Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/iOk95-y_-qRUEg8NfFlsaPyYXlU.roa
File: iOk95-y_-qRUEg8NfFlsaPyYXlU.roa (raw, json)
Hash identifier: BRcwJI/RU3K/Wh6hujAmZl1T6CDeUmxMjx3h55rPOWc=
Subject key identifier: 88:E9:3D:E7:EC:BF:FA:A4:54:12:0F:0D:7C:59:6C:68:FC:98:5E:55
Certificate issuer: /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial: 01856D9D00A0739C7DE662303808D2F57FE5
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/iOk95-y_-qRUEg8NfFlsaPyYXlU.roa
Signing time: Sun 01 Jan 2023 13:54:43 +0000
ROA not before: Sun 01 Jan 2023 13:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51952
IP address blocks: 185.183.198.0/24 maxlen: 24
185.183.197.0/24 maxlen: 24
185.183.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:00:a0:73:9c:7d:e6:62:30:38:08:d2:f5:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
Validity
Not Before: Jan 1 13:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88e93de7ecbffaa454120f0d7c596c68fc985e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:6b:84:47:04:b2:15:b5:e7:0d:45:9c:b6:
ec:5d:77:d7:de:39:e5:9f:75:93:f4:2a:5a:61:7c:
46:80:64:0e:f1:86:95:6f:22:67:5c:da:4b:44:bd:
49:ba:b9:5d:07:32:46:56:81:0f:26:a6:bf:00:8f:
2f:31:7a:fe:96:e4:05:f2:d0:6e:e2:b7:7e:14:c9:
46:6f:aa:db:65:dc:78:e0:67:88:d1:88:a0:bb:97:
1c:f2:f0:97:b3:0a:32:40:5f:b4:d1:28:df:95:29:
d0:08:75:c8:31:eb:2b:19:67:5c:6c:85:dd:6c:2c:
11:9f:6e:09:24:9e:4c:49:40:67:85:32:d1:ff:e2:
c9:df:e9:40:21:a5:8c:f4:46:3f:f6:37:26:b9:8f:
ac:30:b2:89:82:72:a2:8a:6b:12:f8:77:c1:2d:44:
4c:e2:2d:03:97:08:7e:e5:6b:15:f9:53:0b:af:6e:
95:15:19:63:6c:dd:a2:26:51:12:17:26:f9:f5:a3:
ee:90:b8:b9:59:59:f7:7c:ec:48:1f:04:67:30:73:
95:81:1d:29:aa:08:4d:e3:15:38:57:8f:65:9b:0f:
5b:79:1d:85:a3:ee:35:87:91:de:44:02:8b:02:38:
73:7e:54:0a:48:e1:96:fa:76:4f:8b:a9:f3:59:9a:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:3D:E7:EC:BF:FA:A4:54:12:0F:0D:7C:59:6C:68:FC:98:5E:55
X509v3 Authority Key Identifier:
keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/iOk95-y_-qRUEg8NfFlsaPyYXlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.196.0-185.183.198.255
Signature Algorithm: sha256WithRSAEncryption
42:7c:bb:07:d4:ef:49:d1:00:fc:55:a1:dd:ab:0a:2e:8d:dc:
99:e3:2b:c0:e8:10:2a:d8:0c:5f:5c:ea:82:56:78:d5:f1:13:
d6:22:53:9c:95:f0:e6:a5:38:81:2c:53:41:e6:ee:ac:fe:01:
53:75:d2:fd:97:f8:d3:ea:48:53:df:a9:a1:cf:10:4b:4a:ea:
9e:e5:62:51:70:65:08:75:0d:64:6c:66:e9:b0:1f:fe:d9:ce:
e8:fc:33:7d:85:28:82:16:c3:ed:2c:c0:18:1d:3c:e0:ed:26:
c8:f2:46:21:44:23:b8:a4:d8:15:5d:17:46:42:43:6b:6d:d2:
7c:5c:a0:41:4e:14:c6:1f:32:2a:0c:3c:4d:cd:4f:6c:41:b8:
0b:42:33:5e:b8:0d:7b:7c:c8:1a:aa:ca:b3:65:44:b3:94:f2:
b7:be:da:c3:66:72:98:cd:f1:06:59:2a:00:77:04:c9:30:e6:
83:84:c7:24:19:eb:10:0c:ce:ae:9b:a9:ed:fd:dd:0e:6b:26:
5e:ca:08:8a:60:e2:e9:57:4f:1a:cf:e0:81:7a:aa:a3:b6:65:
dc:98:49:fe:01:0e:9b:4a:4c:8d:7c:c2:09:bd:28:a8:a4:a0:
aa:34:8f:f5:06:65:02:86:12:27:24:9b:d4:a7:2b:1a:34:e2:
04:36:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:32 2024 by rpki-client on console-ams.rpki-client.org