Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3Hn0G6MELd75OlzIMIOOq5RAGow.roa
File: 3Hn0G6MELd75OlzIMIOOq5RAGow.roa (raw, json)
Hash identifier: gtp9/MHrlJMed1hG37SFQw1rN/lGX6ZONE1XuXQyY2o=
Subject key identifier: DC:79:F4:1B:A3:04:2D:DE:F9:3A:5C:C8:30:83:8E:AB:94:40:1A:8C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01859AD88613D3B171CBAD1E110005E76E22
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3Hn0G6MELd75OlzIMIOOq5RAGow.roa
Signing time: Tue 10 Jan 2023 08:42:39 +0000
ROA not before: Tue 10 Jan 2023 08:42:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.233.18.0/24 maxlen: 24
185.233.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:d8:86:13:d3:b1:71:cb:ad:1e:11:00:05:e7:6e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 10 08:42:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc79f41ba3042ddef93a5cc830838eab94401a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:f1:15:2b:c6:d4:2b:74:96:4e:a4:ec:00:
48:a8:0b:ec:2b:ed:c6:87:c9:14:db:74:21:de:4a:
9f:81:8a:9d:35:85:6f:e3:14:ef:08:30:b4:91:9a:
cb:63:cc:60:3b:a2:f9:44:d3:79:d7:45:03:8c:23:
e6:7d:66:1d:8e:60:c4:f9:81:14:e2:aa:49:2c:35:
b7:ec:ee:01:72:08:88:64:fb:20:0c:a9:12:f5:ed:
ef:cf:3f:fb:71:9a:ad:86:29:1b:ad:cf:0a:9f:f0:
6c:91:81:30:e3:cf:ef:d6:dc:14:ea:94:b8:02:cd:
a5:1f:03:e2:86:f4:b9:7e:26:d4:a7:be:89:33:be:
c0:66:05:23:66:99:c0:b7:b3:ce:dc:f3:09:76:5b:
d4:88:cc:66:18:a5:31:93:93:e0:16:8b:ae:30:20:
b7:46:e3:6c:7a:73:27:2b:bc:ab:97:37:8c:4f:35:
60:16:45:c4:57:a1:17:90:a8:e0:5f:2b:54:bc:e2:
11:ab:b9:fb:dd:2f:5d:92:34:48:01:eb:0a:97:1a:
0e:ad:58:86:0b:e8:11:d5:c9:70:4f:cf:a4:99:b2:
5a:a9:f3:2b:22:92:f7:d3:31:fc:ab:cd:e9:a9:53:
8e:da:8d:08:0b:60:d4:ec:5e:99:24:e1:60:7e:a0:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:79:F4:1B:A3:04:2D:DE:F9:3A:5C:C8:30:83:8E:AB:94:40:1A:8C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3Hn0G6MELd75OlzIMIOOq5RAGow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.18.0/23
Signature Algorithm: sha256WithRSAEncryption
25:f8:1c:d8:9f:10:f7:03:e9:b0:e8:39:0d:3d:81:cb:d6:cc:
84:d1:14:5f:05:33:e0:eb:11:fe:b3:a6:10:6e:22:95:01:fa:
79:03:37:66:19:0e:dc:09:d8:59:fe:c6:67:50:5f:30:e4:88:
fb:dd:49:97:3b:58:77:ca:f4:f4:5c:38:55:e0:1b:5f:3f:e1:
84:75:5e:19:5b:18:a8:a8:00:6d:48:0e:14:02:86:4f:75:6b:
6a:f8:50:bb:38:97:49:2f:9d:63:4a:8a:fa:49:71:25:94:31:
8b:73:05:4b:3f:89:de:7e:9a:b1:1d:0e:e2:49:d7:3d:8a:18:
9e:05:33:96:e1:ae:25:72:aa:d7:33:aa:56:a1:60:73:f0:b2:
cd:7a:9b:f4:5c:d4:0a:3a:ca:10:1f:3c:0b:7e:9d:ec:a5:14:
40:aa:b6:1a:20:d6:2f:1b:62:b6:3c:96:af:c8:08:53:95:6a:
27:31:6b:88:cf:e3:4c:10:54:de:dc:dd:a8:e9:bf:1d:83:97:
2a:3e:4f:6d:d5:a9:b1:44:6e:f4:37:e8:bf:1a:ac:b4:dd:17:
c4:17:28:cf:4c:c0:18:57:bd:be:e8:da:f0:86:01:84:52:60:
bc:51:74:92:eb:44:d0:a1:0e:bc:b6:bf:56:2c:a1:f7:5b:f2:
c3:2f:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:46 2023 by rpki-client on console-ams.rpki-client.org