Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/mAYCUo_x5k9WqzRtU9rpKyYSIzE.roa
File: mAYCUo_x5k9WqzRtU9rpKyYSIzE.roa (raw, json)
Hash identifier: fnf/iKRKDy5bTUql1q/93TL+fWCu+Uj5fUzV5eyBdpY=
Subject key identifier: 98:06:02:52:8F:F1:E6:4F:56:AB:34:6D:53:DA:E9:2B:26:12:23:31
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 01856BE5BEB371677EBBFFDECDB4E45B788D
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/mAYCUo_x5k9WqzRtU9rpKyYSIzE.roa
Signing time: Sun 01 Jan 2023 05:54:56 +0000
ROA not before: Sun 01 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200049
IP address blocks: 185.38.74.0/24 maxlen: 24
185.38.75.0/24 maxlen: 24
185.38.72.0/24 maxlen: 24
185.38.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:be:b3:71:67:7e:bb:ff:de:cd:b4:e4:5b:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Jan 1 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=980602528ff1e64f56ab346d53dae92b26122331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:98:5d:53:68:97:19:c6:a9:48:6e:83:b8:
0b:62:b2:e0:1b:6e:3f:96:f3:b7:87:14:8a:7b:81:
1c:4b:87:bc:36:c5:cb:40:d6:c2:c5:35:96:a1:bf:
2a:e2:02:08:9c:8c:a1:33:cd:9c:24:11:b9:15:b7:
3c:62:b8:64:59:41:3b:cf:9e:1f:0c:27:1e:48:cb:
ed:9c:74:53:1b:a0:55:10:36:7e:2a:71:71:4e:ea:
f6:22:0f:c6:e7:3f:63:2e:f1:5f:a4:6f:67:34:ad:
80:dd:52:6c:b3:33:cb:63:32:2d:e2:16:0d:12:82:
a7:64:27:ec:3d:85:b8:73:89:1a:66:ba:d7:36:6f:
4b:c9:49:35:3f:d5:d5:15:62:2c:6f:28:0e:dd:d2:
77:3f:10:bc:92:91:9d:13:af:fa:d3:47:ca:1b:ab:
3c:e8:13:98:d5:36:51:c5:55:83:b9:3e:a8:75:28:
00:05:bc:7f:b9:59:3a:8d:f5:1d:4c:bc:a9:30:5e:
0e:d0:61:87:7b:db:0c:80:71:5b:3d:f5:74:7f:e3:
ae:15:80:21:ac:45:91:61:4f:84:f6:4d:f4:61:55:
b1:42:27:18:fc:4c:6c:d8:b9:64:17:aa:16:0a:ed:
ea:50:e9:30:d3:56:81:62:b0:00:34:09:d4:dd:0b:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:02:52:8F:F1:E6:4F:56:AB:34:6D:53:DA:E9:2B:26:12:23:31
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/mAYCUo_x5k9WqzRtU9rpKyYSIzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:97:9c:d8:f1:b0:46:a2:d1:3a:03:2f:a2:b7:1a:6d:20:dd:
95:01:21:7d:e2:21:57:1e:0d:df:a5:36:2b:1a:30:d8:d1:7f:
b0:9f:c5:e1:a5:18:62:2e:11:54:b1:b9:23:b7:b9:ff:94:84:
c6:de:87:62:f6:ef:d8:13:52:14:ae:66:fa:fb:96:70:c3:42:
45:7c:63:59:ec:8d:b6:9d:e7:41:68:f6:c4:b6:d2:1b:36:ea:
22:c3:9e:a0:2d:09:17:b0:bb:86:f3:bb:d0:da:e1:3d:ec:04:
bf:e4:13:fa:38:11:32:44:6a:93:12:30:05:3f:8a:b7:40:35:
54:1c:0f:30:43:14:f7:fd:11:f8:d9:2d:3a:33:e2:c4:7b:36:
48:ca:0f:61:c3:84:e8:f8:1a:c2:f1:7d:29:89:14:61:42:c0:
0a:e7:26:7c:dd:e5:e1:94:6e:76:e8:c6:78:f9:56:94:0e:7e:
50:9d:06:fd:9d:2f:b4:b6:e8:ee:32:84:f0:ca:c3:eb:cd:49:
c9:79:e7:b3:f7:22:d2:91:d4:20:c8:85:39:02:6a:14:20:a2:
68:6b:74:9e:df:3a:fa:04:88:00:3b:8d:3a:b3:cd:b1:a3:69:
4d:11:95:99:90:e3:fc:eb:20:0d:ed:cf:bb:9f:8c:53:6a:cd:
fc:f0:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:16 2024 by rpki-client on console-ams.rpki-client.org