Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/Prb-FERkG0pD6GBFl0SR0K_ugsM.roa
File: Prb-FERkG0pD6GBFl0SR0K_ugsM.roa (raw, json)
Hash identifier: SxXKg8u1aGUvmzg5xcr+vcR/3Cbk/5nLHAU/ZyjWH6w=
Subject key identifier: 3E:B6:FE:14:44:64:1B:4A:43:E8:60:45:97:44:91:D0:AF:EE:82:C3
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 0185711E4331AF5E1B99931EEF984DB062FF
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/Prb-FERkG0pD6GBFl0SR0K_ugsM.roa
Signing time: Mon 02 Jan 2023 06:14:46 +0000
ROA not before: Mon 02 Jan 2023 06:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16347
IP address blocks: 185.14.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:43:31:af:5e:1b:99:93:1e:ef:98:4d:b0:62:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 06:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eb6fe1444641b4a43e86045974491d0afee82c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:0b:fb:7d:fc:13:de:2c:9c:b9:ed:c2:41:
35:48:68:ab:f1:9d:e9:72:58:8f:d9:dc:d3:ef:06:
9b:98:c7:b0:f5:15:1b:24:d2:19:8e:f5:e6:e7:b6:
af:f5:da:36:6d:34:14:08:8f:b2:6e:80:8a:c4:c6:
87:46:79:13:32:1f:8b:c9:92:36:ec:83:78:cb:cc:
8f:b1:3d:7b:52:a2:46:dc:41:92:6a:df:5a:22:ec:
c9:2c:81:37:b4:a7:55:92:f9:83:33:ea:7f:31:fc:
6f:ae:15:f1:ac:f0:1d:7a:a7:01:4c:40:d9:de:f1:
0d:6f:f4:1c:51:fc:e4:a9:b2:62:d4:94:4b:c1:7f:
da:fc:bf:fb:95:93:07:8f:83:30:05:df:21:0c:cc:
ed:88:30:bd:ca:b9:9d:07:66:f3:bf:ea:a9:b5:f7:
c6:af:d0:f7:c2:5a:43:62:98:06:36:43:53:d1:ab:
b1:8c:b9:17:3b:60:8b:30:8d:a9:43:fa:16:5e:90:
24:61:74:e8:d8:1d:75:a0:87:1d:e9:12:f9:26:8d:
42:90:d0:35:27:b2:5e:0d:37:8f:08:75:06:88:13:
38:fc:8e:6b:d3:c9:94:22:8e:5a:88:0d:77:8e:8b:
69:08:37:3a:53:69:38:6c:7a:ed:61:05:fe:a8:99:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:FE:14:44:64:1B:4A:43:E8:60:45:97:44:91:D0:AF:EE:82:C3
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/Prb-FERkG0pD6GBFl0SR0K_ugsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5d:00:7d:14:35:04:10:80:55:9e:87:88:49:ac:39:e8:99:
cd:b9:20:64:4f:56:39:ab:ca:72:43:65:d1:29:f0:ef:08:64:
cf:c2:b0:73:5c:ca:a8:5c:3e:13:72:32:3d:c6:c8:87:b0:21:
45:67:90:bd:d3:0e:d0:b2:3e:70:13:cf:56:05:ff:d9:2b:7e:
b1:66:44:c9:2d:0d:c3:b7:b9:27:be:51:d9:03:3f:62:01:4e:
34:e1:aa:df:b4:d5:c6:13:0a:0d:ca:78:e4:03:92:36:81:b1:
8b:cc:0f:06:87:d9:fc:f5:b1:96:38:7e:13:5b:7d:0a:06:e3:
46:8a:63:a5:c0:7f:4e:ba:90:0b:85:c4:5b:6f:38:ff:48:99:
be:62:de:af:66:3b:c2:68:86:06:79:2e:df:18:b7:b1:59:8e:
41:58:e8:51:e5:be:f8:6d:70:f9:bc:db:f6:2b:9f:2e:cf:b7:
ae:1c:5c:4a:57:23:0b:ce:c1:01:a1:91:08:40:0a:e2:4c:cd:
29:d3:13:a9:2e:29:8d:11:1c:ae:42:23:c9:d8:9c:0b:9d:a2:
39:d3:de:ed:4a:c1:eb:79:24:9c:4e:8a:a5:ca:c1:d0:1a:de:
8d:4f:13:58:94:61:d7:3b:cd:6a:f1:df:fd:70:f0:14:49:14:
d0:0b:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org