Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/idkNoJwN1PLZhaDTKAMeDxQsvfI.roa
File: idkNoJwN1PLZhaDTKAMeDxQsvfI.roa (raw, json)
Hash identifier: TeeT2t8ncqr3BsLRwwxoFujhdrWUtG3FQjAyrcAwaS4=
Subject key identifier: 89:D9:0D:A0:9C:0D:D4:F2:D9:85:A0:D3:28:03:1E:0F:14:2C:BD:F2
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 018572CCD882558395000138870EB55C1087
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/idkNoJwN1PLZhaDTKAMeDxQsvfI.roa
Signing time: Mon 02 Jan 2023 14:05:05 +0000
ROA not before: Mon 02 Jan 2023 14:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.166.140.0/23 maxlen: 24
185.166.143.0/24 maxlen: 24
185.166.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:d8:82:55:83:95:00:01:38:87:0e:b5:5c:10:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Jan 2 14:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89d90da09c0dd4f2d985a0d328031e0f142cbdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:c5:c5:e7:2d:f2:83:5f:e1:17:1d:b5:63:
aa:74:45:c1:b6:6a:92:49:d0:6c:47:0c:f3:78:fa:
1a:4c:9a:1c:b5:4d:b7:b7:52:a8:85:a1:30:43:ee:
a8:cf:17:79:ee:93:0a:ec:85:18:29:c1:9b:06:71:
7f:9c:bf:95:55:10:42:a7:31:af:98:90:89:88:e2:
ea:77:5e:c0:4f:65:fc:ed:b4:7d:4a:8d:ae:29:32:
67:c0:47:79:74:7a:4e:2f:37:d5:e2:b8:a1:aa:72:
29:83:bd:9e:5f:ca:e8:fe:c3:79:23:be:e0:2f:48:
5a:22:aa:78:f4:81:a7:c3:e7:b4:d6:76:af:8e:f6:
47:46:11:2d:80:9a:de:f3:f7:ef:a3:aa:a1:4e:4d:
ab:ad:2a:25:d3:3a:f7:60:da:2a:3e:6f:37:a5:72:
70:8e:b4:af:d7:90:12:2f:28:b5:81:22:08:29:30:
77:d4:4a:4d:48:2b:a6:54:4a:e3:f8:36:18:1e:a5:
0d:ee:84:e9:4e:a7:ed:30:24:e3:df:61:29:fc:13:
e4:90:5a:5a:a1:1e:4e:a6:e0:48:7e:91:ba:e0:3d:
b4:54:58:50:7a:06:11:7f:21:2b:a2:e5:12:42:e1:
81:64:d0:d3:b0:d9:23:2e:30:00:f8:d8:37:c6:b9:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:0D:A0:9C:0D:D4:F2:D9:85:A0:D3:28:03:1E:0F:14:2C:BD:F2
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/idkNoJwN1PLZhaDTKAMeDxQsvfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
Signature Algorithm: sha256WithRSAEncryption
58:57:45:0b:5e:9b:ea:f1:8c:0e:d7:89:49:02:d1:ad:85:df:
db:3e:22:d9:56:c9:5c:90:0c:8e:f4:52:3f:b2:64:08:9b:97:
da:3e:33:cf:63:1c:e0:84:f4:2b:cc:ff:7a:7f:30:59:17:50:
2d:15:0d:ee:98:7c:4e:db:6f:89:14:49:12:47:61:64:8e:72:
18:ba:c1:c2:5f:af:71:5a:17:ec:fe:b0:5e:d5:a4:e0:01:ba:
a8:1d:34:aa:ef:8f:a9:cd:20:18:30:8c:11:20:84:82:b1:ef:
76:fd:46:f0:f8:f4:1f:67:8e:e0:21:79:83:06:76:c0:06:7f:
47:90:05:03:00:57:97:1b:2d:44:42:9a:0d:7f:6b:d4:22:2b:
45:40:7f:cf:7d:ac:b0:bc:dc:5f:ea:53:d0:d8:54:2a:6a:54:
05:7d:3e:db:99:b8:b9:04:75:97:21:dd:72:c9:8d:cb:f4:ee:
56:09:37:15:f0:74:52:c3:c8:47:13:27:1d:38:ef:96:0b:c6:
77:7f:fc:64:14:ae:d3:8b:41:1a:a7:92:55:28:9d:45:1c:c5:
50:56:db:7c:cc:56:45:26:ef:7e:19:17:b8:e1:20:04:ac:92:
da:af:23:7f:c1:f0:82:34:65:16:66:f3:f1:a6:15:9e:57:b6:
35:df:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:22 2024 by rpki-client on console-ams.rpki-client.org