Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/Y4EyMF3ovqFok2EmYKsDPKMcdA8.roa
File: Y4EyMF3ovqFok2EmYKsDPKMcdA8.roa (raw, json)
Hash identifier: RgVxgMELmjohRmMCJe8p12b2oysLqau1ITFzADYrA/I=
Subject key identifier: 63:81:32:30:5D:E8:BE:A1:68:93:61:26:60:AB:03:3C:A3:1C:74:0F
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 0185704297767BE0D99FEBEE21112E619C9E
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/Y4EyMF3ovqFok2EmYKsDPKMcdA8.roa
Signing time: Mon 02 Jan 2023 02:14:50 +0000
ROA not before: Mon 02 Jan 2023 02:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210238
IP address blocks: 185.132.228.0/22 maxlen: 22
81.22.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:97:76:7b:e0:d9:9f:eb:ee:21:11:2e:61:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Jan 2 02:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=638132305de8bea16893612660ab033ca31c740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:3e:84:19:4b:94:e1:3e:59:19:90:07:15:
7c:3b:96:6c:fc:4b:88:55:c7:23:23:19:3f:29:49:
a0:0d:eb:62:24:3d:93:6b:da:f3:36:d0:90:d4:5f:
18:b9:ba:9f:44:bc:66:ba:25:39:0f:f6:c6:df:78:
71:94:56:a6:6b:17:d3:ff:fd:1a:2c:9b:d4:27:03:
73:27:34:5b:d6:ca:5a:48:4d:b9:69:85:73:4e:a3:
04:e8:6b:3e:5a:7f:1a:b0:f7:71:db:72:50:a6:e9:
34:11:6d:4a:0d:60:72:fa:0a:e8:1a:d3:82:0d:57:
9f:84:c0:c1:9b:9c:22:5f:ce:e7:b0:23:8c:05:5e:
5d:41:83:f3:4d:88:16:9d:85:2d:22:5d:22:89:31:
5a:91:e3:25:51:c2:96:0e:b1:ae:91:88:7d:e2:f4:
f2:2f:bd:16:c3:57:e2:26:bc:dd:c4:60:1f:08:a3:
64:c5:fe:42:78:21:38:29:dc:e3:55:44:a4:8a:53:
e2:d5:27:07:93:52:02:49:96:cf:09:1f:b8:c6:87:
0b:cb:f9:40:de:da:7d:64:50:53:b8:f6:ae:73:66:
48:d5:00:a0:10:86:18:b6:7a:6d:a2:ec:57:48:fb:
4f:c6:e2:62:e3:6b:b1:43:af:c9:7d:13:16:32:db:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:32:30:5D:E8:BE:A1:68:93:61:26:60:AB:03:3C:A3:1C:74:0F
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/Y4EyMF3ovqFok2EmYKsDPKMcdA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.224.0/22
185.132.228.0/22
Signature Algorithm: sha256WithRSAEncryption
85:77:1c:a8:3b:48:db:d8:3d:dd:30:e6:9e:79:0a:6f:bb:c3:
ce:2a:d3:44:f5:dc:bc:53:e6:f6:83:55:5a:ee:4f:95:42:f9:
69:39:f7:ab:bb:e2:d6:1c:9b:29:4f:0f:52:6f:a2:03:5b:05:
17:aa:2b:a4:11:a1:e6:9b:66:fa:77:4a:86:b4:42:7a:99:3e:
88:5c:f2:37:37:77:47:a1:00:c4:01:c3:d3:dd:82:0a:19:07:
0d:f7:b2:27:cd:2c:c4:83:e0:94:79:9f:75:1a:3f:67:c2:25:
4b:f0:de:87:76:1c:34:06:76:bb:72:55:dc:f1:49:0f:79:4c:
55:de:fc:03:19:6a:72:13:38:88:42:33:c0:d4:2f:0b:e7:3c:
8b:54:d9:78:d0:e4:28:55:5d:53:74:01:e4:6d:4a:48:89:17:
d5:ee:58:69:52:8a:d3:70:15:d5:ee:e5:08:e6:7c:79:47:89:
33:20:a7:23:dc:22:c0:15:9a:02:6e:ed:dc:b1:64:16:ad:1e:
3a:e3:f1:eb:c6:43:bb:a3:0b:c3:79:f0:f7:c4:a7:5e:a2:77:
2f:d1:6d:a9:98:67:45:44:30:6d:90:bd:a5:5c:77:01:bb:ca:
12:3d:38:6d:92:ad:d8:c8:09:be:bf:c9:4d:d4:6d:2f:e8:75:
23:54:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:15 2024 by rpki-client on console-ams.rpki-client.org