Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YdYCfBNXN019ZMHTp1W9ruS_Xaw.roa
File: YdYCfBNXN019ZMHTp1W9ruS_Xaw.roa (raw, json)
Hash identifier: UCj1IQhJOc5C6ZXTSZoNoUaugkCsJrwILBCboFWuynQ=
Subject key identifier: 61:D6:02:7C:13:57:37:4D:7D:64:C1:D3:A7:55:BD:AE:E4:BF:5D:AC
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188A7880FC38EF82A44B8651070809F7D92
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YdYCfBNXN019ZMHTp1W9ruS_Xaw.roa
Signing time: Sat 10 Jun 2023 22:58:11 +0000
ROA not before: Sat 10 Jun 2023 22:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.199.214.0/23 maxlen: 24
185.221.24.0/23 maxlen: 23
185.221.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a7:88:0f:c3:8e:f8:2a:44:b8:65:10:70:80:9f:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 10 22:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61d6027c1357374d7d64c1d3a755bdaee4bf5dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:97:64:d7:75:a8:3c:1b:49:ac:98:98:ce:
5d:15:b1:b5:12:31:99:b8:c6:50:b9:5c:5e:1f:2c:
1c:ab:49:99:10:62:3e:d3:fa:45:d0:91:83:ad:60:
62:c2:53:30:76:5b:c7:a4:e3:f7:54:02:b6:fd:d7:
4e:fa:14:53:a5:57:60:3d:25:9c:e3:fc:c3:3b:b4:
60:dc:67:89:99:90:6f:d0:6b:19:2d:d2:76:60:8b:
c4:1f:7a:c2:b5:93:85:06:4b:9c:92:0e:d1:d3:58:
8b:9a:93:b3:9f:18:d2:51:ca:3f:70:9d:17:64:26:
aa:2d:44:e5:7b:2a:db:01:27:5f:9b:59:99:95:b8:
76:07:c2:da:bb:ef:e0:e5:9a:14:51:e2:de:e5:9a:
57:85:1b:8e:2d:c4:e3:3b:1b:fb:97:71:01:8f:eb:
47:64:cd:34:a9:59:a6:35:bf:3e:2b:97:ba:10:c2:
6b:a7:89:ad:14:51:6b:3d:f8:4c:54:4c:35:e6:5a:
a7:c5:15:97:f9:7b:f1:e2:17:35:65:08:3b:fd:7a:
c3:e7:48:65:a1:bf:a1:7c:36:2c:06:b7:c9:13:64:
ad:e8:3b:5d:e1:01:c5:74:35:86:68:d5:3b:27:57:
fc:2b:64:96:c9:80:74:d7:e9:53:03:0d:da:87:f3:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:02:7C:13:57:37:4D:7D:64:C1:D3:A7:55:BD:AE:E4:BF:5D:AC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YdYCfBNXN019ZMHTp1W9ruS_Xaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.214.0/23
185.221.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:b6:5c:4b:26:35:9f:3b:79:7c:3a:5d:66:ca:d7:87:13:d5:
c4:d5:89:4a:48:47:5e:d1:87:fc:26:5a:0e:39:a1:60:c1:e9:
7c:40:0a:85:8c:83:85:4d:e8:54:02:76:47:d5:19:78:aa:68:
b5:5e:69:6d:5b:ad:fe:72:d9:3d:2d:7f:ed:71:24:fb:1c:c4:
f5:81:1e:1c:3e:cf:db:48:3e:9d:66:5c:1f:31:97:b5:fb:6d:
24:12:a0:6d:55:a0:bd:07:0a:cc:42:01:f3:8a:2c:84:3d:57:
ab:c2:7d:db:d6:bc:41:56:9e:f8:6a:df:71:e2:5b:cb:65:1d:
a3:f0:79:55:aa:6b:a5:18:4a:d5:3e:8c:70:4e:42:ba:78:60:
60:74:a5:ea:ab:17:19:50:6d:cb:42:02:11:62:23:65:3a:cb:
1d:f1:1f:3d:62:6e:04:cf:e1:ae:58:15:2d:49:d3:b5:cb:fe:
ec:9c:6f:08:27:18:e5:30:a7:af:97:8c:f9:9b:51:50:d9:fc:
09:02:cf:4c:62:34:ae:1c:ce:db:6a:c7:b2:04:40:b5:0c:00:
e8:cf:62:3c:b6:e0:c6:a1:65:06:20:3d:00:8f:17:5b:a4:9f:
78:67:01:b6:5f:d0:68:00:20:58:f6:24:98:67:ea:66:f7:0e:
06:a6:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org