Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mY4gZyi3VMfWZxyWgdBLciPYlMc.roa
File: mY4gZyi3VMfWZxyWgdBLciPYlMc.roa (raw, json)
Hash identifier: swL3yhI4NYuqBekR19jAs4zpYyjqDFZOJU5Rd8X1zYI=
Subject key identifier: 99:8E:20:67:28:B7:54:C7:D6:67:1C:96:81:D0:4B:72:23:D8:94:C7
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0185957FDA44424B317D6904DB6AE439BE64
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mY4gZyi3VMfWZxyWgdBLciPYlMc.roa
Signing time: Mon 09 Jan 2023 07:47:42 +0000
ROA not before: Mon 09 Jan 2023 07:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 185.65.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:7f:da:44:42:4b:31:7d:69:04:db:6a:e4:39:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 9 07:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=998e206728b754c7d6671c9681d04b7223d894c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:a4:0b:dd:b5:d2:89:2f:15:30:00:9d:ba:
bb:c3:c4:aa:98:82:d1:38:8f:5b:8b:b4:cc:11:8a:
ff:94:8f:88:4b:82:20:8c:01:52:24:3e:17:eb:d6:
7d:0d:6a:20:fe:2e:61:e2:1f:c3:c1:38:b7:e7:26:
15:a7:a2:ce:d3:75:1d:6c:02:9c:bd:03:26:26:b7:
bf:5e:4c:f4:6b:5c:d7:82:27:4a:cc:0f:62:fd:31:
e4:0e:e2:e3:ec:74:04:13:86:56:4f:16:93:d4:10:
e0:0c:28:5d:14:41:4f:fa:2d:ee:80:39:14:0f:08:
49:24:66:eb:70:d2:a8:af:35:2a:f3:8b:b5:de:9e:
e9:50:5b:8f:97:46:c8:78:f5:3b:ed:2a:8e:14:0a:
7d:da:42:50:9c:be:16:d9:a0:24:06:6d:b3:81:e8:
af:ec:48:f6:20:49:e2:07:d2:88:ba:00:6a:a6:7b:
3a:f6:4f:71:a5:1f:33:55:76:14:fe:a8:4d:7f:53:
c1:b9:e8:37:5b:fa:02:9b:78:7c:60:4e:fd:1b:0f:
b8:9a:96:8f:18:3d:c5:94:66:43:95:43:69:a2:40:
e6:57:a9:7b:a6:f0:14:21:04:1c:12:ed:04:4f:a4:
d7:ac:be:20:1b:a5:51:a8:ff:1f:5b:14:a5:6d:d8:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:20:67:28:B7:54:C7:D6:67:1C:96:81:D0:4B:72:23:D8:94:C7
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/mY4gZyi3VMfWZxyWgdBLciPYlMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:58:8c:e5:4e:30:e9:b5:8c:42:e8:25:d3:dd:d9:33:31:e7:
3f:fa:62:2d:62:25:79:c5:7c:49:51:2b:9a:12:ff:d8:f1:a0:
87:b8:0d:de:58:1d:a1:1e:55:0c:ac:8a:bd:6e:d6:c7:a6:d1:
0d:ff:09:22:9f:68:7a:eb:fb:cf:f8:a0:1a:fa:64:1c:e2:01:
14:9f:4d:56:c4:74:18:8b:a5:56:5b:8d:53:0b:06:65:f0:15:
16:34:95:8a:30:26:47:55:0c:ca:39:90:a8:2c:7e:64:a0:33:
fa:83:b5:d2:48:12:19:93:87:7e:93:1c:75:93:ee:de:d4:83:
b7:b4:cf:4f:63:21:7a:52:53:4d:0b:ea:0e:62:0f:8e:44:b8:
65:f5:fa:88:a3:74:3d:67:11:40:bb:71:42:d6:71:97:77:4c:
12:4d:18:98:3e:63:aa:10:59:5c:53:99:48:a0:16:bf:21:04:
24:34:b7:00:d1:43:02:9e:d9:12:04:93:b0:a3:f1:5f:28:f2:
73:3a:35:f5:65:f6:d1:fe:c5:a6:d6:9c:bb:36:eb:44:75:2d:
67:c6:f7:14:72:87:c0:34:90:40:75:1e:fa:0c:dc:b0:83:19:
5f:b8:72:85:08:97:e0:48:bf:46:a3:15:df:d4:a3:cb:92:d1:
43:4b:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org