Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Rq6Y0uUuwLcHwFIyPN52t8VjZfM.roa
File: Rq6Y0uUuwLcHwFIyPN52t8VjZfM.roa (raw, json)
Hash identifier: kq9Xp9RUjV4jwI/y68uMgZnLoSzVPbZ2fKVyuyVYIQ8=
Subject key identifier: 46:AE:98:D2:E5:2E:C0:B7:07:C0:52:32:3C:DE:76:B7:C5:63:65:F3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C487C79FEC436DDB8BD2A978E45C8AD3C
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Rq6Y0uUuwLcHwFIyPN52t8VjZfM.roa
Signing time: Fri 08 Dec 2023 08:12:46 +0000
ROA not before: Fri 08 Dec 2023 08:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 185.101.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:7c:79:fe:c4:36:dd:b8:bd:2a:97:8e:45:c8:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 8 08:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46ae98d2e52ec0b707c052323cde76b7c56365f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:5e:62:98:87:26:f0:6d:28:da:d7:b4:f4:
c0:33:6b:cc:50:2f:7d:a5:71:89:8d:3a:3c:c6:7d:
67:d5:c1:8b:77:55:d3:1e:2f:f6:e6:e2:49:40:3c:
0e:61:3f:d2:1f:b3:6d:c3:73:83:12:59:68:c0:0c:
32:63:d6:ad:b6:b9:fd:70:8c:88:5c:ca:91:8a:ac:
43:a9:a8:2d:1d:23:4f:e2:cd:e3:18:dd:c5:28:ad:
a3:00:72:00:14:98:c9:0d:2b:48:83:b6:8a:f2:20:
ca:c7:fc:16:4e:86:9b:0d:eb:39:13:cd:83:f8:a2:
8e:27:da:09:87:b2:a4:62:eb:c3:7b:10:9b:8a:b0:
63:73:18:cf:1b:c1:d4:ff:94:ee:c5:9b:16:70:94:
6c:ff:f1:43:93:06:16:33:d0:b5:34:56:d9:95:1f:
43:b6:67:ba:2a:67:6a:af:a4:eb:6d:93:8e:8d:32:
60:91:25:77:d9:f5:54:77:f0:e0:d0:83:34:9a:73:
80:f1:12:2e:3a:7b:57:7a:a6:b0:bd:25:ea:cc:e9:
98:e2:e1:ed:80:a1:43:5e:3d:53:c5:bd:67:7f:a6:
6c:5d:fb:a3:33:40:85:74:05:8f:e7:cd:bb:5f:8c:
00:6b:d5:40:22:e0:bc:06:40:87:49:69:ef:72:51:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:98:D2:E5:2E:C0:B7:07:C0:52:32:3C:DE:76:B7:C5:63:65:F3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Rq6Y0uUuwLcHwFIyPN52t8VjZfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b7:88:76:db:cd:16:7e:44:37:9f:07:ec:1c:b4:28:72:dc:
cd:b9:a5:0c:a3:86:42:38:bb:67:92:9c:aa:74:43:0a:4c:14:
1b:b4:ad:4a:36:92:42:10:9e:1e:d1:6e:ed:1c:e4:4f:74:51:
1b:20:34:fb:4c:74:86:4d:48:78:51:29:6c:b4:db:c5:55:be:
e9:5d:b5:0e:4d:43:64:5a:c1:16:d7:48:8f:d9:48:ac:9f:bb:
45:18:ec:39:14:8c:a8:2b:a1:20:f0:3c:dc:c8:4d:86:03:85:
70:07:3a:e6:59:96:e9:14:98:ec:ae:2e:1f:4f:27:3c:f3:e7:
db:db:e1:29:20:0c:8f:8a:90:40:fc:96:1a:c5:85:9d:93:5e:
ec:83:2f:87:6d:15:f9:ef:71:51:5e:56:70:26:7d:45:7d:15:
1c:76:33:a2:a8:af:2b:ec:c1:4f:54:ff:4e:74:f4:62:dc:a1:
5f:de:2e:68:6f:8a:df:80:d2:3b:4b:a8:f5:ab:84:6a:16:83:
9d:db:36:73:90:40:ef:d2:68:27:da:7c:52:a5:38:17:5e:25:
50:f1:42:fb:db:6e:8b:49:90:b6:a4:82:91:a7:68:31:73:61:
5b:bb:e6:5b:36:24:29:e2:72:71:6b:cb:b8:08:bb:ae:8f:63:
c6:b7:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 08:08:52 2023 by rpki-client on console-fra.rpki-client.org