Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/yxRBeLBHD_OMY64Dj4wbktPUazg.roa
File: yxRBeLBHD_OMY64Dj4wbktPUazg.roa (raw, json)
Hash identifier: rRNezIKsZofoPzgoMPVKdMeSy5oVY0snhWc7LhnJIO4=
Subject key identifier: CB:14:41:78:B0:47:0F:F3:8C:63:AE:03:8F:8C:1B:92:D3:D4:6B:38
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 01856FCBA27379CDD48717FC6DA9B3769E7C
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/yxRBeLBHD_OMY64Dj4wbktPUazg.roa
Signing time: Mon 02 Jan 2023 00:04:54 +0000
ROA not before: Mon 02 Jan 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203836
IP address blocks: 185.164.228.0/24 maxlen: 24
185.164.229.0/24 maxlen: 24
185.164.230.0/24 maxlen: 24
185.164.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a2:73:79:cd:d4:87:17:fc:6d:a9:b3:76:9e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Jan 2 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb144178b0470ff38c63ae038f8c1b92d3d46b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:52:f8:56:f4:5b:79:ad:0a:36:67:77:c2:
2d:3b:41:a4:1e:8d:3e:06:31:7a:06:ec:7d:b3:e4:
7f:3f:d4:94:9d:4e:a1:6b:3d:fd:24:64:f9:85:80:
e4:18:92:2c:03:c3:7d:8d:7a:e5:c4:b8:4d:f5:ff:
8e:bf:02:b5:e9:ce:1d:50:bd:70:3b:89:d8:fb:ce:
c3:f6:b5:a5:26:5b:d3:ce:45:96:66:b1:57:ad:90:
84:4f:c5:92:09:46:0b:ac:d1:0e:f1:0e:95:20:84:
e6:9b:67:e5:01:aa:07:2e:ee:8a:6b:d3:86:f4:7c:
07:dd:9d:42:dd:fe:7d:12:b5:83:98:f7:6b:e8:d2:
59:70:38:41:7a:ab:11:71:ba:98:7f:16:da:a5:ba:
7f:db:bd:d4:63:8c:4f:25:95:7f:16:c6:a2:b0:fa:
81:62:bd:d3:a1:d1:97:fd:38:41:7f:1a:33:9f:43:
3c:a2:6b:a3:6d:ef:36:fa:f1:6c:96:20:c3:8c:ef:
1a:3d:ad:d4:d7:4d:48:be:05:b9:e5:0c:88:ab:01:
72:77:ca:c7:e5:3d:dc:1d:4b:03:a4:94:e4:30:ca:
5f:35:16:69:4a:08:af:d9:10:01:11:54:40:f6:d9:
a0:4e:3e:3f:e9:c8:fb:8c:9e:65:19:48:9d:a4:83:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:41:78:B0:47:0F:F3:8C:63:AE:03:8F:8C:1B:92:D3:D4:6B:38
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/yxRBeLBHD_OMY64Dj4wbktPUazg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.228.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:30:78:54:d4:d9:57:fc:36:54:39:c1:18:11:2d:d6:37:fc:
3a:3e:bf:ee:01:a9:07:fe:f0:88:3e:9c:b2:ac:da:7c:d3:31:
b8:80:e3:71:17:93:8c:6d:9b:b1:f6:ca:34:d7:ff:b3:57:97:
7d:76:45:d7:6c:68:0c:dc:03:fe:9b:a5:5b:ac:2a:d2:f0:0c:
2a:48:c2:97:7c:24:60:6d:aa:32:bb:df:a9:24:f2:7f:af:08:
93:69:f5:17:a0:78:56:36:21:52:52:4c:00:7c:0e:ba:40:0e:
d8:78:00:3c:b1:4a:73:b5:65:aa:be:5e:cd:0c:5e:57:cb:1b:
34:51:c4:e7:85:ef:ed:2d:d0:d0:81:fe:9c:c3:2f:d2:b6:1d:
8c:f8:32:f3:e0:8e:08:fd:b0:48:b3:4c:95:a5:a2:e0:16:c9:
2d:e6:c7:bf:c2:e8:b1:40:ac:89:cc:20:0d:c0:71:7a:48:1c:
21:27:f2:40:f6:0b:1a:a7:54:e5:18:55:e1:4e:5c:30:87:d4:
0b:eb:88:c2:35:19:7e:a6:7c:8d:7f:4a:d8:e4:c9:8d:09:de:
93:56:7a:d4:a9:a6:bb:a6:53:a1:0e:be:ac:ba:16:82:53:22:
bd:a5:28:f7:3d:84:27:45:f3:bf:00:9e:27:e7:a8:b8:9b:24:
b0:18:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org