Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cYk4Ricyc5ugzW8rlU6LS1U4Nzw.roa
File: cYk4Ricyc5ugzW8rlU6LS1U4Nzw.roa (raw, json)
Hash identifier: bux4GsGzAdNe76Kxul7hbKznmNTk1xsPBBagYXzCp8k=
Subject key identifier: 71:89:38:46:27:32:73:9B:A0:CD:6F:2B:95:4E:8B:4B:55:38:37:3C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018755AB2D63A011EFD3494491FE1F20C740
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cYk4Ricyc5ugzW8rlU6LS1U4Nzw.roa
Signing time: Thu 06 Apr 2023 08:24:54 +0000
ROA not before: Thu 06 Apr 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 185.215.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:ab:2d:63:a0:11:ef:d3:49:44:91:fe:1f:20:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Apr 6 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=718938462732739ba0cd6f2b954e8b4b5538373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:fd:c4:75:02:b6:83:17:27:ec:a0:22:68:
56:c0:05:c3:42:97:5f:e4:40:0f:83:55:8b:0a:83:
d2:92:ad:33:63:22:42:2e:e4:26:74:b0:59:38:30:
9c:48:9b:2d:1c:ec:42:a4:4e:19:c4:3b:6b:e1:02:
c6:0e:a2:28:d2:e3:08:d9:57:02:db:b4:b3:20:a5:
f1:7e:c3:f4:5a:bc:c3:59:3f:cb:bd:73:09:59:fe:
ef:e3:8e:44:f0:3d:15:2d:e2:22:64:0a:d0:09:34:
3f:5f:16:ca:50:a4:df:d9:1f:a9:95:77:36:b6:f9:
8c:ee:12:19:d8:33:d7:68:27:b8:b2:8c:b7:be:1f:
ab:11:e0:6b:8b:98:e9:b6:ff:24:8e:d9:6a:3b:55:
eb:70:b3:d7:97:82:46:17:4b:71:bf:0e:8b:26:74:
4d:c1:a1:4f:6c:b6:4b:3a:3a:b8:f8:26:58:6d:62:
29:8d:74:0a:a8:09:3f:0e:65:94:56:62:47:2f:ae:
1b:45:f8:bf:01:d0:61:e1:92:07:48:a0:5c:40:3f:
4e:a8:ba:3b:33:ce:a8:d0:b9:35:75:8c:d4:a6:f6:
57:03:d6:39:df:1d:d6:96:76:f1:5d:07:20:92:b4:
ad:87:73:2e:6c:50:46:50:17:7b:9a:eb:15:d1:62:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:38:46:27:32:73:9B:A0:CD:6F:2B:95:4E:8B:4B:55:38:37:3C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cYk4Ricyc5ugzW8rlU6LS1U4Nzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ba:6b:f7:8e:23:31:28:e2:f4:14:f7:29:9b:36:7a:89:df:
e7:35:5b:9a:91:93:f8:63:a7:ad:c3:9e:84:46:50:58:49:98:
a4:4f:24:bf:74:ec:8d:c0:57:ff:ea:6a:ce:67:b4:ca:bc:a2:
3a:d6:3f:18:2d:af:46:d2:b5:a0:8f:b8:bc:5d:ed:bd:87:d4:
e3:a0:99:89:83:eb:b7:c8:0c:fb:29:cf:5d:cc:fe:15:95:33:
98:19:5f:07:bd:48:48:3f:ff:81:3d:83:85:d6:b8:ee:c2:ce:
84:e0:7b:44:f5:ac:94:06:fb:c2:b1:91:58:1f:63:66:a6:ce:
68:03:12:15:26:fd:cf:08:17:92:c4:2e:6e:13:43:b0:f6:e1:
42:eb:e0:69:3c:8c:dc:70:ba:82:80:3f:a8:2a:9d:e1:32:06:
e9:da:d8:82:0e:32:18:9f:e7:dd:1d:c1:13:39:28:40:87:d5:
15:cf:f9:1d:1e:e1:89:d7:25:55:00:9b:68:82:c9:2a:40:eb:
32:c5:19:f9:a3:eb:0d:39:98:9c:64:80:59:01:bd:63:40:a8:
c7:d1:1b:81:ae:db:b4:e8:45:03:41:92:a6:a1:59:c0:88:4f:
e2:1b:88:f2:8f:86:1d:1c:f7:ab:70:d4:73:f8:5e:2f:a8:b1:
07:db:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org