Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/Yw13K4MdPwGevQ2FjCyWdPEjjf0.roa
File: Yw13K4MdPwGevQ2FjCyWdPEjjf0.roa (raw, json)
Hash identifier: c/6SWizJMwIbDQE+KWtaCknxbkAp4B2hegE3sfbzcXk=
Subject key identifier: 63:0D:77:2B:83:1D:3F:01:9E:BD:0D:85:8C:2C:96:74:F1:23:8D:FD
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 0187C18CC7DCF057E8AB1AAC404AD8055F43
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/Yw13K4MdPwGevQ2FjCyWdPEjjf0.roa
Signing time: Thu 27 Apr 2023 07:10:41 +0000
ROA not before: Thu 27 Apr 2023 07:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58321
IP address blocks: 185.123.160.0/24 maxlen: 24
94.152.254.0/24 maxlen: 24
94.152.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:8c:c7:dc:f0:57:e8:ab:1a:ac:40:4a:d8:05:5f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Apr 27 07:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=630d772b831d3f019ebd0d858c2c9674f1238dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:74:23:b5:89:0c:11:ef:05:ba:95:ef:9a:
3e:01:14:bd:bf:5e:4d:84:e2:f9:41:55:c9:a0:25:
da:a3:13:8c:5c:38:af:cf:9e:12:bc:ce:fa:5b:ad:
d8:fa:28:35:84:dd:8b:2f:9f:ad:a5:96:22:11:da:
1e:34:00:4e:81:61:b6:33:82:df:fe:ee:5f:68:86:
f4:ad:47:e3:6d:91:c1:0d:49:dd:f5:c3:68:f9:98:
69:dc:64:c1:ae:1e:e9:b2:14:2e:10:0c:ef:49:69:
89:5d:9c:22:7e:f6:51:2b:a4:29:1a:78:d5:84:90:
45:05:2d:d4:07:d5:17:cf:8f:c9:89:fc:ae:37:41:
ef:c4:b7:1c:03:36:14:ba:24:52:f8:10:68:5e:78:
dc:6d:5e:a6:b8:17:66:7f:87:d5:ae:75:76:d2:0c:
61:3d:55:1d:f3:d5:8f:0e:0d:9a:8a:5e:88:d5:80:
87:04:30:65:10:66:fa:f7:13:e2:4a:a9:ac:17:db:
8c:44:00:79:e1:81:5d:58:60:b4:e3:14:7d:af:38:
2b:b1:60:f5:75:1d:78:41:8d:6d:ce:01:fe:b9:b7:
22:c6:97:dc:9c:ed:4e:23:78:36:98:18:75:5a:ed:
5a:16:f5:0f:c7:fd:c7:4f:27:a2:77:3a:5f:02:10:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:77:2B:83:1D:3F:01:9E:BD:0D:85:8C:2C:96:74:F1:23:8D:FD
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/Yw13K4MdPwGevQ2FjCyWdPEjjf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.152.254.0/23
185.123.160.0/24
Signature Algorithm: sha256WithRSAEncryption
96:60:3c:50:b6:54:4c:b3:fa:8a:f0:a2:c5:28:c3:b5:52:d9:
b6:dc:75:5a:20:54:d6:28:b0:fc:59:f4:fc:f8:09:20:e7:d6:
f8:25:c0:81:c7:28:fa:74:68:a7:71:e8:bf:3f:72:12:52:c2:
d2:0b:9b:d1:b3:29:ac:66:7e:d9:d6:3a:d8:8d:8a:e7:cd:c7:
79:63:67:9a:3f:05:46:e8:68:c7:fd:79:1b:6c:5f:62:02:21:
b9:2d:56:3f:14:5d:cc:e7:9e:88:88:61:af:c6:dd:6a:13:d5:
29:9b:21:59:cc:e1:4d:aa:56:aa:28:c2:ca:6b:0f:d8:07:ee:
c0:7f:51:f6:3e:53:b6:29:c5:0f:88:a7:86:04:5a:77:54:d6:
09:6e:0a:f8:c2:c3:5a:e4:46:74:0a:c1:f2:8d:82:89:93:69:
dd:93:4f:b5:89:ec:53:2c:cd:eb:1c:2d:ed:71:fb:ed:e6:7b:
31:94:f4:3c:bd:23:57:73:22:dc:67:39:ab:35:32:24:84:6b:
28:bf:9b:8b:19:b5:7e:9c:85:40:a1:22:e9:b8:23:32:36:9a:
e6:ea:37:be:45:00:68:48:d0:bb:c7:97:ea:ec:77:19:0f:7b:
1c:dd:66:a8:5c:ef:9f:d9:a3:d8:c8:ea:15:f5:6d:19:7c:28:
15:dc:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 23:29:03 2023 by rpki-client on console-ams.rpki-client.org