Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yVdH3N0JKtpXGBfoA78qhdudi5Y.roa
File: yVdH3N0JKtpXGBfoA78qhdudi5Y.roa (raw, json)
Hash identifier: UhJ8Wy9HBd4ZNJvNGfIRDoQ4pvcaPCymKOZ8wvCOoQo=
Subject key identifier: C9:57:47:DC:DD:09:2A:DA:57:18:17:E8:03:BF:2A:85:DB:9D:8B:96
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C540C906EBCF0BBA3C2D17872C1A940
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yVdH3N0JKtpXGBfoA78qhdudi5Y.roa
Signing time: Sun 01 Jan 2023 07:55:25 +0000
ROA not before: Sun 01 Jan 2023 07:55:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204099
IP address blocks: 185.115.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:0c:90:6e:bc:f0:bb:a3:c2:d1:78:72:c1:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c95747dcdd092ada571817e803bf2a85db9d8b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:8a:ea:84:7f:4d:1b:fc:af:83:b4:9c:a3:
15:31:6f:f2:b3:f9:6f:6f:e3:be:45:89:7e:e2:c8:
c5:bf:50:fe:ef:02:f0:c8:35:f5:dc:4b:6c:3f:dc:
30:91:57:69:15:05:11:fd:09:5c:74:a0:da:c5:c6:
b2:47:ef:31:86:6a:66:61:ed:8a:ac:f4:04:7f:14:
3d:6f:38:ec:d7:84:25:a3:1c:fc:10:57:be:fc:a6:
e8:2a:d0:1a:5f:a6:89:39:61:ec:7c:21:54:51:17:
84:58:0d:1a:e9:42:58:7d:ea:1e:31:91:7f:c6:2d:
5d:34:f4:93:f9:f2:ce:9a:1e:38:0b:a2:77:27:64:
b9:49:97:fc:4d:40:27:26:b6:2b:2e:e1:f6:7c:c8:
cc:93:7f:d5:d9:ac:09:d9:af:47:5a:7b:11:60:93:
ae:98:66:92:c9:13:5f:83:3d:a8:90:02:51:46:05:
40:5d:e1:78:f9:90:41:80:ba:7e:9c:91:79:62:b2:
0a:60:c9:5a:84:82:ac:89:5a:92:1a:92:e5:38:33:
78:29:7e:ff:2c:eb:e9:2f:71:55:94:a9:05:fd:06:
20:05:ac:5e:18:fe:b4:aa:dc:cf:0a:25:4d:93:eb:
8e:d0:6b:dc:70:2e:a7:a1:1f:f4:59:67:31:94:a5:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:47:DC:DD:09:2A:DA:57:18:17:E8:03:BF:2A:85:DB:9D:8B:96
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/yVdH3N0JKtpXGBfoA78qhdudi5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:45:48:f2:9e:22:d5:e0:a4:76:c6:58:68:9d:a8:6a:67:6b:
5f:09:a3:7f:d1:31:89:f3:cc:46:19:9b:b4:2e:c0:df:16:a4:
cd:49:53:41:49:a5:81:8a:b5:a8:9b:17:8b:78:b2:81:1f:9f:
53:15:44:ff:57:c9:63:09:32:38:a5:2e:82:5a:e1:85:b5:8e:
3a:99:97:97:e8:9c:4b:2b:88:ba:51:10:8f:f9:9f:0f:4a:d1:
48:06:cd:d8:ec:31:12:cb:bd:85:26:37:19:19:9f:94:03:79:
2a:a6:02:56:65:b8:83:8c:a4:05:34:e5:89:fa:c4:5a:e5:0c:
80:e2:d7:fe:3f:c4:7d:7e:06:34:9c:17:de:5e:51:da:4c:f4:
e2:88:53:b7:9a:67:0a:a4:a2:bd:1a:04:2d:0d:78:db:63:5d:
fa:37:6a:fe:a7:4e:4b:aa:f9:3f:75:5d:05:a2:00:db:75:f0:
d7:46:91:29:10:28:88:b7:20:d3:a0:66:0a:e6:40:45:7d:de:
fc:f1:55:a7:14:9e:57:0b:28:c8:36:64:d2:80:0f:ba:63:6b:
bd:5b:eb:79:26:69:e5:f6:d7:27:3f:3f:fe:16:40:f1:15:c8:
76:87:11:59:72:27:ae:f0:68:0f:5d:c1:92:fe:09:7a:18:5a:
cd:18:50:73
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 1 02:58:09 2023 by rpki-client on console-ams.rpki-client.org