Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/h_YSUHyQfJUx2NiJOq9Oy6Rf_9k.roa
File: h_YSUHyQfJUx2NiJOq9Oy6Rf_9k.roa (raw, json)
Hash identifier: HxZB4+0zQg+R1nEw32MYSE/UerajskVf0Aeu0i3SyRw=
Subject key identifier: 87:F6:12:50:7C:90:7C:95:31:D8:D8:89:3A:AF:4E:CB:A4:5F:FF:D9
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 01856F149E987E008D8F19C9697D7BC15B17
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/h_YSUHyQfJUx2NiJOq9Oy6Rf_9k.roa
Signing time: Sun 01 Jan 2023 20:45:00 +0000
ROA not before: Sun 01 Jan 2023 20:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198432
IP address blocks: 185.68.111.0/24 maxlen: 24
185.18.198.0/24 maxlen: 24
185.18.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:9e:98:7e:00:8d:8f:19:c9:69:7d:7b:c1:5b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 20:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87f612507c907c9531d8d8893aaf4ecba45fffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:05:f0:7b:77:2f:1b:5a:91:ab:58:d1:56:
5b:19:51:7d:e0:08:97:9e:6d:63:9a:d9:98:2c:84:
d0:fd:0b:76:a7:cc:13:46:4a:94:8b:cc:5f:03:3f:
9c:41:43:eb:b7:19:83:20:82:4a:a9:1e:33:fc:f3:
0f:16:f2:19:7f:05:05:8e:33:70:54:28:90:5c:a9:
46:0c:2f:4b:87:35:06:d1:ca:d5:98:df:7f:0c:40:
7b:2a:c1:b6:7d:1a:2d:11:88:b2:9d:c1:bc:df:08:
7b:bf:15:dd:39:21:16:cf:2e:e6:4b:d8:17:cc:fe:
05:5a:dc:af:33:58:3a:4c:d7:e4:00:73:63:a2:53:
30:d7:86:29:e3:32:cb:60:86:00:e2:2d:d3:9b:c8:
ba:d2:26:55:c3:89:5a:14:d1:5b:84:70:e1:fd:85:
5f:0d:29:28:ce:88:27:c7:80:61:dd:6b:8d:8a:96:
cc:f6:ca:21:70:c7:f8:ff:53:3a:5f:a0:2b:72:b0:
3b:39:44:4c:37:69:fb:1e:55:66:db:ba:68:59:35:
d8:4a:7f:e4:78:9e:9d:1b:7a:b5:00:60:bc:bb:6c:
a1:ec:21:c2:58:a1:26:3f:54:dd:eb:61:1d:37:10:
34:a3:e4:89:98:88:a7:9d:b3:3b:a8:43:c6:35:4c:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:12:50:7C:90:7C:95:31:D8:D8:89:3A:AF:4E:CB:A4:5F:FF:D9
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/h_YSUHyQfJUx2NiJOq9Oy6Rf_9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.198.0/23
185.68.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e6:6e:c2:d5:61:17:a3:4f:9b:6b:b6:df:e3:77:e7:d5:07:
b4:11:15:89:64:8a:07:43:f0:1d:44:f2:3e:f3:78:ee:ac:35:
70:3b:31:12:06:17:b0:5c:19:1e:35:cd:a6:2c:0a:d2:2d:84:
5f:f0:66:f2:b4:56:6d:66:31:f0:56:cd:47:49:c1:75:fa:79:
53:e7:6f:fd:55:7d:29:87:e8:6a:8e:b8:6b:c2:36:56:70:9b:
4c:ff:dc:97:ee:f5:18:67:35:ff:4e:e0:38:ce:73:cb:7d:28:
81:a3:88:a0:16:81:d1:94:9a:06:7c:11:71:e2:69:3e:4e:ed:
16:98:55:bd:0c:73:29:3e:b4:f8:5e:80:ec:2e:b5:25:ec:d7:
7b:4f:29:56:95:f2:8a:4c:7c:43:1a:7f:09:85:1e:99:7d:4b:
dd:8b:c9:39:82:3b:79:12:bd:6c:5f:00:b9:25:1a:04:1c:8b:
e9:21:c4:57:9e:f3:1d:04:42:31:08:b0:a8:07:75:f0:ff:08:
55:ba:22:42:2f:9a:84:27:25:0e:65:c3:da:1a:1b:85:c7:62:
8b:bd:8e:10:41:ae:40:05:8c:df:d3:ec:1a:a5:01:19:54:b3:
b6:5c:58:07:44:38:6f:86:46:08:1c:20:c8:b6:9d:d5:04:d0:
e2:bc:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:00 2024 by rpki-client on console-ams.rpki-client.org