Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/Y1c03wbAPonsXhQY9vzIYgUgXKY.roa
File: Y1c03wbAPonsXhQY9vzIYgUgXKY.roa (raw, json)
Hash identifier: t5rWjvFt/qeA5WdEvP9miHiyr87SgsJqFxGnmi1YFik=
Subject key identifier: 63:57:34:DF:06:C0:3E:89:EC:5E:14:18:F6:FC:C8:62:05:20:5C:A6
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01856F6FFF25851EEEDA7E5F910CDAA4B92B
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/Y1c03wbAPonsXhQY9vzIYgUgXKY.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34447
IP address blocks: 185.97.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:ff:25:85:1e:ee:da:7e:5f:91:0c:da:a4:b9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=635734df06c03e89ec5e1418f6fcc86205205ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:83:9d:c9:21:ad:09:1b:f8:af:cc:28:da:
ab:88:58:94:7a:f6:54:87:7f:0d:29:6f:6c:0c:76:
b3:91:25:bf:38:7d:cf:65:4c:8a:66:8e:34:b2:76:
ac:7e:67:bd:4b:29:6e:5c:5f:22:3a:fc:bf:45:9a:
43:59:50:86:e6:49:4c:56:93:f3:00:5c:d9:f8:f1:
e0:b3:29:1a:59:2e:02:bc:3e:6b:a3:4d:2f:7f:e4:
37:55:0b:2d:7b:61:a2:61:9f:56:0b:51:2a:b6:b1:
4a:e7:b3:bc:83:07:bb:45:cf:64:bd:9b:ff:51:60:
3c:12:00:f1:46:bb:e6:47:24:64:47:3f:73:dc:df:
88:55:c1:86:eb:cc:5b:4e:4a:3f:cc:5c:61:36:5a:
7a:20:03:b6:d3:5b:87:37:6a:5e:df:5d:e6:d1:37:
bf:1b:65:c9:d4:5d:ae:5a:df:80:ac:8f:c0:f2:12:
8c:d8:0b:48:ba:68:cd:a1:07:e7:02:99:bb:7c:e0:
33:93:08:58:62:85:b0:4b:8e:6d:0d:4e:ac:c2:27:
f5:9d:9d:89:55:ca:f5:0d:6c:9b:a1:82:5e:d7:98:
03:8b:d4:57:40:26:ae:62:17:c6:30:ff:de:b9:a4:
ce:1a:90:ec:42:87:f9:5f:35:60:d8:63:8a:59:a1:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:34:DF:06:C0:3E:89:EC:5E:14:18:F6:FC:C8:62:05:20:5C:A6
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/Y1c03wbAPonsXhQY9vzIYgUgXKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.92.0/22
Signature Algorithm: sha256WithRSAEncryption
88:21:89:88:36:b6:1a:a6:88:92:c0:ec:7d:b3:4e:4b:2d:0f:
21:8b:dc:e0:81:25:b1:26:0f:ed:97:72:9a:e5:8c:4d:3e:33:
6a:48:cf:da:15:d9:01:ff:bd:ac:2c:de:ec:94:24:82:b4:c5:
ec:05:42:74:4a:74:13:3a:a6:c2:0b:e3:cf:7d:ce:77:19:f4:
e8:2b:6a:37:b4:e3:5d:62:e6:76:ed:35:75:e0:bc:45:cf:84:
9e:e9:56:34:e5:c6:94:3b:a0:7c:3e:6d:92:b7:e1:94:ca:66:
0e:b4:1e:e8:cc:7d:c4:a8:a2:c3:a4:5d:76:12:7b:e4:50:c7:
ea:a8:92:50:2d:6c:be:d6:c6:32:f5:66:ae:5b:26:aa:8b:c3:
53:71:d1:00:c4:e6:a7:73:53:4b:c0:aa:61:4e:3a:bb:80:7f:
6c:cb:7b:18:e2:d9:7c:f0:2d:ab:c3:ac:bd:f4:84:8c:02:14:
3e:08:0f:4c:41:7b:c0:99:0c:e8:d6:08:14:a3:3b:cd:f3:e1:
b9:ed:44:89:64:ad:e6:5a:cd:fb:02:b3:26:54:07:5d:e0:67:
b0:27:a7:9a:bf:b8:a7:0e:86:e7:ab:ea:2a:77:71:3e:f3:ad:
9b:17:ba:47:f4:71:2c:f5:f7:1e:d3:e6:3e:8d:4d:cf:ef:c7:
c0:c4:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:39 2023 by rpki-client on console-fra.rpki-client.org