Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/ubTs7sel_SSVlKCyL5ii36wfwB0.roa
File: ubTs7sel_SSVlKCyL5ii36wfwB0.roa (raw, json)
Hash identifier: QBe20POxcSsTtrn8dhj6Yr1mfJLr943aKBumsBooR84=
Subject key identifier: B9:B4:EC:EE:C7:A5:FD:24:95:94:A0:B2:2F:98:A2:DF:AC:1F:C0:1D
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 01856ED4B5CC5DC8AC2F4096AA5219CA554C
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/ubTs7sel_SSVlKCyL5ii36wfwB0.roa
Signing time: Sun 01 Jan 2023 19:35:12 +0000
ROA not before: Sun 01 Jan 2023 19:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34444
IP address blocks: 185.68.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b5:cc:5d:c8:ac:2f:40:96:aa:52:19:ca:55:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Jan 1 19:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b4eceec7a5fd249594a0b22f98a2dfac1fc01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:0e:99:fa:9f:ae:54:f5:7b:f2:cb:50:47:
15:3a:47:1e:d2:2d:a0:80:ed:7f:a6:a1:88:71:a1:
df:da:60:38:86:01:16:5f:a0:66:5d:de:27:70:96:
48:6f:ba:8c:8b:a1:7b:42:e8:1a:8d:2b:4d:97:3d:
3e:82:a0:a3:c4:f0:0e:ca:01:24:77:7a:2d:4b:09:
c6:f2:7c:14:96:9c:b6:c0:19:6c:67:ca:d8:16:48:
7e:f9:b9:a5:d8:93:01:16:b2:4c:1d:1d:bf:13:2c:
34:2a:83:b7:5f:e6:5e:df:c8:61:83:c0:55:b6:d3:
13:26:dd:eb:ec:49:ad:46:0b:bc:1e:3d:e2:e5:48:
97:a7:2c:c9:8e:4a:e9:76:29:59:0a:6f:20:65:65:
97:18:28:1d:5b:d5:8d:70:95:ae:12:90:d3:c1:73:
a9:7c:aa:e1:8e:69:2a:91:f7:15:3d:f5:f0:c3:2a:
9b:72:07:40:7a:27:86:57:23:de:e4:99:cb:93:64:
b2:db:af:9c:63:80:af:68:9e:f7:96:d6:6f:da:57:
ce:76:39:22:25:26:f6:7f:89:0d:6a:7f:a5:74:08:
de:96:1b:c4:de:9d:82:00:70:de:46:f5:c3:d7:ce:
ae:4e:5d:07:11:20:5c:48:7a:72:29:73:f1:44:1c:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:EC:EE:C7:A5:FD:24:95:94:A0:B2:2F:98:A2:DF:AC:1F:C0:1D
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/ubTs7sel_SSVlKCyL5ii36wfwB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.233.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5a:a7:05:dc:d1:36:4d:f8:0f:9a:ad:34:2b:d9:63:3c:6b:
6a:dd:90:08:19:7c:cc:3d:09:20:14:3d:70:b5:e3:14:38:0d:
2c:40:f7:88:44:24:e4:1b:f0:93:0c:1c:0d:3b:1e:65:fd:61:
a4:59:ba:dc:25:15:9c:33:07:d0:9f:41:4f:b2:92:5c:88:b5:
6e:27:2d:56:f7:9f:e9:cb:4c:2c:83:24:62:dd:cc:38:de:e3:
49:02:24:b6:0e:ee:cc:8f:2a:79:08:7d:01:4f:a0:4a:1c:88:
19:c6:07:ce:c1:a4:52:bf:86:ce:be:9f:30:cc:31:44:43:cd:
31:e1:cc:70:c0:35:07:02:37:6b:d2:22:f0:d1:b7:a2:46:85:
e1:8b:2e:42:e5:cc:08:9c:35:fd:8c:ef:e3:fb:c9:de:d3:8e:
2f:5d:dc:2d:2b:cb:9d:cf:37:57:8a:f2:3d:66:54:3f:08:ce:
d8:05:5e:51:35:76:5a:88:e5:62:0d:a8:e5:e5:52:5f:b1:ca:
22:c1:40:c9:10:3d:6c:3a:7a:17:5a:30:af:a3:c6:57:c3:a1:
6e:1f:c6:3b:a1:5c:e8:6c:0c:29:32:d5:f6:b9:cc:33:fd:b5:
df:60:1e:2f:9f:70:9f:4c:fb:ed:f5:c5:f2:5c:ad:21:aa:a0:
45:f9:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 08:21:51 2023 by rpki-client on console-ams.rpki-client.org