Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/hyRMONue9bue3IeRg9-i8oZXoso.roa
File: hyRMONue9bue3IeRg9-i8oZXoso.roa (raw, json)
Hash identifier: nsKGcPteFSoMKayX5cXl41GS+Op16zTJcFxAigR2T5Q=
Subject key identifier: 87:24:4C:38:DB:9E:F5:BB:9E:DC:87:91:83:DF:A2:F2:86:57:A2:CA
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01890B7D29C733AC82BB9FAB7959DB3F68D3
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/hyRMONue9bue3IeRg9-i8oZXoso.roa
Signing time: Fri 30 Jun 2023 08:48:19 +0000
ROA not before: Fri 30 Jun 2023 08:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203936
IP address blocks: 185.238.84.0/23 maxlen: 23
185.238.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:7d:29:c7:33:ac:82:bb:9f:ab:79:59:db:3f:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jun 30 08:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87244c38db9ef5bb9edc879183dfa2f28657a2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:28:60:51:21:01:9f:39:6f:2d:b8:b0:a3:
46:16:54:41:05:8e:d9:20:94:53:22:cb:2a:fc:17:
1e:3e:61:2f:f0:b4:d1:60:56:de:bd:a3:38:c1:0a:
a6:11:66:d6:6b:e7:9d:49:e9:fe:92:5e:0c:63:38:
c7:a6:e5:b2:09:bf:30:7a:47:d6:1b:d2:85:31:17:
0e:80:97:03:bd:de:8f:05:85:ce:06:bd:a7:48:40:
f4:31:ac:20:78:51:f0:03:10:be:45:9a:ec:ce:17:
ad:3a:ba:a2:3b:58:47:73:e4:38:2a:ec:8e:b7:1a:
86:e0:f7:4b:f8:07:89:59:39:bf:67:a1:e3:96:fa:
90:68:83:05:05:5b:c9:cb:e8:fd:5f:1f:6b:a0:08:
1f:32:57:96:f4:ab:80:19:66:e9:bb:b9:9f:5a:cb:
20:03:f7:40:d6:82:96:60:67:51:25:0d:5c:ca:bc:
db:76:0f:5f:4b:18:1d:a3:42:80:73:ee:ab:87:a6:
b3:c0:7e:0d:4b:24:f9:bb:36:99:a5:71:ca:0c:a6:
7b:aa:ed:7f:0b:71:8d:ba:15:44:1f:b0:ac:66:5e:
8d:a0:49:f9:ee:fa:88:d9:10:8e:62:3f:8d:45:45:
0e:0c:cd:24:7f:62:4b:3f:dc:c1:cc:44:23:ac:c7:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:4C:38:DB:9E:F5:BB:9E:DC:87:91:83:DF:A2:F2:86:57:A2:CA
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/hyRMONue9bue3IeRg9-i8oZXoso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.84.0/23
185.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bf:dd:9c:4e:4a:ac:9f:93:ad:c9:58:e0:f2:27:33:59:47:
63:8e:82:c5:b9:25:6d:d0:a3:32:08:c4:9c:ed:7c:2f:53:25:
84:63:54:b4:d5:95:68:91:bf:54:79:f2:3b:de:a5:a1:d4:e8:
8c:84:79:9a:2c:fa:c2:53:40:5f:59:02:2a:db:a8:68:f8:25:
e3:d4:b7:ca:ec:73:a4:bc:6f:e5:d7:22:ce:07:ed:03:39:57:
fa:d2:47:74:d8:7a:ea:90:1d:9e:96:d1:3c:58:da:f6:5c:4c:
1b:82:3c:85:9c:b2:42:86:84:02:c9:55:a7:2d:74:6f:fe:72:
2c:83:d9:a2:86:42:6e:ff:d8:0a:ef:40:06:8d:fd:04:72:ef:
27:51:38:e4:d7:f6:a0:44:35:ad:2f:a9:a1:86:f2:50:67:ea:
3a:45:34:61:89:e9:2a:98:47:6d:a0:d5:f4:3d:3c:6d:37:be:
21:7f:06:28:65:55:11:2d:18:18:15:72:b2:b4:11:d1:03:28:
23:95:f0:bf:a7:3e:20:f6:ee:f4:e8:74:86:4c:3f:b3:b5:b5:
6f:21:06:5a:69:1c:bc:53:99:b6:34:1e:b0:aa:82:fb:13:2f:
46:31:63:3b:cc:99:5c:6a:2a:2d:96:4b:a4:76:34:ee:cb:ce:
1e:61:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:14 2023 by rpki-client on console-ams.rpki-client.org