Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/2K5xDUvvOrqZ-Lf8Vw5k96Gcjx8.roa
File: 2K5xDUvvOrqZ-Lf8Vw5k96Gcjx8.roa (raw, json)
Hash identifier: YAuDlHMFblL5L/PJwcSLXv/d9rN7nwdyy/RQCw+46G4=
Subject key identifier: D8:AE:71:0D:4B:EF:3A:BA:99:F8:B7:FC:57:0E:64:F7:A1:9C:8F:1F
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 01896CBC4AFCFDAC1C5D8180C49AE2EC2015
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/2K5xDUvvOrqZ-Lf8Vw5k96Gcjx8.roa
Signing time: Wed 19 Jul 2023 06:00:26 +0000
ROA not before: Wed 19 Jul 2023 06:00:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7754
IP address blocks: 185.212.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6c:bc:4a:fc:fd:ac:1c:5d:81:80:c4:9a:e2:ec:20:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jul 19 06:00:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ae710d4bef3aba99f8b7fc570e64f7a19c8f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2c:46:25:e6:03:58:dd:f6:f0:78:32:d3:c3:
45:8b:27:93:98:4c:a4:e5:a5:16:56:02:ae:9f:5a:
e5:fd:14:d8:b3:44:54:3c:34:04:7c:57:3a:17:ac:
d7:0f:cf:17:0e:26:25:52:8e:4a:9b:47:c3:76:06:
04:af:d7:52:59:7d:e2:bd:24:20:1f:5c:70:13:c1:
fe:9c:9b:49:93:95:d8:a5:53:c1:b2:8f:6f:cc:b5:
a9:a9:7a:44:fb:4b:81:9d:8d:a8:89:a0:b2:ec:1b:
14:6b:4c:ca:f2:63:03:d0:e7:a6:f1:54:43:49:fc:
ce:eb:0b:86:86:2e:70:71:78:c7:c3:ea:f7:7d:85:
be:e6:fa:12:f5:74:78:2f:c1:cb:c6:85:f5:2e:ef:
d5:6c:91:a2:a5:17:04:5c:44:01:25:d5:d6:74:17:
0e:d1:96:6a:b0:a4:c9:58:88:f6:ba:bc:a5:0f:a9:
4e:d1:2d:88:08:d7:8b:c8:b0:ff:7b:60:50:98:2c:
97:8f:f2:16:fb:37:42:4e:2d:44:57:3e:80:2c:69:
86:aa:9b:66:66:4c:67:33:5b:2f:1f:58:3f:3e:84:
1f:94:c9:c5:27:15:e0:9f:fb:1e:82:9d:c5:ee:93:
35:3f:b1:1e:f2:86:f2:58:62:c8:01:10:59:8b:16:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:71:0D:4B:EF:3A:BA:99:F8:B7:FC:57:0E:64:F7:A1:9C:8F:1F
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/2K5xDUvvOrqZ-Lf8Vw5k96Gcjx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f3:25:62:bc:cc:d6:e3:bd:66:db:1a:ad:e3:65:48:e4:9d:
8c:c6:98:79:c6:70:a3:5e:39:3a:1e:85:d8:23:4d:90:54:b2:
22:f5:4c:a3:bb:2f:ff:8e:3f:70:8f:5d:73:47:10:a6:0f:c7:
1d:97:7a:56:95:7d:53:a8:e5:96:83:85:61:ef:63:6c:74:d5:
c6:ef:50:4d:a3:de:3b:2b:ad:6f:34:6e:14:54:19:f1:e4:22:
c4:73:21:66:dd:b2:26:f8:6b:54:12:4e:e7:86:5e:de:17:64:
fd:6e:01:05:e4:bd:4a:2a:14:2a:8e:34:f7:86:a7:9d:4d:1d:
2f:a5:b7:32:1c:2c:21:1e:0c:2e:41:f3:3d:42:a7:35:19:29:
d7:98:2b:1a:d5:f9:b8:ca:9e:b8:d6:43:cc:d0:13:4e:6b:c0:
05:e6:67:4b:f9:d9:bf:e9:fb:ba:c5:2e:05:74:a6:6e:6d:cf:
52:24:75:03:37:57:df:1d:75:df:b7:ad:ed:a6:c0:8f:78:49:
f2:2f:84:91:c1:53:9b:6b:1c:32:8b:b3:55:d7:5b:94:1d:aa:
fb:1c:a8:08:80:ab:8a:6e:8e:10:59:9c:a9:42:55:d4:1f:05:
ce:9b:ad:86:68:27:2b:55:3e:82:f4:8c:65:06:5f:73:0e:47:
4d:ae:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:05 2024 by rpki-client on console-ams.rpki-client.org