Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/btKhXfs7JrBwqps3cTgoIy0AeVs.roa
File: btKhXfs7JrBwqps3cTgoIy0AeVs.roa (raw, json)
Hash identifier: mJzEp+sUB2GiXBelnicaxAwPlI6q6tJlSjBYVRaO89M=
Subject key identifier: 6E:D2:A1:5D:FB:3B:26:B0:70:AA:9B:37:71:38:28:23:2D:00:79:5B
Certificate issuer: /CN=2334daba8118cb41ab76cd421104fcc674c381b1
Certificate serial: 018BB5B4A76BF94A6A7DAE35ADDA562F8ECA
Authority key identifier: 23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/btKhXfs7JrBwqps3cTgoIy0AeVs.roa
Signing time: Thu 09 Nov 2023 20:09:57 +0000
ROA not before: Thu 09 Nov 2023 20:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48795
IP address blocks: 185.102.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:b4:a7:6b:f9:4a:6a:7d:ae:35:ad:da:56:2f:8e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2334daba8118cb41ab76cd421104fcc674c381b1
Validity
Not Before: Nov 9 20:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ed2a15dfb3b26b070aa9b37713828232d00795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:21:9e:e4:8e:d5:95:75:56:3d:b6:43:23:
16:8b:74:ee:df:4b:f7:a7:fb:3b:3f:86:79:24:bc:
04:0d:dd:f7:31:de:7a:27:22:50:d0:dd:e2:31:d4:
75:6f:25:96:3b:71:a2:7f:6d:a6:f3:97:e6:ce:d0:
f5:74:a0:4b:f7:ed:52:1c:d1:b7:3d:61:8c:10:91:
1d:46:ef:67:54:1b:fb:c1:90:c3:03:95:4b:61:86:
c6:e3:c3:7d:18:3e:79:4c:e6:f2:1f:7e:c6:9e:72:
1b:78:4c:ef:5e:27:46:c5:bb:a7:c5:14:78:33:90:
6f:a8:b8:5a:98:2f:0e:20:67:74:5b:c4:f5:f3:71:
ed:ce:27:b4:5d:50:41:a5:f6:0a:1b:5c:75:ef:3e:
30:cc:52:85:bb:be:77:3c:83:de:86:c9:32:53:05:
dc:fe:28:46:68:ff:39:35:8e:20:ee:09:63:18:19:
54:93:ed:15:aa:a3:e7:6c:d2:13:8f:82:17:12:85:
4e:0b:1c:63:27:e3:e1:cd:fb:2a:80:0e:e3:66:25:
c1:55:64:5d:5b:df:4a:9f:d2:64:50:a0:af:34:ab:
0e:7e:6d:c3:c8:0b:9b:f4:9b:a3:fd:d4:9e:b6:1e:
3b:89:58:be:54:d6:25:17:8c:85:a9:3f:49:33:37:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D2:A1:5D:FB:3B:26:B0:70:AA:9B:37:71:38:28:23:2D:00:79:5B
X509v3 Authority Key Identifier:
keyid:23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/btKhXfs7JrBwqps3cTgoIy0AeVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.84.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2f:f2:ca:26:bf:dd:ac:d1:35:c5:b6:1a:b8:ac:18:8a:3a:
fe:39:de:ff:c3:8e:17:60:84:4a:7f:99:a4:9c:84:3d:16:e8:
fe:11:c0:71:20:e6:5d:09:85:8e:65:44:5c:65:7c:ee:78:05:
0e:d7:65:6d:c9:05:1f:4c:74:be:56:56:1c:d2:eb:ad:f9:0c:
e1:d5:90:c5:f0:9b:aa:22:1e:e0:d1:2b:86:c1:c5:eb:58:e2:
42:bf:de:94:b3:40:f3:8d:8e:f4:18:93:16:50:a9:a0:bc:e8:
28:e8:cc:45:dd:4e:c4:2c:68:de:4e:12:79:21:27:71:3a:17:
82:05:a0:9d:42:12:65:0a:f9:b8:e6:dc:86:88:e2:46:63:44:
af:bf:0c:43:1f:c5:81:b7:17:a7:5a:59:83:ba:63:71:95:35:
70:03:d8:47:8a:b5:8d:13:f1:34:6e:9b:e6:a4:ff:d5:82:79:
20:b0:94:b8:60:88:1d:02:ae:66:4b:0b:63:f0:6d:0f:d5:eb:
e6:e6:da:e1:80:4c:c4:a2:45:a8:e0:5f:1e:b8:1c:f5:ce:fe:
51:c2:ea:c2:bc:2c:3c:3a:05:3b:1b:e3:ad:0b:89:e8:2b:73:
54:14:74:66:8d:11:78:88:a6:27:0c:d8:c7:a6:de:b4:67:cd:
6d:53:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:25 2024 by rpki-client on console-fra.rpki-client.org