Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/uTZLM7GnkXhA-1r0QRswR9CilPI.roa
File: uTZLM7GnkXhA-1r0QRswR9CilPI.roa (raw, json)
Hash identifier: emjRsGgnDQflvtEqy9j4iN4XH7I4tcptoU2riitBKSA=
Subject key identifier: B9:36:4B:33:B1:A7:91:78:40:FB:5A:F4:41:1B:30:47:D0:A2:94:F2
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 01856E81EEF8F29B911A68D43DFF66F7B72C
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/uTZLM7GnkXhA-1r0QRswR9CilPI.roa
Signing time: Sun 01 Jan 2023 18:04:47 +0000
ROA not before: Sun 01 Jan 2023 18:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 185.230.183.0/24 maxlen: 24
185.230.182.0/24 maxlen: 24
185.230.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:ee:f8:f2:9b:91:1a:68:d4:3d:ff:66:f7:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jan 1 18:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9364b33b1a7917840fb5af4411b3047d0a294f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:81:f5:fb:7f:55:a3:0d:08:23:2d:88:e5:
80:cb:ba:63:66:b2:1e:db:94:4c:e8:d0:82:d2:76:
43:e7:9e:08:32:b9:8c:9c:e8:ee:aa:ea:b9:1b:bf:
f8:56:cd:fd:51:c9:50:84:af:e6:1d:6f:d8:8e:ec:
99:59:90:24:53:dc:47:dc:b7:32:ff:db:98:1a:53:
05:53:9d:d4:35:00:00:c4:5f:65:e9:57:4f:55:bb:
8a:75:0f:5f:15:3d:1c:c3:ce:ed:bd:af:63:5e:95:
95:46:a4:89:8b:bf:68:66:da:76:ca:8d:fa:21:de:
6e:33:c8:23:69:59:dc:1d:82:44:69:11:e7:45:9b:
66:79:fa:47:5f:e5:b1:1e:27:7d:94:b6:0e:2b:57:
45:07:5d:79:71:fd:1b:d8:a5:7d:59:83:c1:bf:d1:
59:01:f0:ef:f2:ea:75:f4:69:7d:f3:88:ee:dd:46:
5c:f3:11:9b:56:6d:89:1a:73:07:2c:45:74:cd:0a:
53:34:93:78:fb:fe:d2:4e:6b:32:42:e4:0e:9d:58:
fe:23:2b:0f:5b:cc:f7:dc:31:e9:66:85:fc:76:70:
61:4e:30:17:25:34:80:6e:6e:34:71:41:d0:71:35:
b2:92:4e:66:63:fe:2a:53:64:01:dc:21:bf:54:13:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:4B:33:B1:A7:91:78:40:FB:5A:F4:41:1B:30:47:D0:A2:94:F2
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/uTZLM7GnkXhA-1r0QRswR9CilPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.181.0-185.230.183.255
Signature Algorithm: sha256WithRSAEncryption
40:82:cf:67:0c:b6:c6:70:9c:c0:bf:2f:4c:a9:e5:a9:df:c2:
91:97:bc:e6:1c:a8:19:e0:bb:7d:e3:75:82:dd:db:f6:83:0f:
52:7e:36:e8:ff:8b:e8:79:a7:d1:a8:c2:2a:c4:c1:97:d3:19:
b9:60:df:5a:81:56:cf:6e:90:b8:1e:3b:a1:64:56:64:4b:64:
06:dd:c4:fe:d4:08:e8:90:98:b6:e2:43:74:66:0d:14:14:f8:
22:4a:e2:22:97:5d:bd:28:b0:94:1b:99:de:17:69:39:dc:ec:
a7:16:fc:40:04:c9:e6:c6:ea:0c:b7:23:02:b2:fc:c7:5c:c6:
46:7c:8a:d3:a6:59:4f:fc:de:2a:e7:44:73:9a:a0:07:76:72:
05:14:30:0b:5d:7f:3e:92:46:e1:2f:04:30:65:a8:84:c0:f5:
5e:13:3d:4c:08:87:62:c5:a5:d8:66:d4:d5:44:7c:3a:0b:0e:
b0:37:b9:f8:29:88:b5:96:93:d7:fc:48:60:50:a5:b5:dd:ac:
b1:99:5d:bd:b7:12:86:11:2f:08:3c:c3:7d:cf:fe:5b:9a:8b:
1b:bc:17:5f:8b:02:e2:52:e6:31:27:77:ee:c1:63:7d:b8:4a:
ce:91:3f:39:b4:7e:01:15:8c:31:fd:a6:40:76:84:f5:9f:1d:
19:8d:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:43 2024 by rpki-client on console-ams.rpki-client.org