Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/41tZq9yj4Rj6JhotNdHCOs7Rwu8.roa
File: 41tZq9yj4Rj6JhotNdHCOs7Rwu8.roa (raw, json)
Hash identifier: 6jgBQ1JAf+EfYd5V09DvRZhoOGfdc++hkklNhZWyiN8=
Subject key identifier: E3:5B:59:AB:DC:A3:E1:18:FA:26:1A:2D:35:D1:C2:3A:CE:D1:C2:EF
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 01856DEF63DB884B791288489CF30F8B88C7
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/41tZq9yj4Rj6JhotNdHCOs7Rwu8.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208689
IP address blocks: 185.92.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:63:db:88:4b:79:12:88:48:9c:f3:0f:8b:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e35b59abdca3e118fa261a2d35d1c23aced1c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:a5:da:20:be:d3:1c:b5:7a:2b:4e:24:e0:
1d:b1:31:a2:79:cf:1f:d1:44:17:c8:95:0c:bf:a4:
65:7c:d9:d7:d9:9d:fe:ac:d8:aa:e6:11:d3:78:b6:
5c:9b:54:fd:fe:ef:8d:45:39:22:cf:01:32:03:17:
3b:de:74:69:9e:54:0d:7a:97:ca:bd:54:ce:5a:dc:
fc:45:61:83:d1:9d:8d:04:cb:3e:4d:93:bc:5f:30:
e0:72:85:b5:94:bd:f6:f6:b1:9d:2f:08:2a:8f:0f:
cf:1f:61:79:fd:93:14:7f:d2:ba:6e:f8:fa:ec:38:
9d:82:34:0b:b3:45:aa:43:c0:ea:f5:30:1c:70:53:
49:79:49:e8:61:5f:e8:ed:0a:37:b4:5d:11:1e:89:
ce:12:9c:b6:6d:f9:62:6a:7f:b3:c5:55:2d:de:42:
4b:9d:96:4d:5d:76:14:e1:07:78:9a:88:23:41:4b:
7c:6c:85:33:d3:29:c9:69:d2:d9:d4:85:26:49:3b:
b5:6d:37:27:91:1c:41:ce:33:3d:de:d1:2b:30:63:
32:28:f1:d8:30:0d:3e:e1:a4:0b:7b:f5:04:bb:14:
87:a9:5c:07:e5:0e:8e:a1:48:85:e9:4a:1c:3a:6e:
d4:02:83:7a:98:17:98:37:e3:37:45:46:27:83:7f:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5B:59:AB:DC:A3:E1:18:FA:26:1A:2D:35:D1:C2:3A:CE:D1:C2:EF
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/41tZq9yj4Rj6JhotNdHCOs7Rwu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.103.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c6:33:17:f0:38:f2:7f:c7:a0:22:dc:61:7f:e2:f4:31:5a:
2c:4c:1a:bb:d0:60:65:2e:86:91:34:ed:92:73:b4:97:bc:fe:
b7:2b:b7:b6:b5:78:d8:65:3b:32:c2:c3:0e:b5:f1:0d:7b:e7:
8f:cf:ef:c7:e5:5f:55:8f:4b:a4:37:0f:f6:1e:a1:ba:86:48:
fa:1d:20:f0:f1:86:8a:ec:01:f8:5a:70:a4:fe:d1:ce:03:3b:
8f:4c:f5:56:5a:77:87:87:c4:ea:8d:78:9a:2a:7b:03:68:c8:
62:69:bf:31:88:9b:cb:0a:0f:6f:e7:2a:07:4d:4e:96:8a:72:
fd:96:f0:74:3b:c3:73:4c:c6:bf:e3:9a:ae:d0:02:0e:d6:2c:
ab:06:98:a3:fb:71:91:57:af:96:a7:85:c6:4a:8d:0e:14:d8:
be:39:1b:ef:05:a8:ab:5a:29:d5:e3:bc:7d:c3:68:30:d2:74:
6e:cb:70:f2:87:d1:bf:7b:df:6e:a8:e4:5a:7b:7a:36:94:17:
05:61:a4:15:b4:4a:95:b3:8d:73:35:df:90:01:51:bc:71:67:
9d:53:9b:13:2d:64:42:e1:70:5b:ba:74:c9:f0:49:f9:f8:67:
c9:6c:d7:e1:14:ca:9a:18:4a:ce:f1:8f:74:eb:61:6c:63:41:
98:b4:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org