Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/_xGdMu99vVrFnY2N49ozbWu_c18.roa
File: _xGdMu99vVrFnY2N49ozbWu_c18.roa (raw, json)
Hash identifier: RjztcrHaR/w7BRzVOG6U7pvsenBSKiES0RN6cBv1F+g=
Subject key identifier: FF:11:9D:32:EF:7D:BD:5A:C5:9D:8D:8D:E3:DA:33:6D:6B:BF:73:5F
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 01856BF7E57DAE91B704256F9C1CD4930DD8
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/_xGdMu99vVrFnY2N49ozbWu_c18.roa
Signing time: Sun 01 Jan 2023 06:14:46 +0000
ROA not before: Sun 01 Jan 2023 06:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200602
IP address blocks: 185.54.103.0/24 maxlen: 32
5.63.188.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:e5:7d:ae:91:b7:04:25:6f:9c:1c:d4:93:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Jan 1 06:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff119d32ef7dbd5ac59d8d8de3da336d6bbf735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:20:98:3f:e4:41:bf:a7:56:de:e7:91:ae:
81:c6:48:8e:8d:b5:01:4b:40:6b:8d:de:1b:64:23:
24:33:bb:2e:85:d1:3a:36:0b:da:e3:93:0a:10:ac:
0c:a9:5b:f2:91:3f:b5:47:b1:91:02:95:8b:6a:d5:
72:9c:ca:d4:5e:65:1a:25:4e:82:6b:15:c2:2c:ff:
05:c9:98:b7:58:50:68:29:c7:63:f1:af:9f:b4:30:
e6:e8:6d:52:0c:4d:d3:2e:04:91:62:9f:2b:31:00:
c3:3f:a3:02:91:fe:a1:9f:35:b9:6f:c1:62:c5:a1:
d9:b2:5f:00:ce:6b:6e:9b:a6:08:a2:5e:24:f2:ec:
01:b4:ef:84:2b:19:54:30:8c:25:05:78:46:3b:b2:
20:d8:7d:c3:a0:f9:c6:9e:48:53:3d:7a:73:ee:d1:
5b:a3:ee:45:8b:35:5e:bb:05:21:7b:00:e9:67:59:
95:e5:66:b9:2e:c4:be:30:7f:47:bb:c9:bc:82:ed:
c0:0d:14:10:52:be:1b:41:f2:44:bc:4c:74:7c:ac:
2f:73:29:f7:80:1d:18:1b:09:d0:65:a2:31:e3:b7:
15:94:f7:ed:67:ea:8b:f5:31:3e:c2:54:e7:ca:79:
10:2b:25:35:1a:fa:7b:47:cd:0c:5b:91:e8:6c:ff:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:9D:32:EF:7D:BD:5A:C5:9D:8D:8D:E3:DA:33:6D:6B:BF:73:5F
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/_xGdMu99vVrFnY2N49ozbWu_c18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.188.0/23
185.54.103.0/24
Signature Algorithm: sha256WithRSAEncryption
29:df:48:36:12:47:36:e6:92:c1:73:1f:51:a6:2b:52:b2:1c:
a5:78:1f:f5:59:3d:10:c1:7f:75:17:76:6c:f3:27:6d:91:97:
14:86:cc:bc:84:7b:65:20:83:31:96:7e:8e:53:d2:dc:56:55:
9c:ed:19:e2:c8:57:3b:0a:bb:cf:62:52:43:ae:ef:3f:bb:dd:
b7:d4:2f:68:48:75:58:f4:4f:7d:58:7e:e6:4f:4b:a4:27:b6:
dd:d1:63:62:dc:8b:a1:f1:59:f9:ea:3a:89:35:00:9d:06:22:
c8:dd:7c:b3:a5:ab:eb:bb:bb:38:17:c5:f5:ac:61:1e:0c:ba:
e8:76:13:ee:bf:25:a9:31:5f:8a:9f:0c:11:10:00:0f:c0:71:
3f:3b:84:04:7a:4f:b4:b5:ef:a8:1d:d0:88:56:26:30:3c:ed:
3c:85:1e:a6:8d:ac:8c:02:69:c0:57:94:40:86:fe:41:55:35:
d9:11:00:b1:fa:63:dd:03:45:1b:ec:67:08:e9:7c:b1:7a:eb:
10:62:78:23:6a:5f:9a:c7:aa:f0:53:59:d9:74:41:cd:6e:16:
e8:29:d9:73:b1:20:f2:bd:ed:82:3a:78:98:6b:db:e9:c1:fe:
c3:eb:cf:d8:4b:51:82:8c:d8:ab:27:5c:f0:a8:46:ba:2d:b6:
70:36:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org