Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/yEXy1JbbDxQ_bJoqUsYajEQRxxo.roa
File: yEXy1JbbDxQ_bJoqUsYajEQRxxo.roa (raw, json)
Hash identifier: RbWmREwCPDyGlblFrvGC/hFugIBwtzwaTCekj64/EBg=
Subject key identifier: C8:45:F2:D4:96:DB:0F:14:3F:6C:9A:2A:52:C6:1A:8C:44:11:C7:1A
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 01856DE6565E7A43DA2580CC198E3FFD7CB9
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/yEXy1JbbDxQ_bJoqUsYajEQRxxo.roa
Signing time: Sun 01 Jan 2023 15:14:49 +0000
ROA not before: Sun 01 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59874
IP address blocks: 185.175.192.0/24 maxlen: 24
185.175.195.0/24 maxlen: 24
185.175.193.0/24 maxlen: 24
185.175.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:56:5e:7a:43:da:25:80:cc:19:8e:3f:fd:7c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Jan 1 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c845f2d496db0f143f6c9a2a52c61a8c4411c71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:f4:02:dd:17:d9:09:53:a8:77:a6:a3:f2:
5c:59:f0:47:09:86:a9:13:f4:9e:7b:df:7f:d1:3d:
42:f0:93:bd:13:87:c7:67:2d:73:17:ab:46:54:3f:
a0:58:a1:b9:b2:17:1f:6c:88:db:8f:a7:ea:4c:98:
ca:dd:f4:f9:c1:5b:bd:ff:33:7a:e8:bd:42:a3:1f:
c6:ce:f0:86:8b:be:bd:38:c1:5d:ad:4a:4e:41:51:
e2:02:db:1c:9e:89:2a:9d:aa:90:f3:7d:b1:29:22:
66:11:bb:07:f9:10:6d:2b:9f:40:96:de:e3:10:69:
f4:16:b5:9e:c2:9c:3f:6f:9f:83:96:9b:61:3a:79:
90:f3:21:01:13:b8:16:4e:f1:08:c6:ac:47:eb:eb:
da:df:67:56:0f:ab:ed:60:3a:c5:b1:16:99:9b:a0:
9f:e0:0a:a2:67:c7:e7:1e:8d:cd:10:39:4f:ee:4b:
09:2b:00:b6:df:db:4b:aa:b1:b5:68:cf:ec:5d:b1:
38:25:b8:b7:40:f9:4b:54:e3:65:30:f2:3a:0a:37:
29:17:fc:63:03:a6:3a:09:46:32:20:65:03:d5:4b:
cd:5d:b1:02:11:62:bd:76:a8:65:2e:72:70:cc:a8:
81:48:03:84:ee:3c:cb:57:5f:d2:aa:39:4c:ad:4d:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:45:F2:D4:96:DB:0F:14:3F:6C:9A:2A:52:C6:1A:8C:44:11:C7:1A
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/yEXy1JbbDxQ_bJoqUsYajEQRxxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.192.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:87:46:36:68:9b:c7:7f:dd:2d:03:68:76:d3:cb:2e:96:22:
ae:31:c3:f2:2d:c4:ed:63:d1:11:2d:82:b3:13:ff:65:d9:99:
60:6e:52:f1:0a:48:c8:fe:19:4c:91:39:5a:67:bb:fd:4e:83:
27:2b:85:b2:b3:0a:04:2b:6f:77:75:33:3c:9c:13:c5:03:da:
fb:63:1f:c7:07:5a:d5:3d:7a:38:a2:c9:2d:23:c0:c4:60:ea:
fd:dd:2d:b9:87:18:cf:47:7f:6f:5b:f2:dc:0f:01:d2:94:93:
12:91:19:45:43:7b:f4:60:09:e3:96:55:05:e7:93:07:60:a5:
1c:1c:e0:01:6c:7b:71:b7:99:d0:6c:33:14:7e:37:f1:00:99:
7e:8b:d2:93:5a:e5:b6:e4:bc:dc:d9:03:3c:61:48:a5:07:b0:
c8:68:1a:0c:08:de:63:2c:87:03:74:2c:6d:a4:2d:30:3e:4f:
cb:1e:c0:cb:95:ab:9f:8c:98:39:d5:42:bf:31:24:b1:2e:b4:
11:82:ee:b4:3b:b1:71:df:84:7e:39:d9:94:06:c9:1d:57:58:
27:f2:59:42:d9:f5:84:79:1a:56:7b:5a:68:f4:4f:dd:9a:67:
33:5a:26:d7:57:93:d9:06:7e:4e:76:90:c8:1b:af:8a:c3:25:
d5:a4:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:40 2024 by rpki-client on console-ams.rpki-client.org