Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/yDJytjg_a2z5FsdHlh7Kcp20M0Q.roa
File: yDJytjg_a2z5FsdHlh7Kcp20M0Q.roa (raw, json)
Hash identifier: K53GYtB30CEl8NHhC8k2oCXmckWpV3z3BI2LD3z/noE=
Subject key identifier: C8:32:72:B6:38:3F:6B:6C:F9:16:C7:47:96:1E:CA:72:9D:B4:33:44
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 01856F1D96C23C215E95846E4BA471941A4D
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/yDJytjg_a2z5FsdHlh7Kcp20M0Q.roa
Signing time: Sun 01 Jan 2023 20:54:48 +0000
ROA not before: Sun 01 Jan 2023 20:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203205
IP address blocks: 185.125.8.0/24 maxlen: 24
185.125.8.0/22 maxlen: 22
185.125.11.0/24 maxlen: 24
185.125.10.0/24 maxlen: 24
185.125.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:96:c2:3c:21:5e:95:84:6e:4b:a4:71:94:1a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Jan 1 20:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c83272b6383f6b6cf916c747961eca729db43344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:47:68:92:c3:a1:11:7a:1a:9e:62:ac:80:
37:0e:b8:46:23:87:35:03:3e:58:7f:40:e3:9c:23:
63:24:90:e2:a6:1f:ab:f8:b5:45:14:3b:cc:50:3c:
a6:5c:62:be:1e:68:b5:bb:52:14:b2:fe:4c:bf:65:
0b:13:c9:09:50:a4:42:d1:55:43:98:d0:fb:b1:12:
9c:38:c5:94:2e:c6:df:4b:28:21:a6:a5:44:fe:8e:
36:37:8d:2e:9c:e9:ed:1a:ea:e5:e2:69:b1:a2:c8:
eb:c5:f3:f8:24:c2:e7:0f:1b:d5:a3:bf:83:c0:4f:
03:5f:86:84:90:b7:a7:c2:bb:c5:cd:63:0f:61:f2:
7d:bc:b6:ed:e8:b0:c5:ef:06:65:d0:44:f5:1c:a5:
69:5a:02:22:52:0b:ae:e1:19:c5:3a:0e:0b:37:de:
39:e6:e9:a9:f9:b3:0d:ec:f4:24:86:e2:82:ae:1f:
f1:40:00:8c:e4:dd:59:4f:8b:4d:df:ee:55:05:d6:
20:fc:3b:f7:90:67:6a:e8:db:1a:20:86:a3:b3:fa:
13:4b:14:26:b3:3d:34:8e:29:f1:43:a1:22:be:c9:
51:d6:05:99:50:be:38:e2:ef:f2:47:60:fb:d5:7a:
7e:29:72:eb:5e:e0:2d:13:bf:b9:4a:a9:c8:eb:0b:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:32:72:B6:38:3F:6B:6C:F9:16:C7:47:96:1E:CA:72:9D:B4:33:44
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/yDJytjg_a2z5FsdHlh7Kcp20M0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.8.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b5:96:21:12:06:49:3a:37:a5:fe:88:d5:ee:d3:3a:97:c3:
83:95:69:a3:e1:70:9c:fd:f8:39:89:45:20:9d:ed:27:8b:54:
52:8b:71:24:f5:cd:cf:46:c9:9e:26:61:a4:2a:82:e5:a1:ad:
e1:a4:5c:91:9a:4c:c9:1a:78:44:e2:64:ab:b1:b8:1a:76:ec:
46:c4:04:e4:70:98:52:1d:c5:9c:88:08:a0:0a:8b:0f:a7:2c:
f9:96:04:7d:d3:d0:c8:cd:05:29:53:e5:71:a6:72:04:47:e1:
b6:c5:4d:75:a3:88:cf:86:92:64:90:6e:31:84:81:00:d1:af:
8f:f5:9d:92:0e:99:ce:e6:29:a4:5b:ff:5a:fa:2f:65:71:a2:
66:d0:26:22:04:b2:80:7f:22:c3:8d:42:c2:d0:35:36:e1:d9:
de:83:88:67:a6:f7:20:ef:6e:f7:de:9d:89:0a:f4:ad:e2:5c:
61:4b:a1:a9:e9:39:18:72:f6:6d:cb:23:a8:e6:4d:86:e0:7d:
4e:62:60:23:6b:19:8c:cb:81:5e:e8:fa:f7:c3:74:3f:0f:40:
6f:2d:98:e4:94:04:49:0c:0d:0d:d1:28:a2:29:44:be:34:65:
64:17:a0:bf:a9:7a:e6:fe:c6:08:68:ee:7f:9c:74:40:f1:28:
2f:5b:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:46 2024 by rpki-client on console-ams.rpki-client.org