Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/jDOVEM-5I0uBStf2aVTIB3s3BSo.roa
File: jDOVEM-5I0uBStf2aVTIB3s3BSo.roa (raw, json)
Hash identifier: +cOICvN/KltPc9geaF40PECncccTpnCa99lmr4eCnQY=
Subject key identifier: 8C:33:95:10:CF:B9:23:4B:81:4A:D7:F6:69:54:C8:07:7B:37:05:2A
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 0185711E46F05A4CA7FCE870B4FA67D6A54F
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/jDOVEM-5I0uBStf2aVTIB3s3BSo.roa
Signing time: Mon 02 Jan 2023 06:14:47 +0000
ROA not before: Mon 02 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206037
IP address blocks: 185.14.176.0/24 maxlen: 24
185.14.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:46:f0:5a:4c:a7:fc:e8:70:b4:fa:67:d6:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c339510cfb9234b814ad7f66954c8077b37052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:0c:63:be:68:03:54:2a:f2:5a:43:7c:93:
bb:81:de:8a:aa:06:d4:1e:cc:60:46:65:3d:66:83:
af:c3:b7:38:aa:52:05:a7:12:1b:0f:fc:07:16:b2:
75:d9:58:56:2c:22:a6:9f:1d:69:64:d1:7e:57:e6:
a2:c4:db:11:eb:39:fb:75:d8:31:9b:fa:03:3e:7e:
bc:7a:b5:1e:9d:3a:22:fa:ad:d6:62:92:42:85:d5:
50:28:a2:82:45:b2:2c:bd:98:78:f1:18:44:a2:30:
73:f1:fc:f8:a8:71:ca:9e:43:a2:28:1e:c2:28:99:
82:d3:6b:52:55:32:af:a2:63:0b:bf:42:03:48:df:
79:71:fd:42:1d:23:3b:e4:40:00:02:6b:1a:84:9f:
1e:a9:84:fc:a2:e2:bf:77:9b:db:6c:86:fb:f4:6d:
64:cc:7c:d8:00:f9:25:92:40:57:3b:63:95:c2:f5:
0c:c6:6b:c0:d7:71:ab:e3:1c:bc:98:62:ac:a2:28:
0f:36:37:05:a8:c7:fc:a8:cc:3f:e0:0b:b7:32:42:
8a:11:42:9f:87:4e:c3:c5:56:c1:78:fb:e4:0b:1f:
e4:75:18:8d:12:d7:49:66:37:a5:82:ea:21:74:c7:
3b:7c:cd:fc:74:f3:2b:aa:05:3c:94:1a:bd:75:be:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:95:10:CF:B9:23:4B:81:4A:D7:F6:69:54:C8:07:7B:37:05:2A
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/jDOVEM-5I0uBStf2aVTIB3s3BSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.176.0/24
185.14.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:66:39:82:57:0e:26:23:06:ab:fd:7c:28:81:74:86:20:18:
64:30:91:96:d2:aa:95:b9:d9:28:16:6e:db:e5:15:ac:eb:16:
cb:9e:c2:aa:89:5c:e6:f6:8d:e5:d3:56:db:98:9d:6a:de:a9:
84:3c:ce:ab:70:e0:81:4a:f2:da:94:21:2c:8d:56:eb:51:a2:
7d:7c:12:64:3a:9e:8a:b5:e4:7e:c3:21:c8:68:60:bd:c4:89:
c7:d5:cc:55:f9:d9:39:71:1c:d0:d1:cf:7b:7b:d5:e8:86:d5:
4e:42:be:de:bf:fb:c5:0e:08:28:df:ff:17:a0:a0:6d:52:e8:
a5:67:e5:d2:16:b9:79:a9:61:dd:14:6e:87:9f:05:45:c0:8d:
f7:73:4b:eb:8d:3e:08:a9:7d:46:3c:48:92:e6:86:54:a6:cf:
98:1a:3a:02:eb:93:2f:4f:1d:c3:c5:aa:1b:50:60:0a:87:14:
7c:05:fa:45:1a:d4:d8:c6:be:f1:38:d5:6c:56:9a:6a:5b:ec:
0c:a7:78:17:b7:26:ad:2a:4f:3f:45:97:23:cf:d1:d1:54:15:
2b:64:e7:cc:5a:d2:e7:ed:30:57:32:e5:eb:47:95:a6:db:7a:
71:c1:6c:be:c7:e4:d3:63:fe:e5:8f:18:93:a6:bd:62:d1:bc:
d0:5a:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org