Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/yAWMPqs6cx70c62dQ7BgUxGzXK8.roa
File: yAWMPqs6cx70c62dQ7BgUxGzXK8.roa (raw, json)
Hash identifier: YwUkUHc39sDKehwdbQzwB1Ez7CaudTiNJn1gRvFuBIA=
Subject key identifier: C8:05:8C:3E:AB:3A:73:1E:F4:73:AD:9D:43:B0:60:53:11:B3:5C:AF
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 0186D56BBDBC09791C901F4B7FFCDBBF8F47
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/yAWMPqs6cx70c62dQ7BgUxGzXK8.roa
Signing time: Sun 12 Mar 2023 10:44:13 +0000
ROA not before: Sun 12 Mar 2023 10:44:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44966
IP address blocks: 185.84.226.0/24 maxlen: 27
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:6b:bd:bc:09:79:1c:90:1f:4b:7f:fc:db:bf:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Mar 12 10:44:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8058c3eab3a731ef473ad9d43b0605311b35caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:e6:ba:fb:c8:3a:7f:49:8f:75:6e:a0:72:
9c:18:1f:20:85:95:ad:00:66:15:c7:c8:5d:d2:31:
0a:96:cb:71:35:0a:5c:ee:7e:5a:0a:73:a7:e8:86:
8a:52:27:20:0e:b0:17:44:de:2a:38:ab:82:e5:42:
13:85:1b:89:e3:4b:8f:ac:3c:39:90:f1:d5:b7:90:
ea:91:e5:27:cb:5f:02:26:58:5c:ad:55:1b:7d:ae:
30:2d:9a:e2:a2:29:f8:12:1e:bd:06:bb:bb:f2:5d:
e7:5c:15:50:e2:78:4a:22:43:f6:c2:cf:19:cf:57:
82:42:56:7b:a4:13:73:32:72:a3:6c:e9:92:ef:f7:
21:2f:24:ab:83:ab:78:c3:8e:45:62:d9:d0:b2:9a:
82:37:a7:36:c8:15:6f:4e:13:54:a1:8b:06:9b:50:
ea:c6:cc:97:cf:73:3f:db:7b:10:97:4b:09:cb:39:
1c:2b:aa:9e:d3:b5:53:be:70:74:21:7b:b7:66:87:
ab:59:4c:a9:95:6f:61:10:4d:58:f9:bf:9b:bd:25:
55:d3:07:63:c3:68:6b:65:f1:5b:41:ee:61:93:ed:
b4:78:08:b0:27:1c:49:9a:b3:7c:5d:44:35:4e:1d:
25:e0:81:c4:51:fc:2a:d7:98:1f:30:66:93:d8:1c:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:8C:3E:AB:3A:73:1E:F4:73:AD:9D:43:B0:60:53:11:B3:5C:AF
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/yAWMPqs6cx70c62dQ7BgUxGzXK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.226.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0e:de:f9:d4:a3:82:bc:20:91:45:22:a8:9c:a6:d4:14:db:
d0:04:f6:3f:0c:de:99:3e:73:6e:c6:02:8e:d7:e0:00:d7:5c:
f0:ae:1b:f1:5a:d8:29:63:e0:68:bc:15:de:1f:bc:de:c1:bc:
0c:64:a6:a1:83:40:ce:09:bd:b1:f7:dd:4b:4d:74:32:a9:f5:
42:a5:f8:eb:4a:45:a3:b7:60:40:67:8c:10:b8:15:8d:21:c9:
0c:10:3a:be:a8:b2:d1:75:9c:55:4d:31:80:d4:4d:46:68:2d:
17:1a:c1:44:17:18:85:29:78:8a:5b:b1:b1:c7:e7:cf:a9:0c:
d8:44:f6:e7:d9:4c:0f:13:23:99:b9:cc:3c:26:9d:58:aa:ea:
ec:71:99:ae:54:a1:61:f5:2e:f6:0f:50:31:6d:75:ba:62:28:
cc:17:d0:cb:38:76:85:f6:47:7e:77:00:ea:0c:a4:15:f0:80:
2e:6d:ba:21:b2:42:2f:11:9b:4d:9c:aa:a2:ff:d6:d9:90:48:
ef:8a:10:2b:8b:a7:bc:5f:da:a3:61:47:42:24:17:aa:85:f8:
f1:aa:ed:4f:81:81:d2:7b:5f:89:6d:7d:7f:e5:26:6b:b4:73:
89:9a:77:69:38:bd:2e:91:cd:23:d4:09:43:d8:78:e2:d5:b7:
b1:67:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:22 2024 by rpki-client on console-ams.rpki-client.org