Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/1-d7vzI6ZZwJ4xJ5s0veBufJjhmY.roa
File: 1-d7vzI6ZZwJ4xJ5s0veBufJjhmY.roa (raw, json)
Hash identifier: D2KlymR+ZVHTF9kQJjg1jnfQ2We6aQO2I16bqHivmmg=
Subject key identifier: F9:DE:EF:CC:8E:99:67:02:78:C4:9E:6C:D2:F7:81:B9:F2:63:86:66
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 0185725582182B709E8A26825C1A0ECE5619
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/1-d7vzI6ZZwJ4xJ5s0veBufJjhmY.roa
Signing time: Mon 02 Jan 2023 11:54:44 +0000
ROA not before: Mon 02 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39444
IP address blocks: 185.204.106.0/24 maxlen: 24
46.30.200.0/21 maxlen: 24
185.204.104.0/22 maxlen: 24
2a03:2680::/32 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:82:18:2b:70:9e:8a:26:82:5c:1a:0e:ce:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Jan 2 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9deefcc8e99670278c49e6cd2f781b9f2638666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:4c:ea:4a:ed:6c:51:d4:b7:b5:2f:26:2c:
10:79:0a:16:8c:f1:e8:b8:4a:72:b4:1d:e2:d6:e5:
53:76:97:d9:62:ab:c5:dd:cf:b1:df:78:b5:5c:c1:
e9:1c:d0:ce:88:66:99:27:f2:47:8c:07:cc:11:04:
f9:78:c2:fd:e6:a7:bd:3b:dc:1a:66:e4:d4:39:c6:
1f:f1:4b:fb:b5:34:5f:65:08:87:bf:46:a3:ff:ef:
42:46:8c:27:21:e0:95:ea:65:d0:3c:0b:41:82:cd:
0d:b7:c6:02:cf:72:fc:89:7d:b6:40:d6:40:d4:b9:
fb:8e:e5:9b:30:7e:77:1b:90:55:9c:78:52:1b:16:
b7:06:08:1f:45:b7:b1:bf:c2:62:87:ec:b5:28:62:
4a:ec:8b:85:a0:07:32:eb:af:85:d5:c1:b8:4a:d6:
cd:e8:b8:dc:4a:8d:18:53:94:ed:9d:48:76:20:75:
14:59:95:c4:a1:a8:6d:bd:d1:9b:52:d8:4d:64:1b:
e0:ad:02:61:68:4f:c7:b0:18:6a:c1:53:2f:25:78:
48:3c:5b:67:4c:8d:99:ef:25:5d:d6:a0:d9:de:3b:
13:96:bc:14:f6:be:e0:a6:23:7c:ed:83:cc:cb:74:
3a:1a:d5:e2:71:e3:51:8c:75:b5:97:b1:20:13:c1:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:EF:CC:8E:99:67:02:78:C4:9E:6C:D2:F7:81:B9:F2:63:86:66
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/1-d7vzI6ZZwJ4xJ5s0veBufJjhmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.200.0/21
185.204.104.0/22
IPv6:
2a03:2680::/32
Signature Algorithm: sha256WithRSAEncryption
48:70:73:7f:fc:6f:68:05:83:fa:68:16:50:bc:c3:70:0f:4e:
ee:20:6e:a9:c2:ce:65:f7:02:d1:b4:f5:e2:19:2e:1d:1d:b8:
6c:36:af:6a:09:22:84:49:c0:21:f3:cb:ef:d3:ca:65:67:9b:
1a:2b:e9:23:7f:ab:aa:1d:fe:0a:73:3a:08:ca:c9:a2:22:40:
fb:3c:f6:73:fc:e4:4a:91:9c:41:5f:5f:fd:73:5c:5c:c8:73:
9d:09:5e:6b:16:93:d5:dd:54:61:b7:9c:87:eb:72:b0:aa:19:
68:55:7c:17:39:86:d9:9f:bc:10:6d:3b:d5:43:bc:49:c9:26:
56:83:49:5d:8d:bd:7a:ad:ec:20:45:4c:dd:c1:4e:f5:87:95:
cf:e7:11:8d:c2:2a:83:7a:b2:51:04:3a:4a:e3:fd:bb:6d:98:
e5:14:e6:45:95:bd:ec:cb:09:33:ee:f0:7d:41:f7:53:8f:01:
a2:bf:e8:05:38:a5:78:63:3d:b1:73:4f:23:3c:28:e8:54:de:
4c:71:82:2a:bc:26:2d:d7:c0:0b:79:12:50:fd:8f:b5:d5:a8:
14:03:d0:22:68:3d:c6:04:be:b2:2a:03:44:b7:3f:d4:18:f4:
be:3f:ad:29:63:18:bb:49:f0:6d:b4:84:25:02:9c:7b:f8:5f:
36:f4:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:01 2024 by rpki-client on console.sobornost.net