Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/CYpIfvZGUi0i5pXaItIdEDJ3Oi8.roa
File: CYpIfvZGUi0i5pXaItIdEDJ3Oi8.roa (raw, json)
Hash identifier: FcTXUfhRHXrE014I+PiY/IhjEIBd5zi3MIfP5pG8Hbg=
Subject key identifier: 09:8A:48:7E:F6:46:52:2D:22:E6:95:DA:22:D2:1D:10:32:77:3A:2F
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01857227E6A2C5F53A2C66579BC8FDDBC318
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/CYpIfvZGUi0i5pXaItIdEDJ3Oi8.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200416
IP address blocks: 185.107.198.0/24 maxlen: 24
2a06:45c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e6:a2:c5:f5:3a:2c:66:57:9b:c8:fd:db:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=098a487ef646522d22e695da22d21d1032773a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:cd:d7:5d:e6:f7:ae:49:f7:97:38:89:3d:
4c:f4:8f:f5:71:a0:03:46:4e:8a:e9:6a:17:fa:93:
b2:53:37:8b:54:82:f5:73:4b:a6:bd:2f:08:79:0c:
e5:33:c3:3e:16:22:5d:ce:d0:da:70:9f:0f:4f:35:
7e:f3:a9:ff:a9:f8:35:7b:bd:94:8a:86:01:9a:58:
e2:d0:d4:ce:a2:ff:2b:d0:12:0d:24:3c:10:f0:9d:
f5:e3:d9:59:62:e9:23:ef:e3:d4:91:d0:02:41:e9:
c4:05:c9:73:e5:57:56:18:4c:a9:d8:87:c7:0c:a4:
f5:d4:ba:38:5f:6b:34:27:11:9a:c9:7d:7e:64:ba:
9c:5f:b7:d0:f0:c3:68:b4:42:33:21:45:15:06:2d:
3d:bc:3f:ae:d9:70:5d:55:4b:25:71:eb:1d:3f:89:
20:71:3c:43:87:a1:46:25:9e:19:0f:e5:c9:f4:1b:
42:38:e8:c7:51:28:d9:32:dd:d3:f3:55:99:cf:5e:
97:f0:d4:6a:1a:17:eb:85:6b:4a:e9:5e:48:91:67:
74:b5:c7:4d:53:52:52:df:ba:e7:8c:8c:e1:bc:35:
d2:83:2f:35:80:e3:15:9c:f3:a4:91:3e:c5:9b:47:
0a:60:8b:48:43:ce:82:96:2d:e3:0e:a2:7d:9b:44:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:48:7E:F6:46:52:2D:22:E6:95:DA:22:D2:1D:10:32:77:3A:2F
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/CYpIfvZGUi0i5pXaItIdEDJ3Oi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.198.0/24
IPv6:
2a06:45c1::/32
Signature Algorithm: sha256WithRSAEncryption
76:da:3c:9f:f7:32:a6:78:17:91:76:af:fd:94:d2:76:a1:bc:
e6:a1:79:2f:f6:14:44:16:87:7a:2a:a0:65:2b:79:45:bd:c0:
e1:44:5e:a7:8b:0f:cb:8d:a8:10:02:40:27:86:16:61:ee:1a:
1c:13:fd:6e:68:de:e2:0a:85:02:1e:8c:b5:4c:05:37:d1:80:
7a:9d:aa:81:37:7e:c9:db:15:2e:2d:ca:2e:21:55:b1:fe:14:
b6:0a:bc:ca:93:44:80:59:0f:36:18:d1:dd:3d:7b:4e:b7:84:
e3:c8:cc:e7:ac:09:80:9e:68:56:ef:58:b8:0c:c1:5b:30:f8:
24:24:33:b6:5b:21:ec:ed:1b:d8:c9:25:5b:fe:10:3c:22:e7:
9c:73:52:28:a8:7e:58:40:06:28:2f:94:a8:01:a5:6e:3c:21:
df:b4:57:37:e3:1a:83:24:ef:70:91:8e:ce:94:2c:39:f5:49:
d4:c5:83:36:32:f9:cf:76:95:99:b0:ba:1d:a6:de:a2:c7:08:
1a:0d:75:61:f6:02:05:ba:82:f3:0c:c7:36:73:28:d5:0a:39:
83:31:40:97:38:bb:73:32:fc:fe:ef:2b:58:4b:35:93:0e:d2:
db:cf:6e:99:95:f4:f2:84:4d:d5:68:f8:c9:3d:79:aa:c7:f9:
5b:d1:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:19 2024 by rpki-client on console-ams.rpki-client.org