Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/CesddyF_OutAgXYXiyCcVpfkSoM.roa
File: CesddyF_OutAgXYXiyCcVpfkSoM.roa (raw, json)
Hash identifier: XZg1KpIsxNFSi6wP2OaNiWBicjVUSYyrrzttOXqqx44=
Subject key identifier: 09:EB:1D:77:21:7F:3A:EB:40:81:76:17:8B:20:9C:56:97:E4:4A:83
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 01856CAF086F50F87E5FE692E3D4B81ED813
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/CesddyF_OutAgXYXiyCcVpfkSoM.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205166
IP address blocks: 185.228.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:08:6f:50:f8:7e:5f:e6:92:e3:d4:b8:1e:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09eb1d77217f3aeb408176178b209c5697e44a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:50:89:8d:65:60:63:d7:6d:a8:b6:b2:80:
9a:4b:3a:30:cb:1a:8f:b3:af:8d:b2:e9:e7:a9:9c:
8c:ab:6d:3f:6c:5c:06:45:37:56:f9:eb:ba:df:1e:
ee:4f:35:af:51:7b:78:d8:b6:31:90:ad:84:2d:e4:
b1:93:43:0c:b6:1e:4a:c4:77:cc:8f:d9:bc:15:49:
7d:06:be:62:51:ee:f1:8c:ad:17:60:e6:1d:80:28:
4f:57:c0:83:c0:2a:44:60:2e:c6:9f:a1:6f:39:66:
16:ae:b7:d3:27:96:aa:1e:d1:9f:0a:a4:77:c6:39:
23:6b:08:db:fa:85:ea:12:11:04:4d:e4:cf:f6:00:
fc:32:95:11:f6:61:45:4b:2f:8c:70:1b:fd:1a:15:
d9:fe:dd:f4:20:96:7f:6c:c3:cc:b1:8c:0e:d8:13:
d1:a2:a7:1c:f2:5d:29:75:84:14:0f:f9:30:63:9e:
ab:fc:22:3c:b0:bf:7c:18:37:7a:b3:7b:1e:a1:5d:
24:0d:97:3d:84:f5:02:7c:46:36:e1:8d:30:f2:25:
9a:f3:ab:3b:bc:70:3b:98:ce:99:1b:c8:20:83:b0:
13:56:9d:88:95:bc:5c:d8:92:a1:13:76:f9:74:19:
a9:77:02:3d:56:44:ba:c3:7a:10:8c:b2:9e:a8:0a:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:1D:77:21:7F:3A:EB:40:81:76:17:8B:20:9C:56:97:E4:4A:83
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/CesddyF_OutAgXYXiyCcVpfkSoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.28.0/22
Signature Algorithm: sha256WithRSAEncryption
10:1f:21:76:64:80:6c:04:af:5d:16:06:f4:c1:0f:e6:bc:a1:
57:18:38:c4:f1:99:54:a8:3c:c9:08:31:44:d7:9a:4a:76:de:
5f:48:c4:88:d1:7f:dd:13:35:a4:ff:9b:e3:82:10:02:1d:81:
68:10:9a:cb:b7:3b:da:3f:0a:33:97:8e:93:c8:7e:d2:21:72:
18:99:09:60:3e:75:32:f4:ad:d5:42:c6:6d:22:9b:9a:35:2a:
12:89:16:c6:6c:1f:5c:7f:34:bb:77:da:88:d4:c4:c0:d1:32:
50:85:f4:b5:53:ac:68:8b:ef:98:7a:1d:c1:89:57:d6:1e:73:
db:5c:33:a9:2a:fb:39:8d:98:c6:4e:f4:5a:a5:e1:9b:62:47:
27:d0:bb:05:9b:45:3a:36:b7:60:31:69:f5:56:89:7e:20:1b:
26:c7:7d:5d:fa:9b:c0:3b:9d:80:67:02:1a:4b:e3:df:88:87:
3e:95:32:aa:c9:2d:c0:a3:b4:55:a6:e4:60:35:7d:7f:36:64:
ea:c2:23:27:98:79:44:93:66:20:0f:ff:80:51:62:1c:c3:f8:
86:76:8b:52:80:92:88:ae:f2:77:71:19:6f:49:da:fc:0a:5f:
f5:c4:96:02:dd:79:72:69:b0:6b:66:1a:e2:de:75:4a:9c:15:
1e:c9:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 19:48:31 2023 by rpki-client on console-ams.rpki-client.org