Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/l05YJKqq88Aj2KCID67a5weAhmg.roa
File: l05YJKqq88Aj2KCID67a5weAhmg.roa (raw, json)
Hash identifier: HdrlP1EL77GOBBow8PFHFvWUKHzx0+ujm/2Gd+6J1pA=
Subject key identifier: 97:4E:58:24:AA:AA:F3:C0:23:D8:A0:88:0F:AE:DA:E7:07:80:86:68
Certificate issuer: /CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Certificate serial: 018C011EBFC044C17A9836C46F35783048AA
Authority key identifier: 04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/l05YJKqq88Aj2KCID67a5weAhmg.roa
Signing time: Fri 24 Nov 2023 11:37:21 +0000
ROA not before: Fri 24 Nov 2023 11:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209858
IP address blocks: 185.186.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:1e:bf:c0:44:c1:7a:98:36:c4:6f:35:78:30:48:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Validity
Not Before: Nov 24 11:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=974e5824aaaaf3c023d8a0880faedae707808668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b8:32:29:57:4a:d2:b4:9a:14:e3:bf:0f:4c:
7c:d6:f3:cc:7a:36:01:14:00:63:6a:cd:fa:2f:b4:
bf:4f:23:7c:3c:2c:13:0d:6d:ae:69:71:7a:a2:74:
84:b4:e7:7a:f2:8c:3f:38:bd:80:4b:e3:a3:49:f5:
fc:33:23:03:e2:77:e3:09:1a:d7:22:6e:e6:c7:c0:
8b:14:05:40:f4:02:d4:6e:5e:67:4c:72:7c:ab:16:
87:5d:a6:4e:ee:04:8c:c1:33:8c:49:c2:bb:b4:ad:
2e:a9:71:b2:9f:5c:59:c5:32:80:ac:76:55:bb:f7:
a4:b7:40:d4:98:ed:ef:b8:ec:c1:d6:4e:6a:6c:2f:
59:2d:bf:cd:4a:f3:dd:a7:c9:d8:d7:c8:9c:ce:d0:
d8:d8:82:53:ae:31:8f:d1:7f:be:c2:86:6c:d5:48:
51:2c:77:51:e0:a1:65:36:c9:fb:34:f8:0c:56:d9:
e6:8f:b3:c5:1a:ea:10:a7:ed:fc:a4:16:a3:36:d1:
85:7f:f8:79:25:01:67:1a:87:78:dc:dc:67:bf:b0:
b3:a2:c9:0e:57:7f:0a:67:d0:9d:3d:19:31:84:03:
d1:2e:17:e1:c8:6c:f5:58:ca:72:61:16:3f:2d:70:
56:b3:0e:e3:a5:73:a4:84:74:1c:dc:89:2a:fe:aa:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:58:24:AA:AA:F3:C0:23:D8:A0:88:0F:AE:DA:E7:07:80:86:68
X509v3 Authority Key Identifier:
keyid:04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/l05YJKqq88Aj2KCID67a5weAhmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/BB8uyOJ2wX12-Vx41KkqK4fvJUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:17:79:7b:76:1e:2c:8a:12:54:09:27:a2:49:83:23:83:a9:
7c:0b:15:7d:59:bf:8e:77:53:f1:85:5e:d4:a8:bf:67:ba:d7:
38:5d:95:ee:22:f4:ba:08:df:d1:9c:df:74:96:3f:8f:23:dc:
eb:6f:51:01:dc:5f:60:21:d5:73:1b:dd:ae:2e:2b:8a:f5:1b:
0a:9c:86:56:45:81:ba:12:51:c5:7b:c5:4e:3d:10:81:df:4a:
c5:6f:c5:05:31:34:1a:b2:de:1f:79:e8:39:33:19:6a:9e:a9:
fc:24:ff:80:63:33:2a:cd:6e:95:20:be:91:47:62:90:ed:f7:
2a:99:14:c4:7c:78:7c:28:75:33:22:f9:d3:47:02:97:0a:a4:
1b:78:17:65:3c:ae:73:d6:70:c0:d4:85:17:d2:d1:88:d8:24:
a8:b8:ce:b0:8b:8e:bd:79:d2:dc:b8:45:7a:5f:ed:78:6e:db:
6d:f3:3a:98:1b:ca:4c:a2:6f:27:82:17:6e:70:5d:13:01:f7:
ed:05:f1:40:5e:e0:1f:8f:f7:7e:10:be:e6:f9:94:f2:c2:74:
13:36:b4:87:6f:49:e0:49:eb:92:74:51:03:73:c9:e1:f6:c1:
3d:f6:84:54:3c:4f:62:cb:08:fa:a5:1c:24:12:56:7e:98:d5:
6a:ca:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 13:31:34 2023 by rpki-client on console-fra.rpki-client.org