Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/c_YClbVXO05mikiyO34RHO9sCOw.roa
File: c_YClbVXO05mikiyO34RHO9sCOw.roa (raw, json)
Hash identifier: NLYPqpkDp9AJJwoO8wkT/h851HSeEu2L9Yhe9UeHaFI=
Subject key identifier: 73:F6:02:95:B5:57:3B:4E:66:8A:48:B2:3B:7E:11:1C:EF:6C:08:EC
Certificate issuer: /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial: 0185719E72423C0CB648ECFBF52B70B036A6
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/c_YClbVXO05mikiyO34RHO9sCOw.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 95.156.251.0/24 maxlen: 24
185.223.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:72:42:3c:0c:b6:48:ec:fb:f5:2b:70:b0:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73f60295b5573b4e668a48b23b7e111cef6c08ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:e8:0d:e3:b2:ee:ba:3f:0f:f0:44:c4:ae:
11:ec:9b:40:9b:1e:db:60:f5:27:74:4c:aa:79:96:
19:53:a4:93:3a:98:fb:0b:1e:b2:eb:aa:fe:10:42:
1d:eb:84:b6:73:aa:31:6d:e9:50:f1:8a:90:ce:fe:
30:0b:81:bc:24:75:03:ff:b4:33:6c:be:b4:b2:30:
f0:b8:98:5f:28:b2:d2:5f:5c:80:fd:b7:1d:b9:d5:
da:5b:23:4f:13:a8:7d:e0:ce:7e:c4:60:87:8d:94:
97:91:f4:6c:30:3f:50:2f:95:00:2b:ce:75:f4:1c:
9f:81:e5:33:55:a2:b5:d5:a6:c0:5c:44:cc:67:dd:
bd:3c:ee:58:d4:7c:88:bd:8b:17:8d:c2:94:38:70:
f7:d5:dd:cb:f2:db:ca:e9:5f:d5:21:41:a1:dc:f3:
2e:a9:5c:1f:11:ca:23:be:19:13:ce:1e:89:ce:1d:
f8:15:97:67:c9:ad:39:74:8c:71:22:3e:8b:6f:f3:
ec:98:36:8a:e7:7a:70:8d:16:c0:73:f1:30:0a:6d:
0d:ae:98:db:32:df:d7:4d:ee:b9:8a:ac:b8:1c:09:
68:f1:e0:31:c2:b6:73:04:61:c0:80:79:63:b1:03:
54:18:06:7a:ea:c6:70:5b:51:d7:9b:22:69:fd:23:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:02:95:B5:57:3B:4E:66:8A:48:B2:3B:7E:11:1C:EF:6C:08:EC
X509v3 Authority Key Identifier:
keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/c_YClbVXO05mikiyO34RHO9sCOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.251.0/24
185.223.161.0/24
Signature Algorithm: sha256WithRSAEncryption
77:eb:6d:7e:52:f8:57:6a:69:f1:71:56:51:5d:09:bb:ee:35:
6e:1f:7b:8c:d5:fa:a7:44:3b:ad:00:89:2d:0f:e4:bf:1c:9d:
1d:c6:30:8a:a2:db:f4:83:a6:1c:13:c9:80:c1:1a:9c:e7:0b:
7b:11:a3:47:c0:9d:ee:85:92:1f:39:4a:9d:dc:57:94:03:08:
26:85:76:39:24:a4:c7:b1:9f:38:18:22:34:22:a7:54:fe:8a:
f8:3a:7e:e0:e1:e4:3b:dc:14:c8:f5:9d:50:91:96:a8:50:5e:
89:a5:ce:93:f0:26:82:81:f4:a4:4a:9a:fc:85:6d:d6:6d:1a:
95:72:9f:3e:44:cc:1d:d3:ab:37:44:8a:24:18:ae:e6:d7:16:
78:1e:d2:bd:33:d0:68:01:18:86:22:be:3a:0e:64:67:33:a5:
63:71:48:94:31:9e:f5:53:d6:67:64:3a:74:17:54:22:4b:14:
a2:81:32:d8:5d:c4:7f:49:1d:5d:e2:c2:2a:b9:51:13:55:df:
f1:4f:79:7f:84:a8:56:6e:d0:03:b1:12:a4:27:4d:d2:95:39:
2d:5f:ec:fe:0e:ed:11:78:a0:a0:b0:28:77:88:c7:b6:e6:49:
e4:76:ad:b9:81:03:9a:21:61:3c:52:8c:1c:ea:bb:73:70:d8:
95:d2:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:45 2023 by rpki-client on console-ams.rpki-client.org