Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RJXmMuM0KgOR9qSel2evt3Xs_UA.roa
File: RJXmMuM0KgOR9qSel2evt3Xs_UA.roa (raw, json)
Hash identifier: PHAp0yZY9ioamuNpT33I86yiTpKNlGLSWQK/XymgKNE=
Subject key identifier: 44:95:E6:32:E3:34:2A:03:91:F6:A4:9E:97:67:AF:B7:75:EC:FD:40
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018B1638B0D0B2CAC2B7056C61FE6CEF241E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RJXmMuM0KgOR9qSel2evt3Xs_UA.roa
Signing time: Mon 09 Oct 2023 20:54:55 +0000
ROA not before: Mon 09 Oct 2023 20:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205507
IP address blocks: 185.200.188.0/24 maxlen: 24
185.244.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:16:38:b0:d0:b2:ca:c2:b7:05:6c:61:fe:6c:ef:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 9 20:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4495e632e3342a0391f6a49e9767afb775ecfd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:fe:56:c3:36:e3:23:5d:ad:cf:5f:00:ae:
21:42:1d:8f:37:c7:86:a9:1f:35:64:d1:ad:92:57:
73:d0:14:2d:85:c9:e4:4a:4b:fb:1f:de:9b:9a:32:
ff:61:76:d3:fc:2d:41:86:dd:90:17:1b:5e:7a:19:
cc:8e:ce:2d:32:ad:de:06:62:a3:51:c3:69:68:61:
3c:e6:9f:2d:c9:f3:4b:56:bf:8c:c9:72:ee:31:c0:
37:27:31:db:a7:d5:57:66:08:13:55:c1:17:74:ee:
68:6b:ca:79:43:3d:e9:cd:40:d3:e7:f9:36:64:4a:
0a:7a:3b:f0:00:d7:e2:cd:1d:41:0b:10:3e:30:52:
9f:75:15:fc:3e:9f:8d:5d:2f:b1:69:e3:1e:82:c3:
aa:06:cf:29:4c:aa:90:49:d6:9a:02:ae:9f:7e:f3:
02:6a:a1:78:80:ee:b4:c5:5d:10:33:10:81:f7:83:
a2:61:9f:be:67:7b:97:73:93:f4:50:ca:95:c5:54:
ab:fe:ce:69:ad:fa:0c:c4:f2:ee:24:8a:2c:5a:3d:
fc:3b:2d:9d:a4:98:bb:70:58:fb:95:f3:e3:b3:d6:
53:78:08:f7:1a:ab:9f:aa:02:13:86:f1:5a:72:aa:
66:e6:dc:0f:0d:2a:65:ce:0c:50:e2:0e:8d:38:5c:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:E6:32:E3:34:2A:03:91:F6:A4:9E:97:67:AF:B7:75:EC:FD:40
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RJXmMuM0KgOR9qSel2evt3Xs_UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.188.0/24
185.244.174.0/24
Signature Algorithm: sha256WithRSAEncryption
85:85:94:50:4f:34:be:43:39:70:6d:af:47:be:0a:44:6a:d9:
8e:c9:7d:5b:e7:0b:69:b8:4d:d0:9b:57:5d:eb:02:46:d5:33:
34:25:8f:5d:0b:00:bd:c5:eb:bf:f1:20:e4:c4:06:33:f0:f9:
d3:69:26:2e:24:6e:22:61:4a:7c:84:c2:7a:55:6b:29:32:9c:
76:c0:e9:b4:5e:f6:ff:c1:d7:9d:5c:2e:5b:62:52:d0:fa:14:
d3:b8:37:f8:4b:3c:ba:f0:e6:27:f5:4b:3a:a4:e9:30:90:fa:
42:4d:16:b1:fa:4e:63:39:c6:45:04:f5:9d:cc:1b:c3:75:fb:
ee:40:40:02:fc:c1:f5:5c:4a:b0:f7:35:00:33:0d:5e:7a:20:
2a:55:bd:48:96:38:a3:17:b3:b8:fb:d5:5a:70:c2:ab:de:57:
58:fe:f1:df:69:07:1d:98:c9:32:b5:ac:56:f9:1e:db:96:48:
6a:7c:ce:c8:82:35:84:21:80:55:aa:b2:f7:cb:ec:b3:73:b6:
d2:e3:d5:7c:f6:23:6f:fe:05:2a:8d:9f:c4:ff:f0:bb:5b:03:
48:2d:6f:c0:a6:1a:ac:e7:22:29:31:c7:d4:85:e9:b5:6d:4f:
d1:ec:6c:25:1c:b5:4c:4d:1e:b3:f1:96:d2:28:61:79:69:9d:
47:77:ea:bd
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 27 19:33:09 2023 by rpki-client on console-ams.rpki-client.org