Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/IyNaKLZZqa5j8eR3fYyZRDAAhgo.roa
File: IyNaKLZZqa5j8eR3fYyZRDAAhgo.roa (raw, json)
Hash identifier: YGo9/Ny/aF6otn2ibTZMs+qZOGmzSxoFJxiMwqHP43A=
Subject key identifier: 23:23:5A:28:B6:59:A9:AE:63:F1:E4:77:7D:8C:99:44:30:00:86:0A
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 01856CAF1F89E80AD60B4859730663E01EDD
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/IyNaKLZZqa5j8eR3fYyZRDAAhgo.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50084
IP address blocks: 185.96.176.0/22 maxlen: 22
194.247.164.0/23 maxlen: 23
194.247.164.0/24 maxlen: 24
194.247.165.0/24 maxlen: 24
2a07:4140::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:1f:89:e8:0a:d6:0b:48:59:73:06:63:e0:1e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23235a28b659a9ae63f1e4777d8c99443000860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:c2:9c:d3:7f:af:9d:6a:c8:6a:d1:ca:b3:
c3:68:65:f8:d8:50:88:07:c1:52:88:c8:84:99:09:
0d:6d:da:7f:1c:6e:ae:1e:65:49:ca:59:de:5f:30:
30:b7:44:48:f2:0b:18:64:b9:c4:91:28:bb:f3:f7:
0a:df:ad:be:08:2c:3a:79:52:8f:17:a7:12:32:82:
cf:e3:92:9e:ac:57:ba:6e:f7:a1:32:22:38:ce:be:
dc:33:c1:c3:ea:ed:95:4e:fa:e8:d8:86:6c:1f:c4:
f3:0f:ad:71:7a:35:01:7a:95:ef:6a:05:b5:6a:aa:
a8:09:b0:27:70:71:de:be:db:d0:c3:d2:26:c6:b6:
a1:3b:38:3f:22:5c:51:29:89:88:12:10:b4:ae:50:
1b:56:ac:7f:4f:0d:81:02:0e:73:04:44:6e:62:d0:
f0:b5:7b:38:2e:b1:45:cd:da:8e:79:49:f9:1e:8b:
9f:06:d9:f6:e1:9e:00:9d:41:3b:b6:a3:48:05:71:
8d:a0:1c:e5:00:35:6e:62:61:17:a2:0f:eb:28:6a:
e0:b2:8c:96:b0:d3:72:d0:7b:30:a1:97:e7:af:0f:
43:12:ae:cd:b3:7f:6e:a2:7e:7c:98:8f:bc:b1:ec:
6e:04:3d:f9:b0:4a:c2:3a:c4:1a:79:2d:ac:9c:20:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:5A:28:B6:59:A9:AE:63:F1:E4:77:7D:8C:99:44:30:00:86:0A
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/IyNaKLZZqa5j8eR3fYyZRDAAhgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.176.0/22
194.247.164.0/23
IPv6:
2a07:4140::/29
Signature Algorithm: sha256WithRSAEncryption
2e:11:a8:f7:d9:a7:09:b0:a4:e4:04:b4:53:a7:0d:e8:86:7a:
8f:24:64:44:36:88:3d:5d:92:50:75:d6:25:a5:89:53:db:cd:
67:01:fa:3d:59:bd:5d:ef:15:08:3c:74:48:88:0e:e2:bf:cf:
bf:70:b6:be:dc:4e:f7:55:3d:f2:86:81:12:55:0a:73:19:1f:
f1:b2:1f:8c:71:01:b8:de:77:43:38:97:1b:0a:d0:4d:0c:11:
16:e6:cd:c7:ab:8f:dd:c9:f3:be:6d:c2:52:44:49:b3:96:7a:
8e:f8:48:d6:2b:91:ed:04:2d:80:97:23:05:cb:6c:35:7a:bf:
a9:74:da:42:d3:a8:c5:de:db:0a:8c:0f:d8:ac:4f:9f:f9:9e:
12:72:da:2e:80:87:60:0e:be:08:ac:cb:6c:1d:df:d2:fc:07:
12:1d:fb:69:30:0b:d6:d1:bf:0f:9f:a3:4b:d3:4e:fd:8d:0e:
87:9d:3b:57:b7:45:d1:00:e4:6a:28:07:79:7c:ea:18:97:eb:
f2:91:9f:e6:29:c0:9d:aa:2e:e8:c1:bb:bc:3c:fc:32:84:84:
ad:6e:9e:54:e5:8a:a0:6d:c2:c6:78:8b:44:1c:7c:14:1e:ed:
ef:7d:46:48:f2:ea:d9:0f:dd:b2:6f:0b:8b:00:21:3e:34:99:
03:35:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 08:10:27 2023 by rpki-client on console-ams.rpki-client.org