Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/PetsmJ-_VDVmn-uqZh37w92JQZ8.roa
File: PetsmJ-_VDVmn-uqZh37w92JQZ8.roa (raw, json)
Hash identifier: UB5yEgPXTRl92jIhDHD8TX2CFHVKbE8aw74XJ+QElDw=
Subject key identifier: 3D:EB:6C:98:9F:BF:54:35:66:9F:EB:AA:66:1D:FB:C3:DD:89:41:9F
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 018571958FEA4EBB509A265A533D59BC1347
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/PetsmJ-_VDVmn-uqZh37w92JQZ8.roa
Signing time: Mon 02 Jan 2023 08:25:05 +0000
ROA not before: Mon 02 Jan 2023 08:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205067
IP address blocks: 185.230.185.0/24 maxlen: 24
185.230.186.0/24 maxlen: 24
185.230.184.0/24 maxlen: 24
185.230.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:8f:ea:4e:bb:50:9a:26:5a:53:3d:59:bc:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jan 2 08:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3deb6c989fbf5435669febaa661dfbc3dd89419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:5f:67:6c:4e:45:e4:4a:66:48:af:c5:a9:
00:0c:81:13:9b:7c:d6:63:6a:40:09:33:8d:b8:d5:
2a:04:e0:8b:8d:27:28:5c:e6:c6:fd:b2:e7:64:a3:
35:54:c1:10:32:56:b4:8f:56:ec:6e:2a:bd:ad:2a:
b2:bd:24:a0:62:77:c7:4d:4f:fc:8c:b7:0a:61:52:
c0:2a:10:a0:4e:fd:52:69:cc:ee:8c:99:4b:5f:c8:
78:a1:a3:0f:0f:0b:a5:63:3a:24:e6:f5:d6:42:96:
1c:70:85:ac:57:71:ed:26:4d:48:18:c8:0c:0a:14:
17:1d:bc:5e:54:36:2d:62:58:01:b4:46:c7:80:af:
d6:9a:e8:4e:d7:6b:7a:55:2d:3f:6f:d5:88:08:c3:
b1:65:9c:09:22:16:4b:82:d2:0d:64:0d:5a:c8:02:
91:31:fc:bd:c6:fb:9d:45:cc:a9:12:61:66:10:c3:
c3:2c:33:70:8f:e4:6b:1b:59:ab:30:a0:e1:ed:1d:
ef:b4:80:8a:37:15:8c:83:c1:c4:e4:6a:55:19:49:
8f:ee:e7:58:6f:a3:77:55:83:a5:8e:36:a3:62:07:
b9:9c:2a:8d:96:66:bc:f8:3d:ae:b9:6f:e3:e0:a1:
ef:69:5d:98:62:7e:12:a8:fe:8f:80:da:92:d4:15:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EB:6C:98:9F:BF:54:35:66:9F:EB:AA:66:1D:FB:C3:DD:89:41:9F
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/PetsmJ-_VDVmn-uqZh37w92JQZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.184.0/22
Signature Algorithm: sha256WithRSAEncryption
00:a8:88:be:60:30:b7:52:01:e0:1d:aa:71:12:c8:4b:fd:c3:
82:d4:aa:33:36:f7:84:c8:e5:33:89:f7:eb:26:b6:8f:bc:58:
7a:50:51:a7:37:4e:1a:33:a3:a0:8e:a2:e9:4a:40:12:19:74:
57:43:e4:5f:bf:be:64:18:6a:66:74:cf:33:fa:9c:9d:aa:7e:
90:c7:b5:d4:1b:c4:0c:a5:50:11:6b:56:38:61:d3:7f:ee:e3:
a2:3b:3a:31:3e:2d:50:68:c7:12:cf:27:c6:62:5a:80:8a:76:
0c:11:7e:aa:bd:38:fb:8d:80:e6:f6:b9:30:d6:6f:cb:62:80:
ef:d5:5e:c6:d3:30:5a:da:79:35:62:42:02:ee:29:76:dd:a0:
a6:99:ba:85:bc:eb:7b:f6:61:43:0e:66:9d:d7:f5:54:6c:bf:
43:ee:98:7d:cb:68:57:ea:13:e4:cf:09:b9:09:10:29:1e:7a:
9a:86:a1:82:0d:f7:d2:68:2f:40:cb:ed:c0:f8:e1:5d:7f:1d:
06:6f:2e:f9:13:c4:e9:01:65:c3:39:14:4f:a4:21:c6:c8:85:
02:f8:95:20:a8:2b:f0:e4:fa:32:eb:50:b1:8c:f5:9f:af:74:
4a:d6:f9:31:16:a6:b8:0e:2b:6d:18:9e:97:7d:92:c1:44:5b:
ec:e2:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:35 2024 by rpki-client on console-ams.rpki-client.org