Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DpOfXMUVegySAk_uL37r-WaCR6c.roa
File: DpOfXMUVegySAk_uL37r-WaCR6c.roa (raw, json)
Hash identifier: tn8js+q0lSwdIdTB0+YTA1vTqfnRYtuKiXXhY6068NM=
Subject key identifier: 0E:93:9F:5C:C5:15:7A:0C:92:02:4F:EE:2F:7E:EB:F9:66:82:47:A7
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DCBF7EA7AEB34837CC58D2B37EE6F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DpOfXMUVegySAk_uL37r-WaCR6c.roa
Signing time: Sun 01 Jan 2023 20:55:01 +0000
ROA not before: Sun 01 Jan 2023 20:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.254.72.0/24 maxlen: 24
185.213.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:cb:f7:ea:7a:eb:34:83:7c:c5:8d:2b:37:ee:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e939f5cc5157a0c92024fee2f7eebf9668247a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:b3:54:8e:76:fd:10:c5:82:5e:2a:e6:af:
26:cd:cf:d8:76:5b:b9:3e:08:5d:a1:98:ac:60:11:
b0:67:1b:39:0d:79:07:fc:f5:03:ce:1e:fd:d9:a0:
b9:d2:2f:4e:04:6d:8c:b5:93:89:53:60:f4:3e:a8:
60:26:c6:17:d1:ed:58:54:a6:b1:f1:75:31:74:ea:
c2:b5:b8:d4:3e:70:81:61:40:d5:1f:e7:70:9f:9b:
15:8c:25:3f:87:fe:ac:ac:2d:e9:5e:ac:70:b4:e6:
53:f3:af:a2:af:57:20:ea:3e:05:26:f6:e9:92:76:
e8:5d:2b:d0:af:a9:f4:16:00:3e:df:c1:a3:0e:11:
5e:5a:7c:e4:d2:a1:85:04:64:5d:42:86:85:30:66:
3f:e6:b9:66:65:92:cc:3b:31:51:f7:67:c7:d1:bc:
93:06:fc:14:5f:00:93:b8:06:8b:f4:fe:6e:89:c8:
8c:e8:1f:0e:19:c3:4b:70:d0:ff:83:69:b6:7a:4a:
c7:eb:88:a3:49:26:d2:c8:8a:dc:4e:dc:5f:82:2a:
90:2c:62:e3:86:a6:74:a5:2d:46:66:e4:e1:11:76:
5c:bc:3e:33:0a:39:f7:88:ef:9d:ed:91:4b:c1:8f:
6f:f1:d7:a3:ae:a5:d7:d2:0c:17:95:17:60:74:64:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:93:9F:5C:C5:15:7A:0C:92:02:4F:EE:2F:7E:EB:F9:66:82:47:A7
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DpOfXMUVegySAk_uL37r-WaCR6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.150.0/24
185.254.72.0/24
Signature Algorithm: sha256WithRSAEncryption
98:65:d7:15:81:6b:88:27:f8:2b:88:00:c1:f2:e5:ef:2f:e8:
96:7f:65:7f:9d:1e:8e:49:bb:6a:f7:a7:a6:88:d2:df:21:59:
c8:89:6c:34:cc:b7:de:82:93:12:76:c6:2d:ed:5b:16:85:ac:
b7:f0:ad:e5:77:e0:96:fd:5f:9d:99:95:e7:70:c8:af:51:25:
32:d2:10:b0:c8:b5:74:22:ca:51:fa:5d:38:2b:7c:4e:21:ed:
d3:87:bd:28:75:3b:00:6d:6c:39:4e:64:f4:5f:cb:69:11:b4:
31:99:e0:c1:c7:31:66:df:01:14:38:cd:6d:62:8b:93:66:c3:
15:82:54:6f:29:ad:e0:08:39:97:aa:07:3f:a9:bc:f5:56:ba:
80:60:17:62:66:34:a4:f3:9c:c7:d6:c6:51:df:55:a7:37:48:
82:1c:a8:30:84:dc:b9:54:4d:3f:c1:62:6e:86:e6:5e:59:4e:
5b:db:0d:99:77:c8:c8:9b:b2:1e:a8:61:05:27:63:80:14:bb:
1c:45:3c:aa:61:fa:a2:cb:9e:f5:66:f2:0e:ca:5f:50:30:00:
07:c0:b4:af:7d:3c:a7:04:4d:6c:fd:6f:1e:8e:2e:47:1b:48:
90:51:b4:e0:2a:2f:1c:4b:07:0c:e9:40:c7:7a:6c:e0:50:85:
33:a5:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:42 2024 by rpki-client on console-ams.rpki-client.org