Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/9nt7gLtt1CoRbJHZtUEyZOUYoJw.roa
File: 9nt7gLtt1CoRbJHZtUEyZOUYoJw.roa (raw, json)
Hash identifier: Wb3C6YDog96kSsbNIlTwnwS2uB6rVhJ/9BbgiJjJT74=
Subject key identifier: F6:7B:7B:80:BB:6D:D4:2A:11:6C:91:D9:B5:41:32:64:E5:18:A0:9C
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 01856BDCA034769F13FB4103E79B9184F71C
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/9nt7gLtt1CoRbJHZtUEyZOUYoJw.roa
Signing time: Sun 01 Jan 2023 05:44:59 +0000
ROA not before: Sun 01 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199391
IP address blocks: 185.38.200.0/24 maxlen: 24
185.38.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a0:34:76:9f:13:fb:41:03:e7:9b:91:84:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Jan 1 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67b7b80bb6dd42a116c91d9b5413264e518a09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:e5:b9:c3:cf:c1:68:09:8c:33:06:4e:8c:
fb:6c:2c:e9:58:df:27:da:ca:16:16:46:ff:0b:c1:
4b:be:cc:52:75:f2:30:65:7b:46:4d:92:6e:d1:58:
32:b2:3b:84:ef:ad:46:87:41:ca:23:97:52:e0:c0:
44:bb:86:16:6e:32:da:e1:a7:67:fe:2a:f2:68:37:
45:45:7b:04:d1:18:c8:31:bc:6d:dc:14:c4:85:ad:
4e:0d:b0:4b:e3:15:18:73:6a:32:7c:90:bb:0a:6d:
37:8d:7e:57:8c:91:0c:2d:6e:f3:06:b1:79:9b:25:
c3:7b:6c:2c:c3:9d:0e:af:ca:8a:f6:97:50:83:a1:
b4:19:7b:9c:58:58:1d:1d:4b:7b:db:eb:3a:a4:ad:
90:f1:5a:77:66:46:5b:37:4a:d9:9b:a3:92:d1:bd:
5c:dc:f6:49:bc:5a:f4:cd:a5:1f:41:dc:c9:d7:81:
e4:36:99:61:ae:43:20:69:9c:c4:62:3d:00:14:0b:
85:38:57:1b:52:7c:9f:16:78:0f:9a:e4:ec:01:df:
f1:63:1d:d8:7d:87:60:5a:81:69:65:48:c0:54:31:
3f:29:97:46:45:05:e8:26:22:2e:b0:0e:40:65:f8:
60:c4:14:1f:fb:33:03:6b:6b:d0:af:1d:47:dc:34:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:7B:80:BB:6D:D4:2A:11:6C:91:D9:B5:41:32:64:E5:18:A0:9C
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/9nt7gLtt1CoRbJHZtUEyZOUYoJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.200.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:2b:cf:a8:96:49:31:11:fc:2b:5c:f6:1e:17:4f:bc:73:0b:
c6:5e:22:c5:85:af:6e:52:c7:25:ec:96:e7:85:09:4f:c0:df:
5b:de:6d:6d:bb:0c:2e:38:ab:e8:06:f2:bb:09:c4:cd:53:64:
2c:1f:00:88:3f:58:43:81:92:62:90:3d:0e:35:58:fc:10:ff:
24:b1:ac:d9:8c:75:91:7c:be:70:85:41:eb:30:7f:50:d3:f5:
b7:ec:c5:3a:0b:9a:36:cc:97:98:d5:6b:f9:73:73:6d:c2:40:
aa:6f:6d:2c:28:2b:47:7c:fd:38:2e:c3:da:cd:48:54:d0:f2:
eb:01:fd:d0:15:b7:b2:71:34:f0:4c:28:03:fd:c3:17:c1:bc:
05:c1:44:94:71:67:58:70:87:76:b4:1b:9e:56:d9:00:f4:a6:
7e:08:cb:12:98:b2:90:4d:ca:1b:e1:2b:d0:80:19:af:90:e0:
a8:de:82:d9:08:61:7c:60:eb:cd:12:e8:a5:02:c7:85:66:0f:
18:28:9b:1e:c8:ed:f2:f9:81:c7:91:40:16:c6:4e:c6:36:23:
bb:bf:a9:2f:76:0d:3f:8f:50:e9:a4:28:94:63:a9:7e:5b:d2:
25:66:80:b0:5e:e4:54:ab:cb:3e:e8:7b:6b:f9:2f:e6:c3:27:
13:26:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:18 2024 by rpki-client on console-ams.rpki-client.org