Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/0xMEAwxw0gINp_dz6aex79Vo_Dk.roa
File: 0xMEAwxw0gINp_dz6aex79Vo_Dk.roa (raw, json)
Hash identifier: rB6Pu/tOfgOggaaJFvT6lzsEMRn/rGy3YX1YFcP47qM=
Subject key identifier: D3:13:04:03:0C:70:D2:02:0D:A7:F7:73:E9:A7:B1:EF:D5:68:FC:39
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C1D73ED0A974486B26A466FB49A9
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/0xMEAwxw0gINp_dz6aex79Vo_Dk.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58331
IP address blocks: 185.141.104.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c1:d7:3e:d0:a9:74:48:6b:26:a4:66:fb:49:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d31304030c70d2020da7f773e9a7b1efd568fc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:98:c0:c0:8a:4e:44:f5:f4:e8:af:ff:ca:
c7:9f:78:6e:e7:1e:51:3f:f8:62:07:0c:a9:e6:f9:
c6:da:0b:82:a7:e7:f5:5f:8b:21:6a:b3:d8:55:02:
bf:f1:6b:e6:04:98:ad:0e:52:f0:92:09:2c:c4:8d:
0c:e2:ec:6e:b3:14:49:f8:2f:b2:7e:36:fe:5a:27:
42:9b:48:19:f9:6b:57:fa:9d:7e:98:d5:13:6e:52:
85:07:32:a4:37:0c:b4:95:00:7a:b4:77:41:28:11:
d8:7a:cc:44:80:a2:06:91:3b:7b:d7:5f:94:77:34:
93:b8:fe:61:98:96:9b:bf:8b:ed:5b:dd:93:35:74:
9a:5a:4a:de:8a:db:d6:63:08:57:55:16:14:68:bd:
17:35:5d:25:cf:9c:85:86:a2:fc:2b:32:8a:0d:82:
9f:18:57:0a:65:8a:83:70:e7:0a:21:9e:37:c1:86:
07:17:4b:40:87:10:3d:29:8a:c9:53:21:9c:14:15:
64:29:86:27:76:55:2b:ea:f6:de:f4:f7:e7:7a:3b:
6b:0b:7f:db:58:db:0b:48:59:75:8a:a1:e3:27:02:
b8:71:af:e7:87:86:25:51:7a:ee:80:24:9e:e7:fc:
56:bc:1a:c0:89:40:6c:c8:0a:76:13:bc:27:08:0a:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:04:03:0C:70:D2:02:0D:A7:F7:73:E9:A7:B1:EF:D5:68:FC:39
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/0xMEAwxw0gINp_dz6aex79Vo_Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.104.0/24
185.141.106.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:46:b9:2d:8c:b7:44:68:fb:94:e1:ee:1f:9c:19:51:72:10:
00:a9:77:6c:e8:fb:3f:ca:3b:58:11:e6:12:d2:bc:b8:2e:9e:
fa:02:80:91:d7:41:fa:46:41:26:00:01:bc:7b:3a:95:24:fd:
a7:2c:3a:1a:35:73:65:18:8c:0c:fe:95:ae:e6:c2:ed:e4:07:
30:10:57:6f:e7:db:1c:0c:16:cc:f6:a5:49:02:f1:44:12:ca:
1d:2a:15:eb:26:53:77:ff:d2:7a:16:48:45:20:05:1a:31:33:
fa:d0:d3:20:16:f6:56:48:ce:c5:a3:98:e1:81:ac:9f:7b:c1:
99:a0:13:23:c4:d4:44:81:3d:b8:09:89:96:11:15:9d:73:08:
be:6f:64:c0:a7:07:f0:f2:4e:29:4a:6f:70:0c:24:07:c8:2c:
cb:a8:64:0b:32:23:37:5b:64:b0:f8:90:9d:b4:01:e5:28:4a:
84:58:f2:d8:d9:2d:ee:dc:d4:b9:cf:b1:95:a0:9c:82:41:ce:
c6:b6:b6:e4:54:01:99:4d:59:c8:83:cb:c5:fa:c4:99:c1:54:
de:bb:4f:54:87:79:a8:23:27:44:ac:38:2e:39:40:e3:7d:3b:
67:37:0c:1b:82:b2:3c:2b:b6:8d:ef:21:9d:c9:1e:15:93:de:
dc:99:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org