Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/iJIHO9HKjPuD6Jy0NbSOdO2qFDM.roa
File: iJIHO9HKjPuD6Jy0NbSOdO2qFDM.roa (raw, json)
Hash identifier: VFd7m7nGjBzv5I2MQRLcxizuqWDsMtM5oeW9bk64yDk=
Subject key identifier: 88:92:07:3B:D1:CA:8C:FB:83:E8:9C:B4:35:B4:8E:74:ED:AA:14:33
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 01856E6FC8E23DA6A3903FB5152EF629BE36
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/iJIHO9HKjPuD6Jy0NbSOdO2qFDM.roa
Signing time: Sun 01 Jan 2023 17:44:57 +0000
ROA not before: Sun 01 Jan 2023 17:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59620
IP address blocks: 185.165.96.0/24 maxlen: 24
185.165.97.0/24 maxlen: 24
185.165.98.0/24 maxlen: 24
185.165.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:c8:e2:3d:a6:a3:90:3f:b5:15:2e:f6:29:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Jan 1 17:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8892073bd1ca8cfb83e89cb435b48e74edaa1433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:83:84:55:e4:14:7b:08:ab:5c:4e:cc:78:a6:
bd:18:f3:58:40:15:86:af:84:fd:51:a6:62:6f:0d:
a8:d0:c2:85:49:8c:2e:95:23:73:18:b2:59:0a:58:
c9:e5:9c:62:f6:ad:77:40:b8:f2:72:3a:4c:2b:75:
3b:40:c8:e7:2f:4b:d5:53:d8:3b:fa:ba:29:5b:82:
e1:e3:6a:b3:23:d7:b6:4d:d0:23:cf:20:96:95:59:
92:ac:b7:9f:d1:17:3e:42:3e:76:03:3f:30:ab:92:
2f:79:b9:aa:61:f0:82:0a:6c:62:d4:07:3d:31:ee:
ed:88:00:78:42:97:33:d7:d3:ae:2e:31:00:a7:94:
96:09:cb:1e:57:7f:66:49:d9:76:0b:81:6a:52:b8:
ef:c5:16:32:df:42:6a:e8:f2:18:64:13:b9:99:0d:
d2:b8:9a:e0:84:21:aa:67:c4:d3:b7:63:60:1f:64:
b7:36:f6:c8:c5:e3:74:66:0d:82:38:1a:c1:56:0c:
b7:66:0c:eb:c0:e4:34:f9:47:41:e5:bf:fc:35:7c:
7e:8b:5d:1f:cd:2c:c6:80:e9:d1:4a:28:f9:3e:89:
4f:8a:52:26:2b:6c:18:2f:ff:dc:96:ed:a9:76:cf:
08:4b:85:8f:9a:d7:bd:b9:05:bd:92:c4:88:c1:8c:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:07:3B:D1:CA:8C:FB:83:E8:9C:B4:35:B4:8E:74:ED:AA:14:33
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/iJIHO9HKjPuD6Jy0NbSOdO2qFDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:1c:dc:8a:8e:b2:59:39:27:46:fb:8a:14:b2:10:84:ed:7e:
0c:6b:b4:a0:24:66:98:7d:b4:48:0d:fa:ce:90:dd:15:a5:6b:
9f:2e:4a:67:dc:bc:ba:1d:b3:8b:e8:46:0a:da:56:52:a8:51:
ec:29:54:23:21:8c:7b:10:08:d9:09:a8:45:d8:de:a3:0a:1b:
9c:ee:ed:e5:1e:73:71:92:a1:7f:fa:ea:0d:08:7b:5c:a1:87:
8e:7f:8e:af:83:96:97:35:17:75:08:0b:96:78:41:0e:04:16:
76:6e:9e:e5:3e:c5:75:9a:53:2b:39:a6:42:a1:2e:5c:69:30:
92:dc:06:38:a0:17:82:8d:f3:8f:58:69:a2:2a:50:ad:4a:11:
ab:d2:a4:d8:e2:1c:d1:20:69:32:1c:ee:ef:7c:ff:69:0c:c0:
97:cf:3b:83:b9:5e:17:52:d2:95:f9:7a:c9:53:f8:34:71:09:
18:2c:a6:e7:81:8b:e3:59:52:86:14:3c:01:41:9e:01:69:c2:
aa:58:74:50:c8:ce:bb:c7:40:5a:7d:7e:0b:a2:2f:82:a3:4a:
f7:64:eb:1a:3b:b4:03:cb:d3:2c:ed:5a:96:7c:5d:8e:84:a2:
90:30:48:25:18:ec:36:77:90:22:0f:51:0f:d8:d5:e7:fe:9d:
8d:da:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org