Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9i5HaggQFAK_bV-SohgRyaBCgkE.roa
File: 9i5HaggQFAK_bV-SohgRyaBCgkE.roa (raw, json)
Hash identifier: X0DXmozc/ENuX5JoAMNNR51jy8FKzlsMXNayp848sHw=
Subject key identifier: F6:2E:47:6A:08:10:14:02:BF:6D:5F:92:A2:18:11:C9:A0:42:82:41
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C0A8EFB15423E8A783CAC0874CE7
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9i5HaggQFAK_bV-SohgRyaBCgkE.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56466
IP address blocks: 185.141.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c0:a8:ef:b1:54:23:e8:a7:83:ca:c0:87:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f62e476a08101402bf6d5f92a21811c9a0428241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:5a:b7:fb:bf:91:97:54:72:54:6c:94:a2:
0a:0a:7f:71:f0:c2:d4:d8:57:bf:d2:19:f8:58:ad:
2a:22:ee:6c:7c:af:c8:f1:2a:a8:74:29:96:64:7f:
d9:23:af:74:08:f0:cf:a1:be:7b:d4:8c:76:a0:19:
cd:fb:38:47:46:e3:a9:14:d2:32:e1:ba:08:1d:13:
fc:59:bd:3e:0a:e0:be:13:25:0e:99:ee:8b:ce:cb:
fd:44:16:c9:73:cc:43:15:f8:36:93:a0:99:ba:43:
09:6f:07:62:ff:c7:a6:1e:14:a0:30:e0:41:59:bb:
ba:38:52:cf:87:8a:18:5b:b9:73:8a:6d:5f:c3:03:
f4:78:fb:9d:9f:5a:9e:16:48:92:fb:4c:35:1b:63:
49:50:b0:ff:64:ee:e7:17:e6:a4:3a:64:d7:45:81:
c1:59:34:f3:7b:b0:67:b5:39:7e:8d:3f:6e:80:4b:
f7:6c:3c:73:1e:a4:af:3c:c0:01:3f:0c:43:8d:11:
ee:10:04:e2:4a:ed:46:27:9b:2f:ae:be:ea:00:49:
19:73:8a:6a:ec:a7:8f:81:a9:a7:33:92:3e:c2:9e:
8f:95:40:ae:bb:b4:52:7b:cf:50:f5:75:c6:a7:71:
01:ef:2f:5c:f3:d1:1a:00:00:d1:5b:76:82:1a:d7:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:47:6A:08:10:14:02:BF:6D:5F:92:A2:18:11:C9:A0:42:82:41
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9i5HaggQFAK_bV-SohgRyaBCgkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b1:34:5d:c8:05:07:9e:8e:81:bd:12:ac:3a:55:06:9a:8a:
10:23:86:2e:f5:57:2a:2f:2d:83:a3:34:df:4b:5d:f5:d7:b5:
0b:dd:5b:1b:6e:ba:18:f1:3a:15:37:7a:78:d6:58:91:22:24:
16:9f:32:51:e8:35:d4:cc:83:2a:66:05:4d:53:4b:29:3d:1b:
b9:db:ce:48:58:88:0f:63:50:32:72:63:f7:bc:fe:30:42:37:
97:1e:95:be:8a:bd:b9:4d:1b:2d:db:ee:94:27:e1:57:a5:fb:
be:fa:ec:59:5c:eb:d4:30:70:c1:d4:52:ca:2b:0f:00:0f:51:
c6:3f:b9:71:a1:47:f4:c0:7b:58:84:45:97:8e:52:a9:e3:eb:
57:64:c3:5e:b1:a9:f4:02:92:72:d7:4f:8a:40:e7:a2:41:dd:
70:1b:a7:82:3d:cb:97:13:a6:49:e0:cc:ec:f3:4c:9f:66:8f:
fe:87:b3:b3:c7:73:94:27:89:75:16:28:23:ed:c3:f8:fd:e5:
a9:a5:51:e8:9f:bd:fe:6d:0e:71:91:2b:be:3a:7c:74:10:fa:
6f:18:06:82:2f:35:33:5b:34:ea:64:76:83:d9:0d:e9:16:64:
c4:e9:5a:23:09:f0:3a:99:6f:17:9d:00:1c:6b:7f:02:4f:7e:
e5:d9:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org