Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/X-EbXlYwFpKCas2Y_18X6Rs308w.roa
File: X-EbXlYwFpKCas2Y_18X6Rs308w.roa (raw, json)
Hash identifier: Nv1ijdOVCRvyeIpIQs233biWVm7HoHYd59elZGamb4w=
Subject key identifier: 5F:E1:1B:5E:56:30:16:92:82:6A:CD:98:FF:5F:17:E9:1B:37:D3:CC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B8457EAEB1BDFE3BACD48514AB6577794
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/X-EbXlYwFpKCas2Y_18X6Rs308w.roa
Signing time: Tue 31 Oct 2023 06:07:16 +0000
ROA not before: Tue 31 Oct 2023 06:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41219
IP address blocks: 185.101.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:57:ea:eb:1b:df:e3:ba:cd:48:51:4a:b6:57:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 31 06:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fe11b5e56301692826acd98ff5f17e91b37d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:a2:2f:9f:b6:e2:69:0d:f6:d3:9b:d3:4b:
f0:af:8f:24:e4:35:95:4c:23:1f:ee:57:26:b8:de:
f5:11:b3:44:34:6a:67:0d:75:0f:7f:ce:32:32:e1:
1d:d6:f4:57:9a:92:d8:0d:62:62:b8:45:bd:d3:7a:
21:fd:ca:85:59:fd:86:99:c1:9f:91:9d:4d:1f:eb:
95:9a:21:d9:66:87:88:dd:c7:3c:78:ab:1b:77:80:
13:f1:e1:09:65:c2:43:d3:1f:66:8b:1b:8c:4e:02:
d7:c2:fa:de:d3:60:d3:1a:30:dc:8f:35:25:54:0d:
3f:bd:4d:60:47:d5:43:b6:7d:69:40:89:a3:82:2d:
0f:7b:fe:57:85:f5:09:77:3b:99:54:75:62:d9:89:
b6:19:55:20:71:c8:cb:75:d8:d9:bc:ab:4b:2f:2a:
74:7e:cb:e1:e7:9a:30:39:20:2e:cb:c4:03:47:6b:
e1:cb:9b:37:59:f5:ca:64:5e:86:93:da:84:c9:e8:
c7:6d:aa:a8:bd:b2:b9:5c:71:52:85:4d:c9:fb:60:
fb:de:3e:67:60:ec:ef:3d:4b:0c:1b:6b:51:2f:f2:
89:b5:b0:49:8f:15:6c:4a:db:43:8d:2f:06:2e:88:
f7:ea:ba:a7:da:e6:2b:b4:be:5d:3d:aa:7e:45:8a:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:1B:5E:56:30:16:92:82:6A:CD:98:FF:5F:17:E9:1B:37:D3:CC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/X-EbXlYwFpKCas2Y_18X6Rs308w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9a:1c:45:0c:4b:53:45:4a:b5:b3:01:43:ad:ad:26:79:c9:
61:d4:5f:b2:4e:be:d0:67:24:1a:cf:3f:38:3b:c3:d1:9f:df:
58:5f:e9:e8:1b:8f:54:2c:22:5c:75:87:0a:f4:bf:d8:ed:b1:
0f:e0:18:3c:43:9c:97:00:ba:6f:d3:ec:55:99:c9:71:dd:a5:
bf:e6:96:ad:3d:9c:dd:d5:62:dd:75:be:f7:75:6c:db:9c:40:
53:d1:8a:44:cb:7c:13:50:a4:8a:28:cd:df:60:2c:66:e6:48:
f4:74:86:28:18:17:4d:77:12:b3:53:1f:5c:95:90:a7:5d:47:
10:0c:9f:a2:6d:ab:de:9a:55:f9:65:6c:77:f0:46:b8:6b:2c:
96:9e:3d:a6:c3:e2:ea:10:10:33:c0:dd:e6:bd:26:77:4f:77:
35:91:14:d0:a3:87:80:1f:50:08:76:ee:bd:f7:6d:9a:53:b9:
fc:4f:3f:65:db:2e:e3:87:e1:7d:6d:73:0b:c6:41:97:3d:d5:
3d:ae:ea:8f:27:1e:e4:dd:2b:b0:f4:0e:77:b2:a3:9c:08:23:
78:a2:48:f0:88:9a:f8:55:7b:cc:0f:77:52:5d:11:9a:c7:8a:
93:6a:2c:69:e9:3a:5d:16:4d:a0:ad:1e:3d:f7:b3:2f:fc:da:
73:80:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 09:46:22 2023 by rpki-client on console-fra.rpki-client.org