Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/CM8ON_d7znrs8a24xOsWUDZJlzg.roa
File: CM8ON_d7znrs8a24xOsWUDZJlzg.roa (raw, json)
Hash identifier: muuWPQKYIIs9lN0F/Kc35uc4yBXuKIGs6EnZKxmSZNA=
Subject key identifier: 08:CF:0E:37:F7:7B:CE:7A:EC:F1:AD:B8:C4:EB:16:50:36:49:97:38
Certificate issuer: /CN=619480444f41e7f89b3c9d775c01690e14bbc553
Certificate serial: 01856C0101F8059FFBAD2D4F81D877074F44
Authority key identifier: 61:94:80:44:4F:41:E7:F8:9B:3C:9D:77:5C:01:69:0E:14:BB:C5:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZSARE9B5_ibPJ13XAFpDhS7xVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/CM8ON_d7znrs8a24xOsWUDZJlzg.roa
Signing time: Sun 01 Jan 2023 06:24:43 +0000
ROA not before: Sun 01 Jan 2023 06:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211142
IP address blocks: 185.83.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:01:f8:05:9f:fb:ad:2d:4f:81:d8:77:07:4f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619480444f41e7f89b3c9d775c01690e14bbc553
Validity
Not Before: Jan 1 06:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08cf0e37f77bce7aecf1adb8c4eb165036499738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:bd:90:5a:5a:2f:4e:ea:2c:a7:37:ce:52:
27:37:e8:ed:d3:ce:cf:d2:ca:dd:73:fd:d1:ce:dd:
7b:29:1b:ae:8c:2c:7c:3b:7a:e3:b4:ed:da:e2:81:
8e:8c:75:90:7d:ef:0f:5c:5c:7f:bd:8c:92:b7:74:
c4:5a:5d:81:4c:76:d4:2f:b9:2f:53:e3:2e:35:e4:
72:b8:04:e2:80:31:28:d6:e8:24:c5:22:7a:26:aa:
0e:8a:1d:fa:27:2b:95:03:e3:89:77:37:c4:ff:3f:
33:a2:fa:64:bc:cc:c0:4d:c6:b8:92:b0:39:bf:1d:
12:ea:6d:b1:8e:3d:0a:30:03:b2:30:04:f4:b7:91:
75:4e:16:d3:5a:86:ca:3e:b8:14:37:3e:2e:9f:e1:
4a:d3:3c:bc:df:51:54:d9:d3:39:6a:9c:9e:f4:27:
e6:78:d9:64:4f:e2:1a:67:6d:86:f1:ad:80:33:95:
09:1c:a9:0b:67:3a:32:57:b2:31:98:cc:17:c7:de:
f0:63:a7:e2:41:64:2e:f9:43:42:99:49:44:97:b1:
cd:58:9b:5f:69:b1:7b:5d:36:7f:ad:8e:6d:0c:e9:
d6:70:5d:87:2b:06:b4:81:9a:bc:21:6b:1f:a2:54:
e9:c1:7f:49:16:cd:85:67:6e:c3:4e:22:7b:c2:bb:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:0E:37:F7:7B:CE:7A:EC:F1:AD:B8:C4:EB:16:50:36:49:97:38
X509v3 Authority Key Identifier:
keyid:61:94:80:44:4F:41:E7:F8:9B:3C:9D:77:5C:01:69:0E:14:BB:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZSARE9B5_ibPJ13XAFpDhS7xVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/CM8ON_d7znrs8a24xOsWUDZJlzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/310378-5575-4619-bd6f-07fb08f31afd/1/YZSARE9B5_ibPJ13XAFpDhS7xVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
39:82:c7:e1:4b:a8:64:64:0f:0a:69:2b:5e:e4:0d:00:b3:6c:
26:f4:44:50:37:bf:00:da:13:0f:bb:1a:1c:f5:0a:ec:49:a1:
32:34:19:aa:a0:f7:b0:48:3a:a2:91:5b:c8:44:c3:e0:a5:0e:
b0:d3:b9:da:c4:85:fe:89:d5:90:ba:9b:7f:a2:bf:b6:8f:e3:
41:61:23:e9:72:b0:7a:1a:4e:38:89:92:e3:04:54:98:0b:dc:
25:8c:90:52:0f:2f:3f:77:83:55:56:5a:e6:72:9f:b6:8d:f8:
ea:3b:20:ec:43:f3:49:e4:bb:8b:4a:0a:d9:16:7a:f1:30:49:
2a:26:aa:61:8c:f8:b6:7b:db:ad:55:de:8b:82:0e:c0:51:98:
91:e7:b8:b9:8c:30:19:37:6f:9e:fe:ab:e4:5a:8c:46:b9:86:
fe:62:cc:16:35:9a:d3:ac:64:f8:60:f2:0e:f4:b7:9a:37:11:
f6:75:4e:f6:26:f1:78:62:a8:bd:f5:27:20:08:0b:10:fd:ea:
f0:32:29:ab:5b:62:2c:bd:7c:c6:ff:79:19:8f:5c:d8:a7:77:
24:cd:5b:55:c2:69:c7:16:67:12:d1:75:9a:17:96:8f:1a:9d:
7d:1b:ae:e6:28:0b:7e:1e:9a:c2:57:62:cb:89:7b:71:22:e2:
b0:59:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:58 2023 by rpki-client on console-fra.rpki-client.org