Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bXLzHpFP8mknh2ERz_Yeu_1eLCc.roa
File: bXLzHpFP8mknh2ERz_Yeu_1eLCc.roa (raw, json)
Hash identifier: C03A+iFjVKSpHNXn6FHDYaXcbn4h1qqUqaqcGnwh0zY=
Subject key identifier: 6D:72:F3:1E:91:4F:F2:69:27:87:61:11:CF:F6:1E:BB:FD:5E:2C:27
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DB79F32562EB1F8C5B1F6579AF79
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bXLzHpFP8mknh2ERz_Yeu_1eLCc.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209835
IP address blocks: 185.227.100.0/24 maxlen: 24
185.227.100.0/23 maxlen: 23
185.227.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:db:79:f3:25:62:eb:1f:8c:5b:1f:65:79:af:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d72f31e914ff26927876111cff61ebbfd5e2c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:08:87:39:58:6a:c6:e6:f9:9e:ff:b7:0c:
e9:61:34:b8:b7:71:6c:b2:0b:0f:fb:01:97:97:2e:
a5:bd:ae:63:46:75:d4:8a:ea:b1:30:58:44:e3:32:
0a:0b:bd:de:e0:10:26:b3:cc:a2:5a:a7:70:bb:dd:
a3:b2:19:3a:5b:a5:72:9f:f4:77:f3:2f:bc:ec:54:
df:71:f3:af:21:45:79:11:2f:a6:d3:57:22:2a:ab:
a0:a2:10:52:fd:66:1c:7c:ee:d3:18:b2:87:66:9a:
55:13:5d:c0:15:a1:fc:24:7b:a9:1b:95:02:42:7a:
63:77:4b:00:00:bf:27:65:a7:d7:e0:a4:89:16:79:
e6:8d:5e:a8:96:aa:a9:20:26:27:b2:4b:a1:fc:0a:
11:78:5f:b8:34:68:b7:5e:43:bd:d2:a3:d1:fe:ae:
97:3e:23:aa:63:22:ad:a9:53:d6:70:36:83:68:71:
93:da:85:57:28:38:58:7b:16:0a:e5:96:4b:61:48:
25:e3:cc:8b:a7:ee:ab:d1:06:fb:6a:26:2e:8f:c7:
34:83:e2:c8:8b:91:ac:66:79:74:2e:5e:c7:b6:74:
d1:1f:36:c7:a6:4f:51:04:cf:ee:aa:69:a2:41:8e:
53:25:36:d9:2e:39:91:c4:1c:46:10:c0:3f:01:be:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:F3:1E:91:4F:F2:69:27:87:61:11:CF:F6:1E:BB:FD:5E:2C:27
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bXLzHpFP8mknh2ERz_Yeu_1eLCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.100.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:fb:e3:db:2f:a5:29:8c:2b:44:79:9e:05:f8:bd:8e:80:83:
01:0f:4a:01:a9:1e:9d:bf:2f:34:f1:02:3e:a0:ef:d9:3a:e0:
1f:b1:6a:7e:2c:0f:e8:4c:68:c8:dd:ea:d0:8a:eb:22:5c:59:
c1:b7:2a:9c:79:43:22:83:39:73:28:56:4f:e7:80:63:72:0d:
3e:c3:db:15:9d:99:7f:40:06:5f:63:3e:f6:03:73:59:81:1b:
05:79:12:c1:6f:94:a8:65:de:07:93:4c:b7:b2:eb:00:6c:88:
00:7c:e3:4d:1f:43:05:00:de:c2:3c:48:47:fa:b8:7c:02:aa:
a4:91:9a:ff:8e:e3:4f:16:07:a8:7b:2c:d4:d2:f6:55:c1:e3:
95:3f:e5:4b:3c:43:5d:65:a0:40:4f:f9:dc:3b:37:35:cc:07:
32:f1:61:e7:19:76:51:c9:58:06:7a:a3:87:7a:86:df:28:bc:
7f:38:b5:89:68:ab:5c:fe:7c:88:4f:3e:eb:3e:f9:1d:64:93:
58:c8:cb:91:ce:bf:e8:80:c6:5d:11:b5:8e:24:b7:1a:76:a0:
b0:a2:8c:44:ba:82:cc:c2:55:7a:7c:d8:53:c1:34:62:87:5b:
ad:5c:82:98:59:17:b3:47:28:14:27:8d:35:a2:e4:53:9d:39:
6c:6b:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org