Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/j_yU_GMbfc-px3CKbweEAlarVvs.roa
File: j_yU_GMbfc-px3CKbweEAlarVvs.roa (raw, json)
Hash identifier: gqKX9q5DNZG0IGs/JGC+41uTPCyTUZ8cqc0gEMt/CcI=
Subject key identifier: 8F:FC:94:FC:63:1B:7D:CF:A9:C7:70:8A:6F:07:84:02:56:AB:56:FB
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 0185729EC3D7F687F03892BF5429407BE23B
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/j_yU_GMbfc-px3CKbweEAlarVvs.roa
Signing time: Mon 02 Jan 2023 13:14:45 +0000
ROA not before: Mon 02 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199419
IP address blocks: 185.16.237.0/24 maxlen: 24
185.16.238.0/24 maxlen: 24
185.16.239.0/24 maxlen: 24
185.16.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c3:d7:f6:87:f0:38:92:bf:54:29:40:7b:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Jan 2 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ffc94fc631b7dcfa9c7708a6f07840256ab56fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:5c:aa:08:61:40:0e:c6:7f:0a:77:c6:fa:
2a:fb:51:76:98:de:b4:0a:be:5e:b5:ed:98:53:5d:
fa:a0:b8:52:15:82:35:72:3a:a3:1d:bc:d9:87:90:
7d:74:9b:4e:1d:46:44:d3:e5:9c:c9:f5:dd:dd:1c:
dc:e7:ba:89:94:59:b1:bb:1c:61:16:8c:3b:a3:04:
62:54:84:e7:38:f1:03:2b:7a:e6:f5:65:ad:41:88:
f5:54:3b:06:1e:f1:46:be:17:e7:09:8f:ca:70:af:
dc:3e:9a:40:70:1e:95:a8:46:e9:53:fc:c9:e6:56:
21:54:aa:c6:7a:d9:0c:e1:63:46:c1:96:31:2d:94:
d7:8d:50:f0:97:64:d6:db:a7:1c:85:8a:c6:fa:1b:
ff:04:ca:d5:d4:6f:72:31:40:e8:cb:fb:b4:60:cb:
75:f5:2d:61:4b:a6:c9:9c:b5:6e:d6:b7:04:17:86:
cf:dd:b4:77:02:66:ad:75:f5:6e:fb:5c:8d:6e:c5:
bf:68:9c:2e:a6:e6:2a:1a:7f:78:e6:b1:16:20:78:
cd:17:b8:1e:e1:96:5e:32:38:d6:13:53:d0:e1:97:
8c:da:19:8c:91:e7:5f:53:0b:6c:4b:42:33:93:ee:
03:8f:ed:1c:19:61:f5:4b:de:d0:b9:66:b9:ac:69:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:94:FC:63:1B:7D:CF:A9:C7:70:8A:6F:07:84:02:56:AB:56:FB
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/j_yU_GMbfc-px3CKbweEAlarVvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:d5:8d:53:3d:2a:07:44:68:f8:85:73:7e:46:f7:80:af:cf:
f2:f1:1f:80:25:c9:27:31:99:72:19:4e:89:a4:1a:37:1b:b2:
aa:68:e3:f8:22:83:b9:72:ea:d5:8b:60:46:3f:ac:3a:e2:13:
a6:a1:19:a7:52:bc:ee:22:0c:e6:44:04:03:37:90:7e:67:24:
7c:d6:12:af:67:6f:8e:90:89:36:d8:a9:48:a9:93:d9:00:bb:
d6:b3:54:be:ce:42:bf:9c:bf:37:ed:62:3b:bf:19:35:6e:64:
6e:a3:3c:9d:fd:b1:ed:26:1f:b3:c9:93:fd:25:12:d3:6e:9c:
07:4d:35:c5:02:1e:ca:18:05:0d:b0:e7:42:b5:ab:54:3e:f3:
ed:a5:e9:06:90:25:36:41:4f:fc:10:d9:50:85:99:b6:1f:18:
28:30:9b:2c:a7:01:63:38:34:4a:fa:d8:0e:35:26:79:9b:f0:
7b:f5:b7:a4:19:3d:41:ec:62:c2:29:32:40:ab:b0:82:a0:61:
bd:70:e1:67:e7:cd:94:28:85:bd:3e:e2:13:5e:83:d3:43:f1:
82:ab:da:33:19:76:b8:f0:a7:c7:5e:a1:4c:40:ce:f7:e9:98:
ea:b4:7c:52:0a:02:ad:86:1f:46:62:44:de:01:df:47:f9:6a:
9d:de:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 10:06:19 2023 by rpki-client on console-ams.rpki-client.org