Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/JB6ydLQ2glDkVUgEkmJhctw4wR8.roa
File: JB6ydLQ2glDkVUgEkmJhctw4wR8.roa (raw, json)
Hash identifier: ZSVJJnrtY9Aola4UTG/mBvPdE9cfXGBFx+ojaaloe1Q=
Subject key identifier: 24:1E:B2:74:B4:36:82:50:E4:55:48:04:92:62:61:72:DC:38:C1:1F
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BDDFF5AB4F1438808457A13F4847F2B28
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/JB6ydLQ2glDkVUgEkmJhctw4wR8.roa
Signing time: Fri 17 Nov 2023 15:56:21 +0000
ROA not before: Fri 17 Nov 2023 15:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216172
IP address blocks: 185.30.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:ff:5a:b4:f1:43:88:08:45:7a:13:f4:84:7f:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 17 15:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=241eb274b4368250e455480492626172dc38c11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:4a:35:f7:2c:25:b6:ce:74:5c:59:64:92:
e3:7b:38:9e:ba:bb:d8:3e:f5:3c:3c:e8:cb:cb:4d:
65:68:ec:a5:0c:93:23:7c:88:3c:b0:f1:98:3c:96:
f0:85:7f:a4:fb:22:03:c9:8b:36:82:a3:72:fc:5b:
76:06:ee:ae:06:d6:4c:90:f0:7b:59:6a:88:e4:3d:
e7:1d:3c:5b:1e:9d:54:07:13:9e:c5:79:b6:f3:f6:
e5:e9:92:35:3e:c1:08:d8:c5:a6:99:06:3b:60:67:
30:df:56:3c:ff:eb:94:14:55:6e:0e:99:52:ec:8b:
47:1b:94:20:6c:0b:e3:43:97:8b:fc:f2:86:cf:bf:
68:92:2c:ae:e2:8f:71:7e:6e:43:d2:72:d2:0f:11:
43:4c:dd:89:82:7b:f9:8b:17:19:d0:de:0d:5a:c1:
66:1e:03:e9:85:61:98:6b:de:1a:74:27:e9:81:9c:
83:37:d8:05:fd:2c:23:df:2c:d7:ad:b5:e6:11:a9:
87:b9:36:77:4b:8f:fb:a3:3a:6e:b5:07:6f:5d:93:
61:09:eb:19:5c:79:a6:69:9f:29:35:e4:09:94:c1:
d3:7e:a0:38:b9:72:28:8c:52:6d:c5:a6:c3:90:8d:
75:59:5c:96:d7:61:57:91:f5:c9:b5:6e:d2:7e:0e:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1E:B2:74:B4:36:82:50:E4:55:48:04:92:62:61:72:DC:38:C1:1F
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/JB6ydLQ2glDkVUgEkmJhctw4wR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.109.0/24
Signature Algorithm: sha256WithRSAEncryption
14:de:52:de:9b:46:2f:4b:cd:6b:e1:64:f4:b1:57:bd:dd:72:
5a:10:63:e3:74:d6:f4:e0:45:3b:ca:db:65:ab:55:a3:4c:da:
f5:58:06:c8:4c:90:34:c7:fd:96:68:3d:ab:ee:37:1f:fc:c0:
22:9d:69:b6:29:57:58:2c:96:58:bf:19:de:b7:e8:58:6a:e3:
8d:3b:ef:3d:fb:96:10:0f:e1:41:0a:b0:72:18:a8:14:86:48:
c8:e9:6b:04:d3:5f:e8:02:d3:c2:95:ba:5e:46:69:7a:49:81:
33:d8:36:f1:e0:ea:b4:48:2e:a4:48:c2:fc:c3:32:df:73:51:
13:9d:4b:bf:b1:98:79:f1:dc:a6:21:1d:d6:54:58:aa:42:a7:
1b:d9:d4:0b:1f:ec:9c:0d:65:b3:4c:5a:1e:1c:11:ce:bf:ad:
ee:38:19:76:7c:81:e8:05:cb:a1:1c:15:0d:84:02:82:e8:97:
c2:c5:e4:0e:21:f0:7c:0a:94:da:be:65:0d:41:55:e7:1c:da:
72:4d:45:d0:a5:d6:ee:f3:c4:1d:50:a8:3d:13:6d:db:a1:cd:
a5:be:8c:d3:cb:2b:8c:bf:ba:3a:6f:2d:5f:ac:2a:ed:32:ad:
47:e6:78:09:18:15:74:ff:0b:12:97:24:29:37:b7:0b:7d:31:
3b:b7:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net