Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/csdGhczuzIcWjGTH1LCUr3Y1ijs.roa
File: csdGhczuzIcWjGTH1LCUr3Y1ijs.roa (raw, json)
Hash identifier: ZMd6AVQTRiJFqPuctOLIw6JlHEj1g2EYy+I/euy6Xto=
Subject key identifier: 72:C7:46:85:CC:EE:CC:87:16:8C:64:C7:D4:B0:94:AF:76:35:8A:3B
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C416EBB9FBE19E1FD184F496820CC9A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/csdGhczuzIcWjGTH1LCUr3Y1ijs.roa
Signing time: Sun 01 Jan 2023 07:35:05 +0000
ROA not before: Sun 01 Jan 2023 07:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 194.5.98.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
185.244.26.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.99.0/24 maxlen: 24
87.237.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:6e:bb:9f:be:19:e1:fd:18:4f:49:68:20:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c74685cceecc87168c64c7d4b094af76358a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:61:55:4e:d7:86:7e:b2:f6:f0:27:c8:09:
6a:ce:45:67:eb:4b:9e:40:8a:92:7e:95:43:a4:52:
e0:fd:9d:3c:ad:6e:4d:7a:65:10:e1:08:b8:48:73:
d5:c9:e6:ee:da:af:68:2e:9f:c8:08:ec:1f:07:5d:
4f:79:0d:b6:92:d1:aa:18:41:69:11:27:92:13:cb:
43:c5:1e:c9:76:2c:15:de:3a:39:33:4a:4c:b4:a7:
55:4b:f7:5e:8a:cc:05:c5:67:9e:2b:a1:26:fa:e4:
5e:7e:75:28:d1:2f:e3:e9:b4:45:d9:43:33:a7:11:
57:fe:de:28:58:62:12:8d:e6:1c:fd:5d:bb:34:f8:
a6:1b:3e:42:5d:34:ce:26:7d:73:6f:74:00:4f:8c:
33:28:37:63:c6:bf:8b:ea:01:e8:48:00:aa:0c:84:
34:1a:22:1e:c2:da:f6:9b:dc:b1:97:89:ee:0e:02:
f1:ee:96:75:6a:44:f1:ea:fa:56:62:6e:d6:10:27:
f9:ca:e9:d5:54:92:82:b2:98:d1:6b:53:fd:6e:27:
83:8f:25:3b:03:ec:e3:b0:65:1c:8c:6d:0d:5c:02:
84:a1:08:a4:b2:6c:42:48:f6:f5:85:41:86:40:83:
9e:90:91:c1:e3:4b:06:b9:d4:9e:e4:ac:cb:13:12:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:46:85:CC:EE:CC:87:16:8C:64:C7:D4:B0:94:AF:76:35:8A:3B
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/csdGhczuzIcWjGTH1LCUr3Y1ijs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
185.244.26.0/24
185.244.31.0/24
194.5.97.0-194.5.99.255
Signature Algorithm: sha256WithRSAEncryption
5e:96:d8:e6:15:50:46:94:df:06:a5:21:a6:43:aa:08:39:9f:
be:27:78:10:08:10:a4:e6:d3:b1:b7:93:e7:fb:68:fa:ab:98:
70:1f:55:d8:5a:72:f2:49:87:b8:b3:7a:6a:1b:8b:04:e7:e5:
c5:85:83:c7:df:65:18:d7:29:33:48:77:2b:cf:c1:73:57:96:
95:eb:6f:ac:12:38:af:52:a3:81:ab:dd:3d:4f:a2:5e:61:34:
0d:d2:3a:64:17:96:64:6d:c1:a8:ec:02:24:96:3c:82:4f:75:
c0:29:a0:94:65:4c:82:4b:20:12:ce:cb:92:d4:ba:42:6c:d2:
ec:8b:19:22:58:e4:b8:d6:4e:b1:6a:fc:cc:60:ff:6e:49:0e:
53:ae:02:82:d4:46:32:ed:93:4f:60:61:d9:2c:c3:9f:ad:8f:
2c:72:f8:71:bd:be:e8:53:74:fd:ce:c9:5b:2d:99:d5:24:c4:
9b:1d:ad:fe:a2:7c:3f:0a:4a:11:0b:03:e7:77:5d:e9:d7:3c:
3e:da:6c:71:2d:f5:2f:05:d6:08:c0:f7:44:cf:ea:fa:27:f3:
01:e5:c0:c8:48:a5:9e:68:19:4f:0f:d4:61:1d:9d:8d:2f:ce:
60:cb:10:c1:3c:fb:b4:b0:7c:24:4e:28:14:f1:a4:ad:a6:96:
c4:da:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-ams.rpki-client.org