Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/k5HeYOftZdcppfqodz53MdXFTB4.roa
File: k5HeYOftZdcppfqodz53MdXFTB4.roa (raw, json)
Hash identifier: NNv0JVt0LQh7yJxVKyv/mZUiAGfbd4NczpptS+S73Zw=
Subject key identifier: 93:91:DE:60:E7:ED:65:D7:29:A5:FA:A8:77:3E:77:31:D5:C5:4C:1E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C29A33B27B9247B04568762A69ED1
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/k5HeYOftZdcppfqodz53MdXFTB4.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198338
IP address blocks: 185.103.254.0/23 maxlen: 23
185.105.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:29:a3:3b:27:b9:24:7b:04:56:87:62:a6:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9391de60e7ed65d729a5faa8773e7731d5c54c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:55:59:09:9a:c7:ae:f6:99:77:d8:33:c0:a3:
f9:08:ce:06:45:f5:72:5b:df:a1:0f:87:d5:02:4b:
5b:c5:04:90:58:68:71:26:f4:8b:ad:39:0e:e1:e6:
17:19:6b:b0:b2:af:0e:59:a9:3c:74:39:69:ef:e3:
d5:8a:5c:0b:96:b9:68:c2:e0:c6:a8:1a:6d:74:fb:
a6:25:da:40:0d:0a:d0:ae:45:e8:c4:22:89:89:68:
ba:c9:9f:78:b9:b5:2b:99:7a:4a:25:00:ae:1a:82:
93:6e:0a:2a:36:21:ff:c9:06:50:92:ac:33:8c:01:
aa:c0:2c:fa:56:70:35:b1:ed:a5:90:f2:2e:04:72:
a5:06:4e:35:a6:cc:3e:9f:f3:b8:55:90:fe:b0:ee:
71:f2:e7:ae:7d:d7:54:73:d0:f0:27:58:a7:db:41:
ad:b5:4e:a1:ad:f5:9d:dc:e8:9c:0e:e5:fd:dd:81:
a9:d7:75:af:5d:e2:6d:6b:be:94:a7:a9:87:b3:6f:
6a:c1:67:fe:90:b7:4b:58:4e:d8:d8:d7:f6:35:4a:
d2:0a:2e:e1:c0:81:32:df:e6:0f:6b:8a:2a:57:5a:
0e:73:64:30:82:85:68:75:fc:ff:3a:3d:10:e0:65:
95:1e:18:14:62:d1:16:bc:4b:6e:83:6f:d4:4f:8e:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:DE:60:E7:ED:65:D7:29:A5:FA:A8:77:3E:77:31:D5:C5:4C:1E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/k5HeYOftZdcppfqodz53MdXFTB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.254.0/23
185.105.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:4f:04:e4:a6:94:84:a6:51:bb:0c:78:46:6b:3f:5c:c2:c3:
6a:b5:1c:0e:a3:2a:0e:3c:a6:dc:6f:6a:25:fd:7a:46:44:48:
cc:32:63:13:89:0a:b7:85:1a:f7:72:05:79:de:1f:e0:c4:7d:
a8:88:f0:a1:51:89:1e:25:c5:fe:69:c5:3c:72:a9:07:ae:51:
8e:91:c3:6b:09:b3:49:24:32:94:e6:f4:16:5e:2c:cf:23:24:
f5:62:74:ba:13:02:f0:f1:6b:47:73:75:36:ce:f8:d5:b5:0b:
bd:8d:bd:1b:8a:65:57:98:4c:f1:5b:e0:90:a2:69:b8:a4:16:
0d:b5:a6:41:35:5a:e7:fb:2b:3e:a6:a3:c4:4c:bb:b5:3d:71:
34:7f:fc:33:10:82:7f:27:5f:3d:48:f0:af:2c:e5:bd:0e:0e:
e5:d6:58:76:83:c4:7f:00:65:6d:4d:fd:43:31:b8:88:06:85:
fe:ee:9e:86:3b:de:e3:a4:1a:1a:f9:41:e6:12:41:ca:28:f7:
19:aa:3d:f3:1c:2b:42:b6:83:ad:f0:fe:2b:01:d7:e2:fe:03:
8c:91:48:fd:ad:70:3c:88:d9:01:27:3e:23:c1:2d:b8:5b:1a:
c1:e1:37:82:fe:66:a3:8d:b8:07:47:ec:8a:a4:6f:bd:55:36:
02:e9:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:28 2024 by rpki-client on console-fra.rpki-client.org