Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ywePnKzq7gaNG2jXmCqIOnIvkNM.roa
File: ywePnKzq7gaNG2jXmCqIOnIvkNM.roa (raw, json)
Hash identifier: gMc0/YU/uziPGllSbaa+JntJ3ZibrFZ+3CivYZhkbMY=
Subject key identifier: CB:07:8F:9C:AC:EA:EE:06:8D:1B:68:D7:98:2A:88:3A:72:2F:90:D3
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D4189BEBC10C55B6E619791C44B7F14
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ywePnKzq7gaNG2jXmCqIOnIvkNM.roa
Signing time: Sun 01 Jan 2023 12:14:49 +0000
ROA not before: Sun 01 Jan 2023 12:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13008
IP address blocks: 185.86.27.0/24 maxlen: 24
217.175.205.0/24 maxlen: 24
185.86.26.0/24 maxlen: 24
217.175.204.0/24 maxlen: 24
185.86.25.0/24 maxlen: 24
185.86.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:89:be:bc:10:c5:5b:6e:61:97:91:c4:4b:7f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb078f9caceaee068d1b68d7982a883a722f90d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:ae:11:9d:74:2c:89:ac:61:e8:b0:69:92:
e7:4a:24:d8:5e:10:68:d4:0e:52:1d:de:1a:e5:92:
e9:af:7a:20:5d:fe:de:37:50:a5:14:b0:9d:f7:95:
3f:79:41:7d:f5:a2:30:b7:ce:57:32:04:6f:27:30:
0f:54:26:8d:fb:96:14:e3:19:18:17:d3:23:4f:d2:
6f:8c:a6:e6:a4:8a:d0:af:db:c1:e3:4c:76:ee:5b:
d0:38:2c:5f:61:52:1c:1c:e3:9d:7c:5e:91:81:7e:
64:b4:32:cf:1b:ef:95:65:e4:b7:6d:ab:d9:91:1d:
0f:83:ed:c2:77:c8:40:44:1d:aa:e0:83:ba:ec:b0:
e0:33:3e:d1:ed:2e:cc:55:5a:ac:0f:a6:f0:82:59:
02:59:1c:e7:df:20:00:d2:98:2d:8e:19:1f:bd:99:
32:fb:1b:94:71:7a:e8:9e:53:87:69:8b:23:08:9d:
49:82:b0:08:14:7b:72:1e:dc:a7:3a:48:69:e3:d1:
91:37:05:4e:64:b4:b2:b1:8d:56:bd:d3:5f:5a:d5:
21:6d:39:8e:2a:e7:91:60:da:f3:ac:a3:5a:a9:4d:
79:70:af:12:2f:e0:7a:8a:cc:58:1a:91:43:2f:21:
3e:b2:9b:95:7e:71:90:ba:ea:84:d6:b1:2e:d8:8b:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:8F:9C:AC:EA:EE:06:8D:1B:68:D7:98:2A:88:3A:72:2F:90:D3
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ywePnKzq7gaNG2jXmCqIOnIvkNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.24.0/22
217.175.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:9a:c4:38:6b:40:69:57:6e:bb:c2:91:99:fe:c9:bb:f5:58:
c4:ed:ec:08:d1:0d:fd:8f:60:c0:b7:df:41:5d:ce:47:5f:8a:
c8:e4:05:6d:36:a5:37:4d:35:63:b3:b7:24:ba:59:60:b2:b7:
cc:da:48:40:f0:d9:41:d1:92:69:7f:5e:d0:c2:1a:56:33:53:
07:fc:09:04:8a:07:4f:00:9d:ff:c2:e0:c3:04:12:ad:2c:87:
e0:2f:15:1a:9b:8d:7a:27:0e:c0:85:81:58:e0:dc:a6:fe:56:
55:89:0e:dd:3f:af:86:8e:56:7d:e2:4a:15:27:b6:86:04:df:
11:2e:31:9d:fa:e7:8b:0a:c6:cb:85:60:00:3d:b7:c9:48:fe:
2b:94:2e:5e:d8:a8:be:9f:9a:f5:5f:26:1d:a4:6c:b5:35:f4:
21:49:91:db:ac:92:97:a9:00:52:51:bd:20:d2:02:3c:8c:2d:
0d:a0:20:9c:24:78:9d:d1:a2:9e:11:e8:6b:2d:19:68:8e:f8:
cf:a2:02:c6:ea:52:2f:68:98:55:32:f8:ef:0c:f6:34:40:92:
68:89:7b:9b:fd:e6:91:a8:8b:c2:ab:1b:6b:43:d3:70:a6:0f:
90:1f:7f:33:83:69:78:d6:72:84:30:53:ec:a6:df:c5:43:cc:
e8:8d:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:27 2024 by rpki-client on console-fra.rpki-client.org