Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/yT-Vq7nEqkPH97IXbn_DahbhebQ.roa
File: yT-Vq7nEqkPH97IXbn_DahbhebQ.roa (raw, json)
Hash identifier: s1p68lpSJkrrXi3fmoGzzOUDbnWSgXSnYchIXxyjJyY=
Subject key identifier: C9:3F:95:AB:B9:C4:AA:43:C7:F7:B2:17:6E:7F:C3:6A:16:E1:79:B4
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E7909D03CB3799CBF07A9EB93D1DAAE
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/yT-Vq7nEqkPH97IXbn_DahbhebQ.roa
Signing time: Sun 01 Jan 2023 17:55:04 +0000
ROA not before: Sun 01 Jan 2023 17:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53340
IP address blocks: 176.111.222.0/24 maxlen: 24
193.8.194.0/24 maxlen: 24
147.189.139.0/24 maxlen: 24
147.189.133.0/24 maxlen: 24
5.183.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:09:d0:3c:b3:79:9c:bf:07:a9:eb:93:d1:da:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c93f95abb9c4aa43c7f7b2176e7fc36a16e179b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:12:83:7d:df:15:d7:45:3b:3d:66:7f:07:
26:17:01:f6:f6:9a:c8:5c:a4:02:c7:2f:62:88:ff:
db:04:38:2a:1f:13:82:c9:c4:da:53:e6:24:76:b6:
ea:c3:25:a9:1c:af:73:58:aa:28:20:80:1f:42:09:
4d:72:89:40:80:92:10:94:5a:5a:f2:c8:e1:dd:71:
da:0f:c5:59:7b:b0:a4:99:de:35:d6:be:ec:61:db:
bd:0c:4a:73:85:b7:9b:c3:d3:cd:c7:74:b1:66:43:
e6:4f:b2:9a:34:bf:4e:85:0b:d2:c2:89:c6:76:fc:
8b:70:cc:51:98:6c:d6:46:bd:ab:74:af:06:3e:23:
ea:1a:5a:6e:68:27:64:78:cb:3d:30:bd:d8:b3:3f:
f5:cd:07:e8:b9:c4:90:f9:4d:a1:ad:95:f4:8a:88:
85:fc:0c:49:71:c4:02:68:80:d9:ee:aa:2e:4f:8f:
a1:27:8a:6a:e0:e5:e1:4a:fa:6d:2f:1b:7d:85:97:
a0:4f:27:91:ce:11:6c:5e:94:0e:58:23:db:0a:9a:
8d:c8:f5:ca:85:c5:4f:9d:5c:f0:89:26:0c:ac:16:
98:9b:af:11:6a:f5:60:1c:9a:a6:4b:b1:7f:2f:23:
89:be:89:25:4c:f7:6a:43:e4:00:c2:09:12:8a:f4:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:95:AB:B9:C4:AA:43:C7:F7:B2:17:6E:7F:C3:6A:16:E1:79:B4
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/yT-Vq7nEqkPH97IXbn_DahbhebQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.77.0/24
147.189.133.0/24
147.189.139.0/24
176.111.222.0/24
193.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
65:38:7c:63:fe:63:06:71:d4:16:1c:e6:b9:59:f6:8c:26:11:
f0:48:65:be:17:d0:18:a9:19:27:6b:de:14:45:52:71:0b:de:
2e:12:ed:e9:4c:25:ce:26:47:00:2c:1b:65:c3:c2:93:0d:b7:
25:c9:d0:39:77:c4:f0:13:f4:50:10:9f:8f:62:59:3a:19:f3:
c2:9e:61:e7:15:e6:8a:b2:a6:89:20:53:fe:5b:9e:02:34:82:
fb:15:40:1d:12:1e:5e:fb:4c:43:2f:4b:9f:3c:26:d0:f0:dd:
54:c5:02:ee:29:c1:db:2f:45:40:ae:a3:9a:4f:e0:3d:f4:0b:
b8:04:09:b5:75:be:e4:b2:c6:33:3e:01:d6:4c:2e:49:67:cd:
f4:7e:6d:17:c1:2f:4b:76:dc:aa:7b:7f:87:20:49:9a:f8:bd:
6b:1f:b6:19:63:89:13:e6:1e:0c:f1:83:26:38:c8:07:c0:16:
ca:d4:ac:12:e6:c7:dc:3b:1a:0c:6f:a2:d7:9b:52:ee:3e:75:
28:29:8e:df:c3:ec:e7:35:42:25:5f:32:70:29:9d:90:8c:f9:
dd:f5:3c:f6:9c:70:c7:4a:dd:31:cd:ce:87:b7:24:cd:38:73:
60:36:1b:c7:35:81:d5:37:15:d4:b3:ba:bc:1f:91:e5:63:e8:
e7:8d:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-ams.rpki-client.org