Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FWNw4OHjv1mSe7_2WjTDAMEQAbE.roa
File: FWNw4OHjv1mSe7_2WjTDAMEQAbE.roa (raw, json)
Hash identifier: +C3mhYLTt1FeqL+JRBl5HLEAjQYoifkKj2Lac+tRyrM=
Subject key identifier: 15:63:70:E0:E1:E3:BF:59:92:7B:BF:F6:5A:34:C3:00:C1:10:01:B1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C26C0E5E5D88EB5B365634DF947E0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FWNw4OHjv1mSe7_2WjTDAMEQAbE.roa
Signing time: Mon 02 Jan 2023 05:54:59 +0000
ROA not before: Mon 02 Jan 2023 05:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57380
IP address blocks: 185.103.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:26:c0:e5:e5:d8:8e:b5:b3:65:63:4d:f9:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156370e0e1e3bf59927bbff65a34c300c11001b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:a9:3d:d5:54:af:ce:ac:05:cf:84:3e:b8:
98:5e:a9:ed:5d:0b:77:dd:44:4d:d1:63:b9:50:af:
7e:bb:d9:ab:b8:47:9f:24:74:16:d5:0a:01:5c:bd:
9c:f5:5a:84:ee:67:d8:af:b0:02:1a:aa:f5:09:1f:
e9:52:c1:35:dc:6a:f2:cb:ef:7d:60:d6:c9:22:bd:
a9:1b:00:a5:33:43:2a:e9:4e:42:9d:e5:dc:2b:10:
95:81:a6:be:2c:40:ad:e5:bb:67:ef:57:94:2c:c8:
5b:f7:5c:bc:33:7f:0d:f3:64:4f:22:81:26:71:8c:
a1:75:9d:8f:f0:a4:b2:6b:b9:a8:74:69:db:23:3a:
31:55:7a:7d:a7:21:e8:90:5d:82:ea:66:4c:66:41:
1e:48:20:83:81:6a:85:5a:30:c1:37:67:f1:dd:bd:
87:ab:c0:a7:c2:b9:fb:01:2d:90:c3:f4:aa:29:db:
c4:03:a6:b2:d4:b5:bd:99:f0:5d:32:52:4a:71:2e:
37:8a:27:d1:ee:f8:73:aa:3b:98:80:50:d6:e8:1e:
ce:a2:79:f0:2a:3a:b7:b5:7f:01:b3:40:be:d4:a2:
fe:bf:fd:36:75:dc:c7:4d:f2:41:ec:7e:c4:b7:4e:
d1:ad:bc:ab:3e:9a:58:28:01:a0:35:e3:f6:d6:39:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:70:E0:E1:E3:BF:59:92:7B:BF:F6:5A:34:C3:00:C1:10:01:B1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FWNw4OHjv1mSe7_2WjTDAMEQAbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:25:71:50:ab:00:4b:6a:4d:e2:67:db:e2:66:35:cd:ea:3b:
41:b6:de:0f:d5:20:a6:c9:24:30:fa:71:29:97:e4:29:33:9e:
bd:5b:aa:2a:8e:61:ba:e0:52:5b:38:7f:c0:25:da:88:89:6f:
34:9a:cf:0c:be:8e:3d:dd:c3:c0:6d:3d:5c:ef:90:4c:50:ea:
0f:e6:d1:d3:28:7a:d5:a3:65:0d:d4:8f:02:9d:38:8b:43:9f:
8a:56:95:e0:44:09:47:20:1d:56:55:4e:3f:dc:27:33:37:89:
a2:5f:b7:df:72:31:58:3f:a6:da:ae:71:93:82:b0:18:ab:46:
05:25:2c:9b:5e:74:75:29:15:dd:f1:a3:bb:1d:97:b2:3f:80:
c5:55:85:d8:12:2d:8c:95:51:af:16:1c:ce:98:76:05:1a:85:
2a:dc:86:49:69:9b:71:4f:7e:46:cc:6a:83:5e:4a:5a:a6:5b:
43:38:3d:b0:bc:64:5f:5a:09:be:b7:80:74:4e:eb:dd:e5:d3:
e9:9f:6d:f5:75:ac:4d:a4:bf:d4:dd:fe:f1:cf:3f:f2:d7:e8:
0a:3b:40:92:36:6b:a0:df:d4:66:c4:02:0b:80:59:b2:1a:85:
31:b5:71:c0:e7:76:f1:13:a5:f9:67:42:be:46:38:97:a1:32:
c9:4d:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:28 2024 by rpki-client on console-fra.rpki-client.org