Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6Oo190X1JcnzpwwtWPtIZVbopZ0.roa
File: 6Oo190X1JcnzpwwtWPtIZVbopZ0.roa (raw, json)
Hash identifier: WNrPfhucIACeTWa6uRLzj9JyEEHj0niYpxbJTGgu70k=
Subject key identifier: E8:EA:35:F7:45:F5:25:C9:F3:A7:0C:2D:58:FB:48:65:56:E8:A5:9D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3104EE3D2BF4676582FB59DD5215
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6Oo190X1JcnzpwwtWPtIZVbopZ0.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203549
IP address blocks: 185.103.111.0/24 maxlen: 24
185.109.23.0/24 maxlen: 24
185.109.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:31:04:ee:3d:2b:f4:67:65:82:fb:59:dd:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8ea35f745f525c9f3a70c2d58fb486556e8a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:29:f7:7c:75:67:4e:f1:8a:66:40:34:f4:
31:8e:83:73:9c:7c:91:ca:84:7e:c2:6b:72:c4:22:
8e:a4:73:6c:a6:00:ae:57:3c:67:ba:fa:9b:83:7a:
9e:24:fc:63:e8:0e:c7:a7:d6:c2:35:22:23:0a:d0:
ac:bb:92:c3:96:83:da:43:81:6c:4d:1a:e4:1f:e7:
c5:85:d6:6e:d5:db:63:5b:90:d0:5b:e6:2c:83:61:
e6:b9:4b:64:5a:c3:ac:f8:36:a0:be:f4:04:e9:9e:
c0:82:54:e2:4c:a3:87:ba:e1:bb:67:31:72:7c:8f:
a4:1c:6b:10:50:e0:67:74:87:61:dd:91:c1:9a:d9:
b8:09:60:01:c6:e4:fa:f5:ef:67:dd:1a:a7:37:9b:
f3:c1:60:c6:0a:9a:ee:56:7e:f2:25:44:e2:c7:a0:
e3:b7:fb:11:4b:df:40:8d:99:59:37:54:bf:43:55:
1d:f6:d8:38:fe:68:3d:72:ac:27:84:a5:72:0a:9b:
bb:20:31:a6:65:e0:93:f8:85:2e:bb:61:46:09:d0:
c0:aa:4a:26:6d:58:c9:56:d3:8b:4d:4a:b4:e5:93:
7a:2e:ed:4f:e4:45:9d:56:1c:df:4e:b1:2e:38:8d:
b2:7a:f3:6d:cc:fa:a8:c9:87:8a:36:4c:2d:f4:0e:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:35:F7:45:F5:25:C9:F3:A7:0C:2D:58:FB:48:65:56:E8:A5:9D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6Oo190X1JcnzpwwtWPtIZVbopZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.111.0/24
185.109.22.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:db:b6:9d:06:bf:8a:9a:22:57:ff:82:31:03:23:58:27:91:
5f:ad:6e:c0:1f:fd:aa:2f:f4:c8:5f:1c:fd:5e:71:f1:a2:83:
ea:77:04:0a:3d:d9:cb:22:d1:a0:b1:a1:3f:d0:04:96:d7:aa:
2f:8e:bd:16:f8:65:9e:8f:fb:6c:a3:a5:87:0b:f4:7a:09:c6:
3d:89:a3:bd:15:3b:34:4c:e6:a3:40:ea:5c:c1:7d:68:57:d4:
b8:2c:4f:8b:6e:79:2e:70:a7:51:51:3c:55:04:13:65:60:2d:
d7:88:26:45:cb:e3:43:6a:e6:7e:63:f5:cb:22:ad:4f:4e:d7:
f5:29:f0:74:00:33:fb:ae:9a:02:70:f1:51:eb:a1:0c:55:d7:
39:b7:30:76:c7:c8:e5:3b:19:e6:e4:47:be:ce:61:c0:d3:8a:
75:6d:18:bc:a3:07:8d:f4:26:2f:eb:8a:b1:7d:bc:5a:f7:8e:
a4:68:b2:f7:ac:99:ff:dc:34:f0:52:ca:a5:02:4f:e1:68:ca:
dd:1a:8e:b6:03:a6:55:54:45:13:82:83:91:ad:be:75:04:e4:
cc:9b:2f:b6:36:b2:9a:9b:f9:e5:50:92:65:db:79:62:aa:fa:
b7:a3:51:07:86:fa:ca:5e:b6:84:ce:29:df:18:52:86:b6:02:
ac:01:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:23 2024 by rpki-client on console-ams.rpki-client.org