Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/yjET2cdJPFJdjUDodGjWbmC4t-w.roa
File: yjET2cdJPFJdjUDodGjWbmC4t-w.roa (raw, json)
Hash identifier: hH0uMl/pL48MqP4XDd0f8xsmV00ynR4Hk0XJzLRl+ao=
Subject key identifier: CA:31:13:D9:C7:49:3C:52:5D:8D:40:E8:74:68:D6:6E:60:B8:B7:EC
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 01856CCB0C4657123BCDB14371E5247BB6D1
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/yjET2cdJPFJdjUDodGjWbmC4t-w.roa
Signing time: Sun 01 Jan 2023 10:05:24 +0000
ROA not before: Sun 01 Jan 2023 10:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200491
IP address blocks: 185.75.151.0/24 maxlen: 24
2a03:4b27:e000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0c:46:57:12:3b:cd:b1:43:71:e5:24:7b:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 10:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca3113d9c7493c525d8d40e87468d66e60b8b7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:7b:21:69:4e:83:c0:36:7a:9f:6e:35:39:
88:84:e3:82:12:14:71:8c:c8:76:81:d4:52:f0:5e:
f0:e4:cc:1b:6b:15:3c:15:5e:81:cb:21:78:04:2b:
33:7c:e8:93:b0:79:f9:f8:dc:0d:2a:78:56:cf:56:
88:6a:1b:c0:9b:94:a9:40:60:36:1f:f8:66:81:1f:
06:8c:b1:2c:aa:f0:c9:f8:47:9f:f1:a1:8b:bd:22:
50:d2:2f:ad:11:d9:91:9b:15:4f:18:c9:99:d2:e9:
29:d3:fa:18:f9:0b:a1:24:c7:d3:c7:7f:b4:56:08:
4c:51:09:88:de:4d:88:f0:1d:80:51:53:d3:fb:7f:
f9:ab:3c:ee:fa:54:0e:a1:3d:21:f0:ff:a9:ca:2d:
c8:95:18:84:a0:39:7d:dc:67:11:98:f0:4b:d8:7b:
27:8d:35:15:16:d9:ad:56:d6:63:e7:98:44:e6:8d:
74:6f:b4:86:e6:c4:71:1d:1a:30:66:da:05:e1:a0:
ee:fe:f2:38:ee:29:e1:8b:c9:73:e2:01:0c:b1:df:
12:95:3c:b6:dd:a8:66:0e:7c:0b:a2:72:5e:a4:01:
d9:e3:13:ce:54:8f:48:af:3e:5a:a6:f1:64:26:c7:
cf:0e:ad:c2:12:e7:50:77:f2:5b:d7:3b:34:c8:f5:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:13:D9:C7:49:3C:52:5D:8D:40:E8:74:68:D6:6E:60:B8:B7:EC
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/yjET2cdJPFJdjUDodGjWbmC4t-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.151.0/24
IPv6:
2a03:4b27:e000::/36
Signature Algorithm: sha256WithRSAEncryption
ae:05:16:7f:a7:6b:71:2f:fe:a3:88:5a:28:9d:ce:b4:54:3e:
69:8f:1f:8a:92:46:12:e2:8d:1e:bb:bc:60:1b:21:b3:c5:28:
f1:f8:7e:19:9e:52:c0:ef:f8:37:72:9b:77:aa:f2:82:02:85:
88:a1:69:2c:42:ec:c8:b4:04:0f:d3:eb:97:fb:d2:f4:be:fd:
b4:56:1e:47:62:e5:bd:6e:6c:31:1d:a3:fb:9f:f8:74:d5:51:
99:0c:bc:05:2f:bc:e7:40:1b:9b:9a:52:2c:86:5b:81:22:14:
b0:72:b1:aa:95:68:fa:6d:d8:7f:6a:b6:3a:6f:48:51:a7:87:
d0:0d:9a:f7:ce:29:36:95:b0:ed:8c:a6:f5:8d:24:1e:c4:9c:
0a:39:1d:49:c1:6e:18:0b:45:b3:a3:51:b9:42:b1:f3:58:13:
58:f6:1f:8f:f2:9e:b3:3f:6b:9c:2c:19:4b:a1:9b:84:44:68:
21:87:52:fe:d3:06:df:14:92:11:82:8c:c2:ef:52:65:a3:fd:
10:0f:c0:d9:52:35:5c:aa:d0:49:11:7d:ef:80:d7:d8:21:82:
d2:cd:6d:95:c9:c7:fa:93:e5:f4:30:0a:6e:15:58:1f:69:27:
f3:13:f0:97:c4:2e:bb:cc:ed:b5:83:84:de:45:5a:02:fb:14:
fc:50:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org