Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/Ny9YsdRalSDF4CLQdP8iuUKw3I0.roa
File: Ny9YsdRalSDF4CLQdP8iuUKw3I0.roa (raw, json)
Hash identifier: F5E4WDLNtgpCG06STCvWekvLP4jIEl/QLnCNg7Wwz8o=
Subject key identifier: 37:2F:58:B1:D4:5A:95:20:C5:E0:22:D0:74:FF:22:B9:42:B0:DC:8D
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0185711E54A955B1040CBF237637E962446F
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/Ny9YsdRalSDF4CLQdP8iuUKw3I0.roa
Signing time: Mon 02 Jan 2023 06:14:51 +0000
ROA not before: Mon 02 Jan 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210906
IP address blocks: 185.47.92.0/22 maxlen: 22
185.211.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:54:a9:55:b1:04:0c:bf:23:76:37:e9:62:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 2 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=372f58b1d45a9520c5e022d074ff22b942b0dc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:d1:19:46:10:23:99:9a:33:10:ab:16:01:
e9:b3:b7:10:12:e1:97:05:27:f4:c6:3a:81:a4:66:
e1:02:2d:07:38:4e:31:b2:7a:88:87:42:60:63:b5:
ae:03:de:fd:8a:02:81:4d:aa:fe:ef:e9:f3:b3:45:
6b:0d:db:ad:a6:56:cb:11:3f:45:9b:9f:a5:14:5d:
7e:ea:f9:47:7e:6c:92:69:8b:31:54:ee:ff:73:19:
35:59:12:1b:ea:99:f9:b3:87:4f:de:78:68:88:19:
71:c1:d1:c2:e3:0d:51:0b:55:20:08:a8:1c:5d:7b:
d3:3e:72:04:c9:33:cf:ac:c1:cc:3d:5e:48:79:71:
df:38:a3:20:cd:d9:e1:f3:3c:cd:99:78:b1:33:c4:
b1:b5:4f:24:24:c1:6f:d6:a7:a9:cb:e4:5c:5f:c3:
fb:72:ff:ef:b5:97:61:50:c1:c1:9b:80:34:33:e6:
7a:72:6a:d9:b7:48:dd:a4:6d:09:73:08:9f:a5:23:
f1:40:7e:1d:50:8a:ec:d5:ea:fb:29:c7:c2:23:d4:
95:52:86:e2:98:e9:40:41:6f:d7:5f:8f:83:c0:75:
b9:cf:6d:2a:7a:55:9b:89:e1:f2:ed:94:35:f1:f9:
49:2f:d8:55:63:5b:25:f4:d0:6a:19:20:73:05:27:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:58:B1:D4:5A:95:20:C5:E0:22:D0:74:FF:22:B9:42:B0:DC:8D
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/Ny9YsdRalSDF4CLQdP8iuUKw3I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.92.0/22
185.211.96.0/22
Signature Algorithm: sha256WithRSAEncryption
37:7e:e7:d9:08:ef:cf:c8:34:b7:f5:4d:6a:e8:4a:da:a8:c6:
3a:64:8d:03:ac:e9:5c:ae:ae:81:c9:a4:a8:d6:cd:6d:f6:25:
d6:da:d5:81:05:65:3c:c1:e6:b9:0a:5e:28:15:b1:ae:c5:7e:
d7:e7:49:d9:77:80:b4:72:92:6a:39:88:6d:21:81:26:63:e3:
a9:5e:8c:c4:cf:34:2b:62:e4:40:33:f5:20:9f:81:ef:23:bd:
e9:d2:65:b9:9a:48:b8:fb:19:ac:31:18:85:19:54:04:64:4a:
73:a7:26:5f:0f:80:9b:ae:77:dd:01:fb:1b:cc:a5:2a:bb:43:
af:ca:f0:1f:c5:c9:64:e3:10:5e:6a:e2:85:a7:44:54:98:46:
1d:2e:7d:c4:87:e1:10:98:cd:ad:1b:5b:d3:f5:79:cb:60:ff:
3b:dc:e5:e0:55:c4:ab:51:37:fa:a3:33:08:de:cd:69:b2:50:
b7:28:7e:9e:ba:84:6d:05:3d:9e:35:6f:b1:21:e2:c1:fa:16:
f5:0e:10:9f:33:17:7d:24:f1:47:32:5f:e2:f6:dd:08:67:66:
5c:66:03:20:70:31:f7:5c:90:92:bb:cf:ae:9b:e2:27:b8:36:
18:f5:26:d4:54:e8:41:df:88:27:ee:f8:69:50:ef:c7:59:5e:
fb:61:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:53 2023 by rpki-client on console-fra.rpki-client.org