Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/myoJx1HEN5Ew4qugCFfSud1L6Xw.roa
File: myoJx1HEN5Ew4qugCFfSud1L6Xw.roa (raw, json)
Hash identifier: l3NYvyU8wPnukgyjKbxIZEcy9+4Wpg9CAKooJtJ4K0Q=
Subject key identifier: 9B:2A:09:C7:51:C4:37:91:30:E2:AB:A0:08:57:D2:B9:DD:4B:E9:7C
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 018A03F46BB9551CC65350870E74810BBB72
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/myoJx1HEN5Ew4qugCFfSud1L6Xw.roa
Signing time: Thu 17 Aug 2023 14:44:24 +0000
ROA not before: Thu 17 Aug 2023 14:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198089
IP address blocks: 185.98.124.0/24 maxlen: 24
185.98.124.0/23 maxlen: 24
185.98.125.0/24 maxlen: 24
185.98.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:f4:6b:b9:55:1c:c6:53:50:87:0e:74:81:0b:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Aug 17 14:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b2a09c751c4379130e2aba00857d2b9dd4be97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:55:80:2b:27:84:d2:cc:71:e3:4f:c6:d3:
1d:96:a0:31:20:29:5c:33:26:00:03:4c:42:3a:e5:
a4:a2:66:6a:0e:19:60:ee:8a:f2:20:96:ec:d3:80:
db:59:b2:4a:08:b5:71:f0:37:03:80:14:0e:3d:bf:
88:48:af:a3:5f:ef:dd:5b:06:8c:04:e5:c6:1b:28:
13:68:6e:aa:bd:30:06:27:13:85:c0:44:cb:cf:53:
ad:10:e3:63:5d:a2:24:c9:00:45:c3:38:f2:f8:cf:
11:86:13:bc:39:27:93:ee:64:ad:a5:67:24:2f:85:
94:60:f3:60:4f:43:87:63:46:b2:cf:a0:1a:2e:0d:
36:76:54:e5:49:57:a5:f6:f1:6a:78:88:b5:c3:63:
54:b7:f6:9d:2a:71:c6:3f:69:f5:f9:d4:08:f5:20:
49:72:b6:91:07:d7:c2:a4:48:f2:52:18:5c:e8:ea:
99:ac:57:1c:7b:66:98:b7:24:be:a6:73:11:78:c1:
fb:67:09:6f:01:0e:6d:16:fe:0e:f5:75:6e:8c:b6:
e2:0f:5c:13:06:e8:12:18:be:92:5f:e7:a2:07:1e:
f4:8d:55:14:a1:30:14:99:ca:ff:ac:e2:0b:5e:44:
2b:fd:c0:ff:e4:c4:04:35:f3:13:a4:eb:27:68:07:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:09:C7:51:C4:37:91:30:E2:AB:A0:08:57:D2:B9:DD:4B:E9:7C
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/myoJx1HEN5Ew4qugCFfSud1L6Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.124.0-185.98.126.255
Signature Algorithm: sha256WithRSAEncryption
29:a5:0d:26:4a:08:c9:e9:7b:17:e7:33:6e:c7:da:b7:69:b8:
ed:10:4a:45:7b:64:00:20:c3:bb:f9:14:6a:09:af:63:26:dc:
a4:eb:ad:fb:fe:ea:42:0c:7f:4a:25:ea:9c:f0:79:3d:11:e8:
28:ba:43:ca:1d:40:fb:0a:84:8c:ed:96:1b:d5:41:ec:c0:93:
cd:18:89:92:1c:c3:81:63:75:6f:f6:46:bb:70:9f:10:35:59:
ef:32:38:8a:8b:10:80:a9:0b:dd:e3:eb:81:5f:98:a5:a2:f9:
01:0a:d5:f4:d1:6f:9e:48:5e:a3:10:a4:ef:37:80:c6:1c:d4:
fc:84:49:21:c3:79:d3:e8:e7:6d:b1:d5:8b:21:1a:23:09:8f:
a6:fc:50:57:22:a0:13:cc:01:84:b1:6f:f2:05:dc:52:7a:81:
e9:12:0a:ec:20:20:e2:67:88:22:36:71:4d:78:7e:9e:d8:2a:
27:f5:8e:70:2b:bb:fd:5c:fe:35:39:88:be:b2:2d:5b:fb:40:
8b:59:b3:9d:f9:f6:8e:9e:c2:80:28:99:0c:27:dc:9c:e3:84:
ca:f6:01:e0:26:b3:54:85:74:38:98:f5:cc:66:01:1b:97:3a:
da:e6:37:08:d5:58:56:6b:e8:57:73:b3:cd:ef:4c:e8:fb:a6:
80:9c:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:33 2024 by rpki-client on console-fra.rpki-client.org