Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/y59SBH-4iVLy3dT-mFvLJ4i0Z7o.roa
File: y59SBH-4iVLy3dT-mFvLJ4i0Z7o.roa (raw, json)
Hash identifier: LbSgYETn9dbrXV3HUc86SLWEE+N77Z8lU/PmR6ln8vg=
Subject key identifier: CB:9F:52:04:7F:B8:89:52:F2:DD:D4:FE:98:5B:CB:27:88:B4:67:BA
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01856FD52F5CBADFB758E4615674914F1471
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/y59SBH-4iVLy3dT-mFvLJ4i0Z7o.roa
Signing time: Mon 02 Jan 2023 00:15:20 +0000
ROA not before: Mon 02 Jan 2023 00:15:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2f:5c:ba:df:b7:58:e4:61:56:74:91:4f:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 2 00:15:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb9f52047fb88952f2ddd4fe985bcb2788b467ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:85:16:a8:64:9c:03:08:75:6c:82:2a:1f:
8e:23:34:b1:13:40:42:6f:d5:49:de:84:f5:d6:18:
20:93:8c:53:2c:70:33:72:2f:70:18:34:3e:cf:aa:
a9:7c:a1:58:7e:43:73:87:ad:15:bd:b8:5e:f0:96:
d9:2a:a1:34:15:bf:5b:12:49:89:e2:d5:95:65:4b:
da:2f:02:d5:6e:9b:23:dd:d8:df:62:2f:f9:d9:f9:
7c:15:fa:88:08:a5:5a:12:06:b9:9c:45:71:55:03:
15:26:11:a1:0c:4a:f2:b1:9b:22:8f:17:1d:b7:2b:
d8:71:47:81:88:93:39:93:02:c5:0d:ba:9b:ce:65:
86:f9:49:21:80:22:c0:1f:9e:e4:ba:9c:ee:7b:de:
35:16:26:4b:ad:82:7e:b6:e0:a6:f4:06:bb:18:9d:
ab:91:f4:ba:8b:7f:d8:2e:d1:e3:f2:02:cb:54:74:
53:ef:db:c7:4e:26:4f:dd:23:ae:03:fc:27:7e:24:
e9:b8:73:a7:16:15:66:36:d4:f3:e1:46:84:0a:ec:
9f:8b:c8:af:58:2d:83:c6:6f:4f:bf:cb:49:3b:d0:
49:9f:d0:9f:5c:30:ac:0f:13:57:38:1d:c2:37:2f:
6f:81:ef:6d:a4:6e:d1:a9:5c:cd:02:67:e8:0e:d2:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:52:04:7F:B8:89:52:F2:DD:D4:FE:98:5B:CB:27:88:B4:67:BA
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/y59SBH-4iVLy3dT-mFvLJ4i0Z7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
63:07:63:79:dd:15:23:72:d7:29:eb:78:46:2b:f6:3e:ac:5e:
9f:a0:f7:c9:4a:47:ef:51:d0:34:9c:a7:57:f1:b8:5c:a9:09:
f6:db:00:97:29:27:a4:17:e6:2b:6a:1d:1e:25:b1:51:8d:f9:
c6:27:bf:e6:da:4a:d6:4e:fa:04:64:07:e2:a3:5e:87:41:60:
12:bc:db:03:71:5e:04:9e:f3:a3:93:29:ea:28:c3:90:c4:50:
b7:22:a9:0f:af:cd:5e:ed:d3:f8:66:46:8e:20:1c:69:72:cd:
c4:b0:d2:15:34:59:27:6e:bb:56:4c:91:6c:40:a7:e5:16:d4:
76:f1:e7:65:89:24:9d:80:ec:2b:fc:4d:03:6e:91:f0:dd:b4:
e0:d0:0b:fd:a2:8a:97:11:e6:17:48:fe:72:47:11:62:a7:ed:
97:47:9a:01:b3:33:e7:62:65:e2:65:0e:e9:92:35:b3:d6:c9:
fb:52:8c:ef:d1:1c:30:77:8f:f0:24:b8:73:1f:e6:71:88:88:
15:3d:63:24:58:80:5a:7f:70:45:8e:82:9b:2c:4e:cc:40:40:
d0:8d:7c:0b:1a:5b:78:06:fe:10:b2:b5:fa:16:c9:23:a4:75:
38:be:05:9a:a1:60:be:32:f4:44:2e:7c:e2:8a:01:d4:83:4c:
93:71:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:16 2023 by rpki-client on console-ams.rpki-client.org