Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/Y54NzP7_h7D_qyU0bT8ybuG0I2s.roa
File: Y54NzP7_h7D_qyU0bT8ybuG0I2s.roa (raw, json)
Hash identifier: hyHeBAODGkeizKFn9A0ow5XNLFpKnKtV1SIP2CxS60o=
Subject key identifier: 63:9E:0D:CC:FE:FF:87:B0:FF:AB:25:34:6D:3F:32:6E:E1:B4:23:6B
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 01856EB8F6B628A3D5BECC910048AB95AA41
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/Y54NzP7_h7D_qyU0bT8ybuG0I2s.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44863
IP address blocks: 185.93.185.0/24 maxlen: 24
185.93.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f6:b6:28:a3:d5:be:cc:91:00:48:ab:95:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=639e0dccfeff87b0ffab25346d3f326ee1b4236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:ac:7a:88:65:a5:87:36:e7:e4:3c:09:6b:
43:10:ac:27:d2:af:1f:a1:7b:a5:07:55:84:6f:0a:
dc:c8:5f:4a:ec:72:4a:fc:4f:f9:3c:24:c8:37:0d:
ae:a5:69:f1:53:7e:55:e0:2d:dd:10:e7:7c:f5:03:
e2:7c:5e:37:b2:44:1a:5a:60:87:46:07:f2:a8:70:
67:af:1b:fc:34:e5:77:16:ee:47:e7:86:a9:47:d9:
18:51:2a:55:7f:4c:39:49:22:a2:8a:de:e6:ad:98:
59:2f:30:e7:e9:df:e2:2a:b5:40:b8:4d:36:ed:57:
19:07:fa:03:49:04:10:ad:ab:99:a0:37:00:a4:aa:
fc:7a:00:d7:52:a9:df:15:2d:86:a7:9f:1b:2a:42:
e8:13:12:67:60:96:35:07:2d:d7:1a:0a:e4:a5:29:
a2:79:e3:21:33:4e:95:cc:f0:3d:ea:f1:62:7b:9d:
14:c9:fe:22:b1:64:41:dc:58:f1:7d:31:52:ce:8f:
76:9e:0e:33:4a:14:82:11:20:5c:ff:e7:b8:a0:e5:
7c:1c:74:c3:98:83:1d:78:57:61:6b:1b:d1:d0:2e:
a3:d8:44:5b:40:95:f2:bf:ab:79:a2:a1:31:69:db:
d4:82:10:f0:46:85:21:9d:9b:b4:82:6f:f6:f2:ea:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:0D:CC:FE:FF:87:B0:FF:AB:25:34:6D:3F:32:6E:E1:B4:23:6B
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/Y54NzP7_h7D_qyU0bT8ybuG0I2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.185.0/24
185.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3e:93:95:e2:8e:9b:61:65:dc:44:fc:8e:12:8d:92:48:c4:
44:22:1c:79:fe:85:2b:d4:80:70:cb:4e:3e:62:5a:c5:1c:10:
b3:fe:81:be:51:98:26:a5:98:0a:87:29:35:11:8b:6d:c0:87:
8c:d8:d0:f2:e6:1b:90:68:6d:31:d3:9c:c0:c4:89:6b:63:b1:
b4:d1:18:0e:f5:c3:e1:26:a5:e9:6c:44:1a:f7:cd:85:3e:2f:
ad:08:09:18:d7:65:d4:33:55:ed:c5:6f:7e:7f:79:03:25:9c:
38:bc:10:07:86:51:34:a6:53:75:b2:e8:76:12:88:bd:15:68:
c3:d0:6d:5a:23:6d:fb:1c:da:4b:4d:4f:65:71:5e:d3:1e:af:
75:1b:21:0c:2c:5e:0a:a4:55:e0:ae:1c:29:39:9c:d6:43:0a:
fc:16:81:90:f7:e9:c5:04:36:5f:1e:0c:ca:cc:48:41:bc:01:
6a:14:8c:f2:61:ed:35:9e:54:5c:cc:65:38:72:ff:df:cf:26:
41:66:c1:c8:b3:36:f1:ee:a8:ac:04:51:f3:9e:09:31:00:20:
29:ab:c9:44:03:37:c0:ab:4f:f7:92:fd:90:ae:8c:03:a1:7b:
66:21:e4:80:fd:5a:3a:52:0e:61:1f:13:12:09:d3:23:0a:27:
92:32:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:07 2024 by rpki-client on console-ams.rpki-client.org