:89:d5:58:03:
bb:8a:3c:e6:4f:5b:77:15:39:c7:a9:c9:c9:96:1c:
d7:d9:01:05:cf:09:05:d0:da:ce:82:b5:27:5e:cc:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:DC:BF:9F:98:BA:63:38:DA:9C:5A:9D:58:6A:B0:4D:90:AF:BB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/11Hcv5-YumM42pxanVhqsE2Qr7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c5:19:4c:55:17:b8:fe:d3:e4:cc:80:b9:50:6e:e0:64:c7:
25:7c:38:95:73:80:1b:c7:53:53:2a:27:2c:5a:a4:72:9c:3d:
d0:62:b6:c0:5e:8c:de:77:97:6d:df:d9:ad:5d:23:a6:de:f0:
56:bf:2c:11:ca:da:f6:48:09:51:44:5e:c0:b4:09:27:38:d5:
12:ed:29:35:69:ee:aa:71:ea:72:66:cc:db:16:ad:68:0e:92:
cb:bb:30:f1:34:7c:94:b7:57:5c:1f:ad:8e:27:6c:a4:bf:7d:
9a:52:bb:ec:e4:c2:67:b7:f3:ee:0a:84:1d:63:35:37:82:79:
ce:34:65:50:a7:94:25:19:8a:fc:44:21:94:d6:44:1c:37:d2:
37:8a:73:d1:60:9c:b6:ec:c8:cb:e6:ff:fb:b3:b8:74:53:9d:
40:ce:89:c9:e3:4c:e5:fb:bc:3f:79:3c:7b:41:47:ca:df:ee:
51:8c:b5:32:ef:0d:8e:ea:34:93:50:09:2b:bb:56:46:e4:6e:
c3:dd:b3:13:13:19:79:8c:a3:80:4e:f0:87:be:85:2b:e5:53:
ef:cf:25:5d:4f:d1:82:6a:06:05:9f:84:71:f5:6f:1c:42:5a:
8f:c8:d5:7d:06:56:8e:7e:86:32:6e:89:15:9e:63:22:0d:f6:
b4:ea:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org