Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/iY8mXr59-DITo6l2oDue1AOfeQk.roa
File: iY8mXr59-DITo6l2oDue1AOfeQk.roa (raw, json)
Hash identifier: DIOJK3vhZt3EGVP7cIKyIXUtsW2rjvJLDaCHoCjH5go=
Subject key identifier: 89:8F:26:5E:BE:7D:F8:32:13:A3:A9:76:A0:3B:9E:D4:03:9F:79:09
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01856E266994AA5A4A0CEFAAF131F379F6F8
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/iY8mXr59-DITo6l2oDue1AOfeQk.roa
Signing time: Sun 01 Jan 2023 16:24:49 +0000
ROA not before: Sun 01 Jan 2023 16:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39535
IP address blocks: 185.183.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:69:94:aa:5a:4a:0c:ef:aa:f1:31:f3:79:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 1 16:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=898f265ebe7df83213a3a976a03b9ed4039f7909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:79:38:6e:97:35:bc:57:c8:79:af:67:f9:
6f:99:11:e1:b6:86:c0:a0:2d:b0:38:83:f0:08:59:
7c:1d:44:43:ca:b8:85:a6:cf:b2:bb:bd:f0:78:ec:
85:de:b7:52:cb:50:e4:44:78:ef:12:4e:13:6a:7f:
7c:89:28:c8:74:0f:c6:1d:13:53:e1:fe:6b:a8:65:
3b:9c:38:2b:79:6b:43:02:77:ce:7f:98:30:71:12:
0d:b9:e8:87:4b:35:5b:ca:c6:e2:bc:41:a3:e5:bd:
dd:c5:c7:fd:0a:62:6f:34:a7:45:91:41:07:46:e6:
7c:a2:29:f6:6a:2d:15:86:d0:64:a4:02:da:7a:e1:
ac:b0:25:54:9e:84:03:62:a1:fb:96:1b:26:85:7d:
07:48:0d:0f:2b:2c:0c:48:0d:b1:b8:92:45:54:ba:
3e:da:3a:24:aa:5d:de:09:c0:fe:dd:04:e6:7d:a2:
61:8d:b7:6a:f4:85:61:d0:a2:14:46:3a:84:00:48:
1a:7a:8d:c2:18:bf:76:d0:c7:49:77:d2:cf:d2:f3:
ff:a0:e1:f6:e0:5a:25:99:69:0d:f2:2e:e8:1c:fc:
23:6f:3f:4b:c2:cb:57:ab:3a:b8:6a:da:4a:c0:93:
e2:85:c4:d3:3d:de:e0:f1:2a:97:04:6f:29:c2:ab:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:26:5E:BE:7D:F8:32:13:A3:A9:76:A0:3B:9E:D4:03:9F:79:09
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/iY8mXr59-DITo6l2oDue1AOfeQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ee:5b:26:19:e0:78:a1:77:60:40:48:4e:9a:70:b7:1f:43:
ee:0c:13:f0:08:2d:d2:2b:44:20:4e:80:42:54:a8:b2:54:0f:
4f:c8:f3:13:17:60:be:53:1d:b4:1a:1b:2d:05:f1:e7:d0:f8:
3e:56:07:49:3e:45:7d:9b:f8:a3:99:3d:bb:84:2b:9b:f9:14:
05:2d:f2:07:7d:5d:d6:60:31:5e:c8:f8:09:2f:28:06:10:4c:
e3:e8:12:df:22:b6:72:e5:64:b0:69:84:3b:5a:6a:23:0f:64:
32:78:1b:d9:25:f3:73:5e:23:88:04:68:1a:82:44:0d:b2:e9:
34:ba:87:32:2a:c2:a3:fe:a3:ff:2c:ee:9b:d8:92:97:57:6f:
9d:3f:4a:84:89:16:22:15:4e:5e:53:05:94:66:61:e9:5a:26:
a6:4d:40:39:d2:0a:79:80:e2:88:19:22:9b:7d:99:1f:f1:99:
51:93:27:30:25:f4:0c:a7:98:ce:cf:fe:ec:a2:3a:41:4d:f5:
77:42:b3:35:a4:a1:1d:31:ea:2b:20:a5:d0:e4:1e:41:ed:89:
14:11:9f:06:a1:69:b5:7a:ec:b1:28:48:b9:07:43:eb:ce:7c:
8a:84:a7:6b:fc:a2:d1:0d:2b:39:37:96:e8:9c:f6:e2:59:61:
ff:67:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 01:12:08 2023 by rpki-client on console-ams.rpki-client.org