Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/yhlU-70EtMspiXuWXODT8Fj2VI0.roa
File: yhlU-70EtMspiXuWXODT8Fj2VI0.roa (raw, json)
Hash identifier: p7SCDhzgIwSZuyryignw5JoetK76SfGqqENqoo+vmv0=
Subject key identifier: CA:19:54:FB:BD:04:B4:CB:29:89:7B:96:5C:E0:D3:F0:58:F6:54:8D
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 018AB1EF898DF402E974CB62C65990C2702E
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/yhlU-70EtMspiXuWXODT8Fj2VI0.roa
Signing time: Wed 20 Sep 2023 09:33:00 +0000
ROA not before: Wed 20 Sep 2023 09:33:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.236.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 13:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:ef:89:8d:f4:02:e9:74:cb:62:c6:59:90:c2:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Sep 20 09:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca1954fbbd04b4cb29897b965ce0d3f058f6548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:c1:97:a8:2f:67:8e:a5:8e:16:2c:be:d0:
10:31:b1:a7:f2:05:48:22:e2:be:cc:e6:88:83:41:
d3:d8:34:e3:e9:d3:0b:59:4f:f7:07:68:ae:ba:de:
c8:cb:5d:a5:e2:ca:a8:e6:77:30:c0:3e:90:82:18:
c7:08:e4:d9:9a:90:06:11:3e:2a:e8:20:cc:75:b9:
6b:fa:7b:54:63:97:3a:61:fb:ed:34:2d:08:5f:1f:
72:67:d4:d7:71:ec:95:1d:c5:7d:b8:b3:1e:29:44:
0e:87:ce:25:70:83:82:ef:cc:2a:fb:da:1f:4c:4e:
a4:98:af:e9:29:c2:62:16:66:b6:1c:43:15:a6:5a:
6a:e3:3c:6a:db:d7:dd:ae:ec:b8:59:64:45:1a:a0:
8d:d3:f3:8f:e1:97:d2:44:ce:11:6a:7a:34:e5:4c:
c2:ac:cd:eb:e2:ea:08:24:42:35:e9:45:50:8d:66:
aa:09:67:5c:a2:0c:a1:ba:4f:91:6f:1c:31:55:f2:
15:e2:15:b1:35:af:1f:4d:50:11:3c:6a:72:eb:33:
58:7a:81:a6:c7:bb:5a:4e:43:be:fe:1b:04:2d:4b:
94:7b:a1:48:a2:7d:1e:34:e0:e6:b2:6b:75:06:eb:
a1:a9:e6:0f:96:05:8a:89:b2:d6:90:7c:f6:ad:c8:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:54:FB:BD:04:B4:CB:29:89:7B:96:5C:E0:D3:F0:58:F6:54:8D
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/yhlU-70EtMspiXuWXODT8Fj2VI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.223.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e4:41:1e:1f:59:c7:12:a0:a7:21:51:fb:e5:f4:2a:55:69:
2e:07:e6:c6:e8:8b:dc:24:c0:c1:d3:22:6c:94:55:17:77:2f:
d6:5e:a6:21:b2:e0:2d:93:23:ff:14:bc:ef:a1:67:70:30:7c:
3e:17:db:c4:66:8c:99:0d:ea:33:70:f2:ad:07:8c:a0:4b:3a:
38:e2:67:14:be:3e:8e:19:64:15:ea:78:3c:5e:5f:75:83:4f:
6a:d0:5b:7d:36:ba:9e:65:c3:dd:ee:20:59:99:00:6c:f0:b0:
32:b6:fc:a1:92:74:92:87:fa:42:01:5f:b9:87:98:f8:85:63:
fb:eb:35:8c:68:56:e9:cf:bc:9a:0f:25:5d:99:be:b2:b0:3c:
c2:6b:de:0f:fc:83:51:d5:e1:02:92:e3:bb:b9:82:a3:7a:96:
eb:25:1f:84:95:08:e9:66:27:26:ef:f7:86:ed:67:b1:fc:3e:
3e:a2:3f:f8:13:2e:17:b7:13:80:60:e1:1f:a1:b0:f6:40:ee:
fb:6a:ae:f0:57:e3:af:0a:d7:83:52:7c:44:de:e1:9a:4f:d9:
fe:a6:dd:32:8f:a4:d2:0f:9d:d4:46:5a:50:e3:7d:a2:37:c8:
ef:16:b8:66:63:eb:97:8b:13:98:3e:f7:e3:e7:c3:07:e6:25:
0d:98:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org