Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/IvMZNwECTKivOG3LvuctX6O5Hw4.roa
File: IvMZNwECTKivOG3LvuctX6O5Hw4.roa (raw, json)
Hash identifier: /BtSs0GSJOZL2xmtqqkzE42NbdJHrVE8djikwCj8Yuw=
Subject key identifier: 22:F3:19:37:01:02:4C:A8:AF:38:6D:CB:BE:E7:2D:5F:A3:B9:1F:0E
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 01856CD39163E3266B3C02144BCB013D3955
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/IvMZNwECTKivOG3LvuctX6O5Hw4.roa
Signing time: Sun 01 Jan 2023 10:14:42 +0000
ROA not before: Sun 01 Jan 2023 10:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396501
IP address blocks: 185.159.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:d3:91:63:e3:26:6b:3c:02:14:4b:cb:01:3d:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 1 10:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22f3193701024ca8af386dcbbee72d5fa3b91f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:81:e3:ca:75:60:fc:60:9c:01:3c:3a:88:
9d:d4:a8:6c:23:3a:70:3e:55:20:f0:0d:43:15:b3:
8b:77:2e:f3:89:66:5d:f2:1f:29:ce:da:71:97:47:
5b:8e:62:ab:11:27:bf:0c:b8:8f:43:58:0d:f2:38:
32:bf:5f:f5:72:7a:0d:c1:bf:cf:6c:be:12:26:12:
54:ac:17:6e:25:0d:a7:c0:b1:1c:c3:a4:fd:4f:16:
da:47:70:93:aa:d2:c4:09:5b:d5:46:a3:ca:69:14:
8e:0a:0d:91:e6:7a:eb:6b:dd:86:a8:be:b5:f2:af:
d0:75:cb:7a:91:bd:22:b1:fd:7e:2a:3e:60:dc:76:
c6:80:05:81:b3:fe:03:11:af:c9:07:ed:fc:fb:61:
ed:54:3c:51:99:ab:50:23:8d:bb:c2:b7:cc:f9:08:
1d:73:e1:18:bc:14:0b:8a:41:5b:52:ba:f6:ed:f1:
c8:88:8a:67:49:58:af:ca:5a:25:fb:cd:50:e0:49:
7d:b7:ea:3e:5e:f6:7b:c6:ab:d2:71:9c:f1:22:27:
66:6b:2f:4f:d9:0f:12:24:39:08:3d:4e:d7:f1:bf:
cc:2a:2d:4b:d6:fd:0e:da:c8:b8:c1:27:ba:55:28:
82:7f:cd:ae:95:f0:56:bb:fc:0e:75:76:5c:62:47:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:19:37:01:02:4C:A8:AF:38:6D:CB:BE:E7:2D:5F:A3:B9:1F:0E
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/IvMZNwECTKivOG3LvuctX6O5Hw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:43:3b:3a:af:fc:cf:84:88:05:fd:90:09:b3:32:d4:b2:ea:
ea:2f:8e:a2:6c:33:fe:89:71:c5:0b:83:86:11:19:ec:ba:6a:
5d:54:54:e4:57:97:a0:7e:f4:e4:44:7a:de:b2:66:3c:91:ed:
d9:20:ce:51:95:9c:f2:2a:76:3c:59:fa:e6:3f:5b:73:56:0b:
72:07:20:29:2c:37:24:10:28:79:c9:ab:43:d8:ec:eb:1c:2c:
be:99:f3:6f:76:90:b5:88:02:28:85:83:28:73:4d:cd:ff:a6:
6b:ee:4b:24:f5:8c:de:d8:d7:7d:bf:cf:9f:e4:4d:c8:c1:a5:
bf:13:01:d6:61:70:22:1b:7a:32:20:e8:6d:e9:29:e0:de:09:
64:44:e9:a9:73:19:b2:f0:7c:94:a7:4d:1f:c0:4a:9b:ca:4a:
c0:46:9d:b1:45:cb:f5:09:d4:d6:95:4c:e2:61:70:4e:cb:42:
f7:64:5b:09:c2:96:36:2f:9d:13:dc:05:9c:84:bb:74:9a:17:
f4:1b:a8:44:8c:95:59:6b:0e:fe:64:45:0f:70:96:11:e8:61:
bb:5c:78:39:e8:54:11:bb:f9:ba:b5:5b:c3:40:8e:7f:ba:4c:
53:95:75:6a:43:69:05:4f:c2:52:db:49:7c:bc:ec:e3:c3:c1:
af:b2:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:43 2024 by rpki-client on console-ams.rpki-client.org