Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yRuAvftVoVEIXoJ1u-UISySvUyA.roa
File: yRuAvftVoVEIXoJ1u-UISySvUyA.roa (raw, json)
Hash identifier: T+VEc0jcE046xeBSSX5l8aWsV7XlGVSa2lQIwNgFGF0=
Subject key identifier: C9:1B:80:BD:FB:55:A1:51:08:5E:82:75:BB:E5:08:4B:24:AF:53:20
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01863BB0CDA4D2A783804C5D565236E8DE42
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yRuAvftVoVEIXoJ1u-UISySvUyA.roa
Signing time: Fri 10 Feb 2023 14:18:08 +0000
ROA not before: Fri 10 Feb 2023 14:18:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207724
IP address blocks: 185.239.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:b0:cd:a4:d2:a7:83:80:4c:5d:56:52:36:e8:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Feb 10 14:18:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c91b80bdfb55a151085e8275bbe5084b24af5320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:28:62:61:92:ad:17:9a:32:7d:2f:6a:d2:
a5:9f:b0:a6:ef:79:4e:74:36:07:bd:22:cd:dc:43:
66:36:34:c0:0b:30:e2:7d:e8:9a:03:1c:7a:a9:3c:
c0:89:24:e6:b2:94:db:d6:bc:a8:64:1e:30:10:8c:
a6:7a:de:c5:cb:18:e2:45:05:7a:85:82:fd:ba:7b:
51:ce:1a:ff:e5:19:97:3c:60:34:b4:52:89:05:d7:
d1:32:7a:fe:7a:43:a4:03:c5:a6:79:3a:6a:9f:a6:
ec:fa:2a:6a:14:8b:6f:8d:90:20:6a:69:64:07:2a:
e5:36:40:56:78:76:6c:7b:84:a8:a5:f9:4d:d2:51:
97:49:ad:6e:8f:65:90:6b:3b:7f:97:18:0f:ec:9e:
64:d7:71:0a:65:c9:9b:64:18:d2:f3:24:40:87:da:
05:d1:34:e6:65:11:bc:ef:47:59:60:61:2a:4f:b3:
ec:a3:2a:b8:23:a8:2e:04:39:97:10:0a:98:d6:47:
7f:7d:15:f5:0d:bf:b5:f0:54:d4:8f:90:2f:1b:14:
e9:b2:aa:3a:0f:ae:45:3a:dc:74:39:4a:67:44:cf:
51:ab:30:00:f6:0b:1b:89:f1:0f:d2:c5:07:e5:bc:
9c:fb:5f:b0:ab:ab:9a:d2:cc:52:ad:cd:8c:ab:cd:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1B:80:BD:FB:55:A1:51:08:5E:82:75:BB:E5:08:4B:24:AF:53:20
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yRuAvftVoVEIXoJ1u-UISySvUyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d8:89:37:2d:64:8e:7f:17:00:9e:c5:90:a9:84:98:40:8f:
02:5e:d2:a5:b9:f5:e5:48:77:f4:c6:06:ef:61:8a:f8:fc:2a:
f1:a6:d1:40:f3:3b:46:8e:93:a8:02:3c:35:f7:ce:e5:48:b1:
67:44:7e:00:4f:b9:38:9f:8c:83:c5:2d:17:28:7e:1d:4d:f0:
b2:aa:a3:86:dc:92:c1:4a:84:2b:ed:c4:e9:d5:ec:80:2d:2e:
fe:92:b2:c4:c4:2b:38:68:dd:a2:17:6f:67:86:4c:91:8c:bd:
25:44:e6:87:9e:0f:92:ef:94:64:f9:cd:41:43:84:b3:96:b7:
f3:06:04:cf:63:95:1a:cc:ae:7c:75:50:4c:5c:78:28:d5:85:
6c:e1:a6:25:67:a9:41:98:b7:36:dc:8c:3e:af:c6:c3:2d:a8:
e5:30:ec:3a:85:94:60:7f:42:33:49:21:fd:8d:01:73:c7:ec:
ed:36:b8:08:bd:0d:f4:ba:10:b4:e4:c4:91:e3:c2:fd:e7:36:
a7:52:84:e0:d9:86:29:06:f2:e6:c2:d9:9a:34:57:fd:02:91:
1e:5f:f4:88:e4:67:f5:6c:f7:be:fe:c7:27:83:9a:22:4f:55:
76:2c:e9:b6:96:c1:41:01:c9:56:44:c0:50:bf:c5:ac:2e:d4:
eb:6a:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-fra.rpki-client.org