Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Y_HCuut9ckL_pnJQ3E8uX0AVg9A.roa
File: Y_HCuut9ckL_pnJQ3E8uX0AVg9A.roa (raw, json)
Hash identifier: Yr8tdaIfE2wJW0Nev6twci/ZaQdr1GZE5yF30ta2uJU=
Subject key identifier: 63:F1:C2:BA:EB:7D:72:42:FF:A6:72:50:DC:4F:2E:5F:40:15:83:D0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A3C376BC41FF3AE4CE609A28B79CDFE19
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Y_HCuut9ckL_pnJQ3E8uX0AVg9A.roa
Signing time: Mon 28 Aug 2023 12:56:19 +0000
ROA not before: Mon 28 Aug 2023 12:56:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 83.137.159.0/24 maxlen: 24
178.210.231.0/24 maxlen: 24
178.210.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:37:6b:c4:1f:f3:ae:4c:e6:09:a2:8b:79:cd:fe:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 28 12:56:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63f1c2baeb7d7242ffa67250dc4f2e5f401583d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:6e:c9:0f:29:ed:d7:2c:57:ce:5e:18:52:
7f:31:00:0b:a4:88:45:cd:40:14:71:41:d8:21:94:
05:2d:a0:c0:9d:c1:44:6f:91:e2:f1:54:b8:51:bd:
b1:60:78:9f:8f:e4:98:2e:9c:43:e6:93:d5:31:54:
ab:c8:51:5a:d6:ce:72:35:0f:f5:04:1e:fa:65:d4:
51:28:e9:4b:9b:03:24:c2:fb:71:c8:d3:18:13:69:
5b:4d:b5:f1:64:b5:a5:84:48:28:0e:6f:46:cc:5a:
8a:6f:27:64:8c:47:21:b6:7c:b1:47:06:e3:0c:f6:
1c:52:68:58:90:d1:fd:61:fa:a2:b8:64:28:ca:d4:
7e:26:7f:17:f7:b4:9a:df:ed:2b:31:10:b0:66:d7:
5b:dd:e1:22:a9:ae:55:0d:90:86:16:fa:ed:2b:8c:
c1:c4:81:dc:ed:0d:00:31:15:f4:7b:8e:87:0e:cf:
21:23:7b:34:79:2d:13:b6:76:99:74:1d:fb:83:45:
25:cb:73:91:e0:df:d4:6e:fe:cf:97:73:b9:82:1a:
55:0a:e4:93:d5:0c:79:cb:ec:12:ac:d6:46:32:53:
d3:fc:ce:d5:a7:68:67:26:e7:cf:77:c8:6a:de:8c:
d5:c6:aa:68:08:14:e4:3b:14:e1:51:61:39:4d:62:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:C2:BA:EB:7D:72:42:FF:A6:72:50:DC:4F:2E:5F:40:15:83:D0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Y_HCuut9ckL_pnJQ3E8uX0AVg9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.159.0/24
178.210.230.0/23
Signature Algorithm: sha256WithRSAEncryption
72:5d:bf:e6:90:5d:26:f8:e8:db:e3:29:0c:88:59:40:f3:3f:
b5:7e:bf:c4:26:ef:a4:0e:c9:01:e8:af:e8:96:d4:78:d2:d2:
27:2e:79:64:6c:24:b7:46:c9:4c:3f:ed:94:07:11:da:89:eb:
64:a5:ed:5c:fa:61:f8:00:36:a8:6f:f7:d7:14:8c:1e:68:f3:
b5:2f:74:c3:b6:46:61:81:21:e6:f0:27:f7:fe:4d:c7:3e:17:
79:73:95:8d:ba:0d:48:8c:e4:d3:4f:b8:50:b9:e4:1c:d4:34:
29:00:d7:2f:55:41:c8:e6:03:da:07:7a:4c:c1:61:1c:7b:c4:
6a:fd:8c:e7:05:6e:65:09:58:36:ee:87:bb:50:05:f8:45:49:
4d:94:b5:65:2e:0b:9d:9d:13:ce:08:74:9e:6b:6f:0b:fc:4f:
14:73:0f:8c:68:bf:b9:e0:f9:27:d6:24:4c:67:85:53:16:a0:
08:f2:ac:be:66:f0:53:94:3d:21:13:15:23:af:2e:92:9e:8b:
68:d1:8d:ff:5c:1b:5d:c3:2a:24:c6:81:b6:55:4b:25:12:5a:
7f:ce:ca:6b:9f:5b:c2:23:54:24:30:24:90:80:47:5f:b6:6c:
a3:19:6f:20:fe:19:34:89:4a:da:29:b8:d8:a0:c7:13:e5:26:
41:5a:c2:4d
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 29 10:29:30 2023 by rpki-client on console-ams.rpki-client.org