Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/vyPmf5V4E2nJLqGka4FVAGOBQNQ.roa
File: vyPmf5V4E2nJLqGka4FVAGOBQNQ.roa (raw, json)
Hash identifier: 4Oj3hKtbU38C8HAGcsV5aErxNzo17bpxct4rJLLNJSA=
Subject key identifier: BF:23:E6:7F:95:78:13:69:C9:2E:A1:A4:6B:81:55:00:63:81:40:D4
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 0188205BD7022352C47D57F5607B405351D7
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/vyPmf5V4E2nJLqGka4FVAGOBQNQ.roa
Signing time: Mon 15 May 2023 17:01:09 +0000
ROA not before: Mon 15 May 2023 17:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200079
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:5b:d7:02:23:52:c4:7d:57:f5:60:7b:40:53:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: May 15 17:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf23e67f95781369c92ea1a46b815500638140d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:71:9c:6f:a8:f1:e1:7d:e5:02:b0:ad:a2:
7b:c0:73:77:58:c5:48:57:51:58:5d:82:7f:b9:f6:
a4:13:2f:ba:21:ce:49:e5:8f:64:43:e3:e9:fd:dd:
15:71:3e:3a:ef:98:6d:fa:8b:d0:e8:c9:bd:9e:31:
53:c6:50:a4:4b:79:6f:7c:e0:8c:15:f0:f5:a9:e2:
7b:dc:ce:a8:b1:79:29:c6:9c:9b:9f:a6:b3:bb:c4:
3f:f9:68:f2:f4:3b:9b:35:ae:38:f7:bb:a5:24:1f:
14:d1:fd:ce:02:f5:0d:9d:de:2f:b5:45:13:6b:b2:
c1:16:b7:fc:4d:db:48:b1:4f:37:9b:55:6e:92:b3:
6e:38:17:27:cc:0b:06:48:4c:e0:7f:8e:05:37:eb:
aa:d2:0f:8e:6c:1e:76:65:86:bf:f6:f5:0d:d5:c1:
c9:4e:5b:f3:bb:0b:b0:ed:ed:1f:00:fe:62:d8:82:
93:8a:b1:b7:b5:d2:5c:35:b3:29:c6:3e:cd:a0:f4:
cb:5e:a3:59:7e:d1:ba:0c:b9:75:45:90:5b:2c:c3:
23:72:72:fb:3d:5f:4f:3e:df:18:21:e5:7d:ac:ae:
7b:cc:bc:f5:33:26:49:0f:de:72:0c:29:95:16:fb:
e4:7f:ed:4b:d2:e2:57:01:46:ce:94:1d:6a:29:c9:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:E6:7F:95:78:13:69:C9:2E:A1:A4:6B:81:55:00:63:81:40:D4
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/vyPmf5V4E2nJLqGka4FVAGOBQNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8e:4d:93:59:c6:94:28:08:8a:f0:bc:50:51:1d:97:b8:35:
b2:0d:1e:bb:8c:23:8c:b3:71:bd:50:ef:fd:46:23:30:04:04:
1b:49:03:92:96:47:c4:b0:0e:4e:2c:d4:2f:87:72:1d:99:c9:
30:85:2b:0c:2f:5b:84:1f:78:c1:8c:c7:d6:f3:de:81:0c:09:
50:17:61:6e:ee:9a:35:95:67:fc:16:c2:bf:51:d4:fd:83:b4:
24:c6:69:0f:0a:f2:63:12:87:8e:2f:dc:aa:00:a2:50:d4:86:
53:80:6a:ac:c2:52:1d:22:80:0b:23:02:78:f4:9c:b7:a8:d1:
13:d2:87:58:fc:c5:e4:2e:ff:ae:74:57:4e:89:81:c4:f6:78:
12:e2:40:4f:64:d2:fb:87:46:6c:c6:f4:57:c6:f8:19:9f:d1:
4b:2b:8a:c4:95:5c:3e:b1:4e:80:ca:bd:42:b8:0a:53:93:3c:
74:07:2e:ca:a6:0e:e9:39:b6:c2:17:33:87:1c:54:97:5a:15:
48:3c:ca:e1:2c:fd:cc:49:ab:0f:07:7c:f6:06:fc:1c:ff:9a:
37:9e:5b:bb:be:1b:bf:a4:8d:84:08:c3:af:1b:e1:14:0a:34:
85:97:39:ca:df:c8:f3:f1:37:aa:08:99:64:4c:37:95:3a:95:
b2:72:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:16 2023 by rpki-client on console-ams.rpki-client.org