Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/_yGy5fBukTvnDFXTe-l0NjaKfWg.roa
File: _yGy5fBukTvnDFXTe-l0NjaKfWg.roa (raw, json)
Hash identifier: H93Fxh2kuhaF0mzrW6EkWCKMahz6xatmDwQ/D8Ow/Jg=
Subject key identifier: FF:21:B2:E5:F0:6E:91:3B:E7:0C:55:D3:7B:E9:74:36:36:8A:7D:68
Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Certificate serial: 01856CAF291AC3B7261354B1A2BF6A7080CE
Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/_yGy5fBukTvnDFXTe-l0NjaKfWg.roa
Signing time: Sun 01 Jan 2023 09:34:56 +0000
ROA not before: Sun 01 Jan 2023 09:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202735
IP address blocks: 185.155.238.0/24 maxlen: 24
185.155.237.0/24 maxlen: 24
185.155.236.0/22 maxlen: 22
185.155.236.0/24 maxlen: 24
185.155.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:29:1a:c3:b7:26:13:54:b1:a2:bf:6a:70:80:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Validity
Not Before: Jan 1 09:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff21b2e5f06e913be70c55d37be97436368a7d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:28:71:2d:ca:56:3d:c1:1f:29:93:21:c4:
bf:ac:5f:8e:f2:eb:d1:0b:86:0b:df:bf:10:9b:bd:
30:1f:1e:96:26:71:81:50:55:2a:6a:31:bc:0d:ea:
8e:62:bf:bc:b0:90:05:3f:bb:2a:59:59:4c:44:df:
37:11:ee:4a:98:ba:f3:24:b1:99:f9:2b:74:82:3e:
d1:16:a4:11:e2:69:e6:45:4b:d9:0f:68:54:fe:c9:
52:5f:6d:4f:b5:1d:27:62:8a:0a:a0:5c:2a:41:7c:
35:0b:30:b2:3b:05:1f:95:7d:50:e5:bf:b3:1e:70:
6d:bc:3e:1b:0b:2c:e5:94:60:a3:8e:fe:b8:32:f4:
49:28:7a:a2:7e:eb:5d:5f:26:79:e8:77:96:14:41:
eb:a6:c3:fc:3c:dd:1e:4f:8e:33:46:c9:79:c6:a3:
43:f2:9d:d2:66:bc:75:55:1a:f7:3f:79:4e:31:89:
a4:95:58:0b:fc:c2:8c:0b:5f:46:cf:7e:a5:79:fb:
ba:cc:27:33:f8:f5:11:18:05:1b:0b:f1:60:6e:42:
51:12:8b:b7:15:b4:74:57:cc:cc:8b:65:77:e7:1a:
61:30:c2:15:2a:fa:8a:92:de:0f:8a:61:d5:b5:53:
67:51:4c:a4:2e:b6:6c:07:e8:29:ba:3a:84:ab:b9:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:B2:E5:F0:6E:91:3B:E7:0C:55:D3:7B:E9:74:36:36:8A:7D:68
X509v3 Authority Key Identifier:
keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/_yGy5fBukTvnDFXTe-l0NjaKfWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.236.0/22
Signature Algorithm: sha256WithRSAEncryption
65:26:c8:2f:da:7a:86:7c:c9:25:99:75:ae:c8:87:b4:87:47:
55:b1:61:6a:9f:4f:29:75:c8:40:c5:d6:4d:1c:47:43:6e:e3:
38:ad:c9:1e:89:c7:ea:de:5b:82:c7:29:ed:4e:3a:b1:41:d1:
cf:ba:d3:ae:7a:c5:07:ab:f1:c4:8d:4f:80:4a:2e:f4:0f:08:
28:01:22:f0:67:40:cc:85:57:6b:df:b4:b0:ad:d1:be:a0:13:
c1:1b:2c:e3:22:2d:cc:2d:59:3a:10:c8:08:29:5a:4d:b2:dc:
26:2e:88:1c:f1:ac:47:ec:73:59:b2:1f:9a:70:66:f2:60:62:
cb:e4:9e:65:9c:53:38:87:e0:6e:2c:d9:64:dc:ed:52:76:a2:
08:12:06:18:96:29:76:26:85:46:00:6e:23:13:76:33:c7:b9:
11:d9:98:9d:97:c7:ce:4a:2a:67:56:b7:cd:60:3e:a5:af:54:
c9:8c:3e:d0:e5:8f:f9:76:4f:4f:9d:32:90:a2:d0:3c:9d:a1:
a5:b1:bb:c6:7b:d0:13:0f:af:86:ac:4f:f4:30:e6:fa:c4:a0:
8b:41:32:8d:02:4a:67:05:5b:b5:ed:69:37:0f:79:7f:90:51:
9d:1b:17:2f:67:fc:7c:7e:6d:8c:89:46:6c:bf:bf:3c:1c:9a:
e2:aa:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:41 2024 by rpki-client on console-ams.rpki-client.org