Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/p2ztNbem-TqTuGo9YxlmDKYuupU.roa
File: p2ztNbem-TqTuGo9YxlmDKYuupU.roa (raw, json)
Hash identifier: Rktv29KclV8/J5LfyKYe9YHKONTAyArdEbhcFNgirQI=
Subject key identifier: A7:6C:ED:35:B7:A6:F9:3A:93:B8:6A:3D:63:19:66:0C:A6:2E:BA:95
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 01891CE7EA370A7B6FB94514BB8C6FBDB4FE
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/p2ztNbem-TqTuGo9YxlmDKYuupU.roa
Signing time: Mon 03 Jul 2023 17:58:28 +0000
ROA not before: Mon 03 Jul 2023 17:58:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.244.64.0/24 maxlen: 24
185.244.66.0/24 maxlen: 24
185.244.65.0/24 maxlen: 24
185.244.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:e7:ea:37:0a:7b:6f:b9:45:14:bb:8c:6f:bd:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jul 3 17:58:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a76ced35b7a6f93a93b86a3d6319660ca62eba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:0c:28:da:a8:7b:66:29:cb:92:f8:7a:08:
f6:ab:24:0d:b6:83:20:78:58:1a:51:31:76:ff:0b:
2c:e6:2f:f7:fe:5a:3c:00:90:85:08:85:2d:f8:fd:
55:62:0e:d2:45:40:0c:b3:b5:cd:96:a1:bd:91:31:
85:98:eb:83:d6:9e:e3:29:73:97:b0:08:39:94:8e:
1a:2d:be:81:64:f9:29:a9:20:13:eb:55:c4:d9:16:
47:3c:15:3c:8e:c4:05:2f:3b:65:40:bd:63:21:4e:
e6:e0:df:2c:e7:45:35:92:bf:fd:4a:68:54:f8:8b:
2b:de:fc:bc:16:e4:57:5d:2f:bf:86:5e:00:db:0c:
92:e9:ca:55:06:34:9c:5d:13:ec:20:65:11:65:91:
99:9c:97:3d:d1:1b:03:99:7b:d4:8c:4b:0b:42:77:
e9:d7:21:8f:8f:f2:72:3d:f3:88:bd:e4:8f:0b:eb:
42:25:e3:1f:90:4d:7a:06:44:2c:d7:38:0e:ef:0f:
78:24:b9:df:52:b8:d5:63:3d:72:f0:7a:c0:c5:f0:
dd:e7:61:f9:6c:ff:50:7b:fd:f0:30:c5:64:b9:bd:
59:43:9a:61:cf:64:f9:e0:85:0b:cc:a2:a5:ba:53:
32:b8:e2:3b:57:7f:79:14:a5:f6:76:66:96:91:53:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:ED:35:B7:A6:F9:3A:93:B8:6A:3D:63:19:66:0C:A6:2E:BA:95
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/p2ztNbem-TqTuGo9YxlmDKYuupU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:77:fe:bf:c7:9f:d9:3b:d1:47:bc:af:4f:cd:63:fb:bd:34:
69:82:31:e3:d4:70:c9:ee:3b:8d:3a:85:a2:2a:07:94:02:3a:
3e:ed:90:ad:d9:02:93:ce:fe:24:c8:f7:72:9d:7e:86:b3:f1:
0d:56:9e:d8:27:fc:24:71:b4:fa:e3:da:00:d4:12:60:07:16:
85:52:74:da:89:90:5e:5a:f6:97:92:e6:2e:1d:c4:1c:15:2a:
1b:0e:fb:a7:b4:fc:e3:8d:33:fa:a1:01:78:f7:3f:a9:53:28:
94:7c:1d:26:9c:10:4b:56:6c:7c:79:fc:7b:ab:ad:be:d7:04:
5c:f8:09:da:73:9f:b9:90:5a:31:dc:23:34:48:6c:c5:4c:dd:
44:ff:27:82:59:3d:e4:65:2e:ab:28:7e:1b:c9:7b:50:9b:9f:
c9:06:5d:37:dc:84:e2:33:6b:5a:4a:b1:bb:36:36:cb:c0:fc:
03:3c:a8:77:85:a1:2d:74:58:53:c8:92:8f:c7:b7:f5:81:d5:
15:24:7d:34:8c:e1:f1:12:20:2d:36:c8:de:65:02:42:d0:c6:
d0:37:9b:53:18:13:3c:2b:06:9a:7d:df:ed:4e:60:34:5d:30:
24:16:67:e3:fd:db:7c:4c:8b:e8:3c:98:c8:8e:9d:bc:aa:73:
41:6d:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:31 2024 by rpki-client on console-ams.rpki-client.org