Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ytXHEn20W7CV4In8-8bUM5GRZ5w.roa
File: ytXHEn20W7CV4In8-8bUM5GRZ5w.roa (raw, json)
Hash identifier: 4Tkhr6VCwRV4Gw7DZkqFXZ75FF6WKEh8TW38/J4+yLQ=
Subject key identifier: CA:D5:C7:12:7D:B4:5B:B0:95:E0:89:FC:FB:C6:D4:33:91:91:67:9C
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01857067246C93AF0B842359231325521EBF
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ytXHEn20W7CV4In8-8bUM5GRZ5w.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204834
IP address blocks: 185.177.233.0/24 maxlen: 24
185.177.232.0/23 maxlen: 23
185.177.232.0/24 maxlen: 24
5.202.106.0/23 maxlen: 23
5.202.106.0/24 maxlen: 24
5.202.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:24:6c:93:af:0b:84:23:59:23:13:25:52:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cad5c7127db45bb095e089fcfbc6d4339191679c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:a0:6a:ec:b5:d6:64:48:99:1a:b6:2f:f5:
a6:9e:6d:7d:4b:9f:71:84:bd:63:8a:ad:1e:4e:ca:
66:52:73:b8:5c:fb:48:82:50:6e:fc:83:e7:55:f2:
cc:f0:0c:c5:c5:57:71:67:7a:b4:a9:4d:22:76:b0:
63:d8:66:f6:41:9b:c0:fe:91:bc:69:16:46:5a:4c:
c2:a3:e5:2c:db:44:1d:e8:49:4f:d1:d7:f8:d4:df:
f8:cc:70:c3:cd:27:6a:82:57:a2:43:ec:b1:20:c2:
70:ce:65:ea:54:bc:9b:ef:c1:0c:61:b1:85:5f:d7:
3c:b8:14:d1:0a:10:06:40:8e:a1:de:dc:62:ee:04:
79:24:11:28:b3:07:2a:84:3a:ec:f7:3f:01:c6:6d:
98:52:f0:d4:8d:29:6a:ea:a1:b9:e3:f8:7d:35:04:
61:f5:20:54:18:5f:b9:f3:4c:76:16:63:5e:44:d4:
80:ea:50:e5:65:d1:ec:45:ca:1e:94:9a:22:e1:83:
19:aa:e1:06:bb:22:c6:d9:ad:b9:77:74:fe:c0:35:
45:4f:e2:16:f2:83:92:24:aa:bc:b1:96:e6:db:b4:
14:3d:11:b3:bd:32:14:6a:86:20:4d:6d:ae:ff:82:
6a:20:35:84:f2:60:f6:76:70:96:96:24:10:6b:23:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:C7:12:7D:B4:5B:B0:95:E0:89:FC:FB:C6:D4:33:91:91:67:9C
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ytXHEn20W7CV4In8-8bUM5GRZ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.106.0/23
185.177.232.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:42:38:69:42:8c:ad:a6:5b:bf:19:f2:eb:f7:2a:fc:d3:ed:
cb:c5:ca:5f:b7:29:27:6a:c3:ec:8a:43:a7:8d:0c:e1:52:73:
45:fb:c4:8b:ae:eb:d1:56:25:bd:04:e7:32:2c:99:e8:32:0b:
1e:6f:c1:9c:16:91:dc:2d:8b:21:42:16:75:b5:f8:7e:02:ba:
05:de:df:22:c6:b7:f5:df:1e:98:da:dc:21:16:7b:a0:bf:bc:
d7:4f:df:b4:07:fd:be:cf:58:86:6e:99:88:8e:1f:ea:90:31:
72:3c:6c:b4:b3:ad:3c:6d:8e:ca:3f:ae:90:4e:ea:7d:42:f3:
a3:42:bb:73:61:6b:fc:62:60:86:56:e8:32:0e:2b:99:d6:a6:
6e:20:a0:40:9f:54:1e:4b:c1:ca:cd:70:f0:35:84:6a:a9:0d:
47:06:33:a1:b0:c6:d3:e0:41:02:df:3e:8e:0e:ae:b3:e5:f1:
07:6c:0a:6e:5a:d8:c8:6f:c5:b0:b3:26:1d:75:a6:6d:0a:36:
13:17:e7:11:a9:b5:61:95:17:84:63:0c:f8:45:ae:51:36:68:
82:1e:c1:93:bd:e1:02:9e:be:95:8f:49:94:eb:76:8d:40:ed:
e9:34:94:a7:3f:fd:0e:4f:92:64:e5:0a:fc:d4:90:fd:09:d4:
a9:88:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:00 2024 by rpki-client on console-ams.rpki-client.org