Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ydezZMHAtsDticDSQmDZpkaTMP8.roa
File: ydezZMHAtsDticDSQmDZpkaTMP8.roa (raw, json)
Hash identifier: HURCkmZgO5N1uC/m7o0rT9teSvromufdGwyZRzkWAxc=
Subject key identifier: C9:D7:B3:64:C1:C0:B6:C0:ED:89:C0:D2:42:60:D9:A6:46:93:30:FF
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018753069BF1DD5BDA298020A44D3D915E69
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ydezZMHAtsDticDSQmDZpkaTMP8.roa
Signing time: Wed 05 Apr 2023 20:05:54 +0000
ROA not before: Wed 05 Apr 2023 20:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13627
IP address blocks: 2.56.164.0/24 maxlen: 24
85.202.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:53:06:9b:f1:dd:5b:da:29:80:20:a4:4d:3d:91:5e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 5 20:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9d7b364c1c0b6c0ed89c0d24260d9a6469330ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:cb:3b:1a:7a:38:d4:d6:58:08:eb:d8:b9:
68:b4:d2:20:4f:35:bc:77:00:33:1d:49:53:27:c3:
c8:9c:04:0a:2a:7b:89:8c:83:be:d9:d4:29:eb:91:
d9:5d:70:0a:e5:2b:98:f7:92:ad:2c:89:74:c4:3a:
b1:c0:5a:82:44:3d:10:cc:9c:08:fd:6d:16:4e:37:
e2:0b:23:e8:cb:58:9c:12:0f:91:17:ff:18:63:30:
0b:6c:59:ae:fb:94:a5:8e:e7:ac:67:8d:d2:13:80:
d6:e1:85:e3:f6:e3:4d:96:76:02:e2:8f:38:6d:92:
a3:35:99:68:93:1b:de:94:b5:ad:d4:58:57:98:5b:
52:7f:0b:db:6a:e6:5d:5d:bd:13:51:7d:cc:1c:29:
a1:52:6a:ea:92:74:17:90:c1:35:e9:5b:c3:40:ae:
03:85:ff:4b:db:30:c5:3e:d3:c1:52:29:23:02:fd:
28:29:79:ff:bb:b6:df:41:69:65:14:29:50:4f:dc:
a9:d8:fc:10:92:c2:e2:fb:8f:45:3f:65:02:23:04:
f7:e9:f8:b8:cf:b1:c1:ba:c3:cc:e4:0a:91:13:ea:
74:1f:dc:b7:98:15:38:1d:b9:f2:ae:80:38:98:41:
57:72:f6:0a:6e:b3:23:69:53:34:50:d1:ae:e9:96:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:B3:64:C1:C0:B6:C0:ED:89:C0:D2:42:60:D9:A6:46:93:30:FF
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ydezZMHAtsDticDSQmDZpkaTMP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/24
85.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2a:64:94:52:14:67:c9:09:1d:d6:34:04:67:84:2f:37:0f:
4d:1f:17:68:37:56:20:1e:8a:63:9a:99:49:cb:69:00:2f:72:
47:9d:38:b3:c0:06:9a:0d:94:d8:98:74:5c:f7:f0:62:fc:78:
06:7e:25:b9:dc:54:2f:07:6a:34:b8:e9:ab:fb:00:3e:ba:e5:
25:9d:8f:64:e6:7b:fa:ae:94:80:24:b8:d1:a3:81:4d:59:51:
22:78:d2:f5:2f:d9:44:41:0a:80:d8:c2:6b:8d:4c:fb:0d:ee:
ec:cd:38:6a:d3:6a:63:2a:7b:d8:b8:a6:e7:f0:1d:6c:5f:8b:
40:80:35:d8:da:c6:62:80:86:90:c6:b5:ab:b6:11:9a:cf:6e:
19:e4:a4:33:17:b8:df:32:7b:12:4e:e7:1c:68:c5:09:be:32:
a8:07:42:a5:8a:e8:65:80:e2:ee:4f:59:64:e1:73:77:ae:70:
a6:51:a1:58:09:ff:a8:ac:e0:29:8a:e7:75:9b:1e:c2:f8:32:
ca:00:14:39:be:a9:c2:83:fc:63:0d:a8:57:70:d6:11:ea:63:
0e:4d:89:a9:da:da:08:6d:69:3c:70:55:36:10:46:0b:db:ea:
51:b8:f0:86:51:50:15:51:45:be:39:98:26:cd:6a:e2:fe:1a:
4b:fe:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org