Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Aj2o6iyP69DPU8ypwv0zFzCC6SY.roa
File: Aj2o6iyP69DPU8ypwv0zFzCC6SY.roa (raw, json)
Hash identifier: 0ndvLiRct1Qg5fVFgErjFbTlRdBRs9D70Uh+XTnuTHc=
Subject key identifier: 02:3D:A8:EA:2C:8F:EB:D0:CF:53:CC:A9:C2:FD:33:17:30:82:E9:26
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739007DE39415F69274B069D1A3E105C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Aj2o6iyP69DPU8ypwv0zFzCC6SY.roa
Signing time: Mon 02 Jan 2023 17:38:17 +0000
ROA not before: Mon 02 Jan 2023 17:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210659
IP address blocks: 185.186.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:07:de:39:41:5f:69:27:4b:06:9d:1a:3e:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=023da8ea2c8febd0cf53cca9c2fd33173082e926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:77:4e:8e:73:85:6c:e2:12:c9:f1:59:9e:
ce:b6:1f:6b:6d:b6:b4:f3:26:72:7d:c5:2c:49:f9:
32:d4:1b:ad:85:2f:d9:f6:aa:88:fa:56:86:be:65:
57:50:81:02:8f:49:36:c7:d3:16:08:63:98:e7:c3:
ec:90:c3:d0:2b:f8:8b:c2:34:32:20:8a:e2:0c:23:
a2:5a:42:f8:be:c7:73:4d:31:05:11:08:2e:e2:90:
82:f0:b8:ef:9f:49:e6:64:5f:dd:3f:51:51:aa:58:
b8:c1:9e:af:8b:d8:d2:87:0b:a9:0b:c2:c7:7e:da:
38:7b:7c:a0:4e:36:0a:5c:53:47:b4:38:99:ca:e2:
c2:3e:c5:10:0b:13:6e:99:df:ed:eb:28:a8:60:e5:
12:09:29:ad:25:18:a2:07:32:ea:ab:58:99:68:df:
21:8c:b8:3c:35:9b:1b:b9:e1:a4:97:81:ca:2d:53:
93:b7:57:4b:a7:13:6b:07:d2:12:cb:84:d7:c6:9d:
38:35:a7:95:5f:34:7b:64:e1:5f:0c:af:b4:39:4f:
05:8f:18:a0:b5:41:d3:66:72:e1:89:35:ce:17:89:
4c:92:0d:47:8e:cf:57:0b:d8:1f:01:11:7d:f2:ad:
85:02:3e:21:de:9f:74:e5:2a:13:04:59:24:bf:72:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:A8:EA:2C:8F:EB:D0:CF:53:CC:A9:C2:FD:33:17:30:82:E9:26
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Aj2o6iyP69DPU8ypwv0zFzCC6SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f3:99:c1:1a:63:2c:f5:56:93:8a:2f:ec:b6:a4:f7:d5:e2:
a9:6f:a2:b8:29:ad:c5:2a:6f:bc:b9:09:e7:9d:80:4e:58:54:
39:1a:ca:54:01:e2:af:d1:fc:07:14:65:ad:25:03:a0:ec:3c:
3d:3e:63:89:a7:3b:70:d6:8a:7b:89:4f:da:9e:a3:13:93:77:
ee:e1:13:e4:42:85:91:19:4f:69:4c:39:74:69:44:08:32:67:
0d:90:62:de:5c:3f:c2:78:11:a6:c5:9f:26:c1:2f:8e:c5:5f:
ea:33:9a:f2:ca:b9:18:64:4d:dd:42:22:a5:d4:39:89:8c:ef:
59:b0:f9:2c:b6:88:28:a1:74:4b:2f:13:01:47:54:1d:19:31:
41:72:34:64:c8:4e:ef:33:10:16:64:7c:90:57:77:73:69:9d:
15:d0:07:8d:9e:aa:01:24:59:a8:99:a2:47:49:c6:aa:a0:33:
83:b5:47:0a:53:29:db:6b:6b:8b:b5:81:cc:05:1f:37:88:b9:
3c:26:1f:a0:52:e4:c3:a8:9c:0e:ca:16:75:ab:5b:c4:3e:4f:
fd:8d:bb:d1:16:36:05:94:14:76:d9:b9:9f:3d:5f:52:55:2c:
7b:a6:24:44:a6:3d:fb:99:d5:43:5b:fb:08:82:35:de:93:e6:
d8:d8:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org