Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/fYvVcT-ei6kW2LnSPeSJDCMhxLk.roa
File: fYvVcT-ei6kW2LnSPeSJDCMhxLk.roa (raw, json)
Hash identifier: 2A6KEdrk4heftvZjCiSeRLAJawZW3SgQQXj8ZjeS5us=
Subject key identifier: 7D:8B:D5:71:3F:9E:8B:A9:16:D8:B9:D2:3D:E4:89:0C:23:21:C4:B9
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01856BEEC6C5AEC9C20FF8CF48013FF17044
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/fYvVcT-ei6kW2LnSPeSJDCMhxLk.roa
Signing time: Sun 01 Jan 2023 06:04:48 +0000
ROA not before: Sun 01 Jan 2023 06:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.19.15.0/24 maxlen: 24
185.19.12.0/24 maxlen: 24
185.19.13.0/24 maxlen: 24
185.19.14.0/24 maxlen: 24
185.192.157.0/24 maxlen: 24
185.192.158.0/24 maxlen: 24
185.192.159.0/24 maxlen: 24
185.192.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c6:c5:ae:c9:c2:0f:f8:cf:48:01:3f:f1:70:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jan 1 06:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d8bd5713f9e8ba916d8b9d23de4890c2321c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:f3:de:cc:3e:24:09:13:bb:01:df:ad:ef:
2c:d6:aa:40:86:eb:3a:8b:c4:76:0f:35:c8:36:90:
fe:8a:27:40:f6:1e:d3:0a:fb:4a:97:14:f2:20:84:
e9:ac:eb:fb:e6:99:a0:58:51:de:22:39:4b:59:0a:
ea:d3:b2:8d:42:ec:fb:46:47:9a:4b:bc:10:ca:1e:
bb:99:6a:1f:1e:c5:cb:2b:b9:9e:c9:86:1a:d8:dc:
b9:8f:f3:03:f1:3c:48:7e:ba:7e:2d:40:a3:8b:d3:
74:8f:e8:40:d6:6e:07:af:fd:34:0f:f4:f8:6f:ca:
e3:cb:12:5c:a0:a0:b4:4d:e3:97:d0:73:51:15:e7:
d8:44:58:5b:c9:1b:21:33:94:15:30:8b:fc:2e:ab:
50:58:7c:48:e9:78:a3:d1:dd:93:da:55:cd:4f:6b:
ac:f4:d7:45:a6:44:2b:20:42:16:13:ac:89:bd:4b:
7d:75:52:0b:c2:78:0f:ae:6f:db:54:53:2e:0c:78:
61:40:c3:62:bd:5f:7c:ed:f0:7b:98:08:78:73:7b:
a6:f9:4a:3a:90:c2:02:9a:b2:9c:57:fa:2d:12:ef:
dc:51:d6:62:30:0f:9b:55:c3:d4:11:6e:00:28:b5:
99:77:a7:1b:a3:7f:26:2c:02:4a:b4:6c:8f:82:6e:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:D5:71:3F:9E:8B:A9:16:D8:B9:D2:3D:E4:89:0C:23:21:C4:B9
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/fYvVcT-ei6kW2LnSPeSJDCMhxLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.12.0/22
185.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c5:ea:c3:f5:58:cc:f3:13:aa:bf:ba:e9:dc:ed:c8:31:62:
cf:02:98:32:3a:a8:22:6c:cb:f9:c3:de:bd:2a:19:e5:f3:6b:
97:32:fd:fd:b9:39:ba:d0:92:5e:eb:33:50:80:b4:d2:1c:db:
a4:55:55:9b:a4:c8:5d:e6:23:6f:7c:e5:44:54:22:bb:4c:49:
2a:f3:de:e0:a6:0e:37:ca:37:26:92:9c:56:7f:6d:ba:a0:72:
9f:73:92:5b:10:5f:f6:8b:41:0a:70:32:24:b2:4b:4b:1e:5c:
06:3f:f0:b8:b2:98:a8:a8:c5:1b:89:ab:48:c3:f8:7c:df:18:
14:ba:a6:02:90:6b:1c:58:1a:df:3c:66:d6:0f:1e:44:50:9b:
a8:02:72:8b:2f:03:40:fc:9d:f0:8e:b7:67:ff:cd:93:91:9e:
1c:ed:8e:58:12:f5:4a:44:e6:5a:79:b8:34:1f:6b:05:4f:a4:
ca:ff:93:a7:4b:45:c1:de:c3:e6:76:ae:1d:58:74:b0:17:25:
2f:19:53:0e:78:96:fb:29:4c:90:91:d2:71:d2:ae:cc:ae:7c:
ab:08:1d:ba:4c:1c:d1:64:aa:08:f1:45:3a:5f:6f:7f:44:d8:
c4:f7:4d:28:bc:cb:d3:2c:0b:e2:ec:eb:96:70:d1:56:00:4b:
c5:f0:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:41 2024 by rpki-client on console-ams.rpki-client.org