Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/ytC9PnYs4BTwLgV0FXhHMJSHyrs.roa
File: ytC9PnYs4BTwLgV0FXhHMJSHyrs.roa (raw, json)
Hash identifier: +SQzMR6aEFdSWTembrycmPJeQWfxCzluh+u2Jhnn76o=
Subject key identifier: CA:D0:BD:3E:76:2C:E0:14:F0:2E:05:74:15:78:47:30:94:87:CA:BB
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0185708CCA17FB15EDF730D49E186CF08F82
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/ytC9PnYs4BTwLgV0FXhHMJSHyrs.roa
Signing time: Mon 02 Jan 2023 03:35:53 +0000
ROA not before: Mon 02 Jan 2023 03:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210350
IP address blocks: 185.230.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:ca:17:fb:15:ed:f7:30:d4:9e:18:6c:f0:8f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jan 2 03:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cad0bd3e762ce014f02e0574157847309487cabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:1f:b0:85:d0:3d:e0:2a:8d:b6:cc:01:33:
93:c3:f9:90:94:a6:c4:76:bc:95:ad:e2:57:54:4f:
d2:6f:2d:c1:0f:5c:2a:ab:a6:02:ee:f7:8d:d3:d2:
71:26:45:20:32:3b:f8:55:4a:b2:b0:9a:15:b9:d4:
7e:c1:8f:ca:21:e8:de:15:70:70:df:8b:6b:ad:8d:
0c:69:89:f7:52:99:89:72:90:b2:30:6b:37:e3:12:
18:88:73:29:ff:7e:b0:42:94:3b:43:65:97:89:85:
3e:e8:25:d0:c8:bf:f5:42:0e:3a:e2:64:50:5f:da:
96:a5:19:e6:27:1b:54:b8:32:40:7d:4e:5e:a6:84:
3d:fa:47:aa:dd:5d:90:09:9d:8c:a1:4e:f2:93:dd:
03:07:21:e4:d4:f5:ca:da:09:68:b7:66:8a:96:0b:
66:8a:ea:13:92:c2:d3:05:0f:dc:e9:78:9c:da:e2:
62:1b:a5:8d:be:1b:fe:bc:2e:75:b0:e6:c4:1e:f7:
a4:12:f4:49:89:50:3f:ad:01:2e:92:9b:fd:36:88:
0d:4c:77:a3:63:c3:57:4f:c6:5f:ee:87:86:b0:99:
5f:66:37:0d:be:b3:8d:14:26:ae:11:27:4e:b4:30:
98:d8:00:6c:6f:24:0e:f0:f0:81:7e:93:4f:8b:98:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:BD:3E:76:2C:E0:14:F0:2E:05:74:15:78:47:30:94:87:CA:BB
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/ytC9PnYs4BTwLgV0FXhHMJSHyrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6a:03:77:71:20:9d:4c:23:d3:86:84:da:8e:13:a3:90:51:
83:4f:72:4f:97:7c:1f:56:f8:65:b5:30:ed:da:7f:ee:33:de:
4e:27:05:32:f1:7e:20:31:da:da:8f:76:df:ca:bc:74:57:73:
90:1b:b3:ab:42:f6:c0:05:3c:1c:b7:09:64:03:ac:64:8f:51:
14:29:64:18:78:9a:c0:0d:21:ef:0c:7c:de:37:b8:b4:10:84:
ba:84:c7:1b:de:bd:f7:4c:40:c4:8f:f9:18:82:7e:23:89:4e:
b2:24:54:c4:dd:c2:1d:f2:0c:1c:1c:ee:17:e4:34:f8:67:5a:
58:26:c4:a5:eb:f5:c4:5a:7f:0d:a4:c5:38:fe:14:46:be:69:
59:6f:93:b5:4d:cb:7d:95:61:bb:2f:37:c9:0c:94:f4:27:76:
92:33:00:7a:1a:3f:f6:fb:bf:94:c8:fc:b1:a0:a2:ea:20:c7:
83:4b:3d:23:28:e7:07:56:f8:de:f5:9f:2a:64:ff:a0:e7:2c:
2b:34:9d:77:43:74:50:d8:78:bb:ce:31:11:0f:86:15:e2:c1:
7f:43:62:b2:a6:32:23:a2:e6:a3:e2:8c:cd:a4:84:16:3c:fb:
5b:22:1a:a9:dc:45:52:53:41:e4:52:ad:dd:9e:17:f9:2e:d7:
a1:ef:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:55 2024 by rpki-client on console-ams.rpki-client.org