Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/YsO8x4Wivqi_UglYKKm7flCBcQg.roa
File: YsO8x4Wivqi_UglYKKm7flCBcQg.roa (raw, json)
Hash identifier: IO2c2gLHAGJGPF2beJIGs1GXDqw5QSvd2VsD3ehu33Q=
Subject key identifier: 62:C3:BC:C7:85:A2:BE:A8:BF:52:09:58:28:A9:BB:7E:50:81:71:08
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FFC548D3D4421C0D3D8EF70DD5D1E
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/YsO8x4Wivqi_UglYKKm7flCBcQg.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200406
IP address blocks: 185.231.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fc:54:8d:3d:44:21:c0:d3:d8:ef:70:dd:5d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62c3bcc785a2bea8bf52095828a9bb7e50817108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:1c:55:9f:53:91:25:c2:58:bd:20:f5:d5:
f9:0c:d8:e8:04:54:c7:eb:c0:e8:30:66:b8:86:2b:
1f:a3:7e:3f:d9:9c:4d:69:7d:ab:d4:48:30:a3:11:
c4:6f:1e:9f:a8:4b:be:76:ae:93:11:5e:23:17:5a:
16:07:f0:6c:63:d8:d4:90:4c:3c:e4:d1:67:31:de:
2e:df:ca:23:d2:9f:27:51:0f:18:ab:c9:2b:65:a0:
d2:e4:a3:85:12:45:72:26:15:88:62:de:41:c0:e2:
ea:8b:dd:3d:42:57:f6:aa:8e:93:b1:0b:b6:81:d8:
d5:69:25:ee:c6:b4:3b:12:76:06:3b:4f:b7:7b:63:
aa:b8:b7:13:3a:c7:cd:b7:71:d2:33:23:c9:fc:78:
74:9f:07:0a:a4:03:f2:d4:cc:95:49:87:d8:c9:6b:
69:b3:4f:24:0e:c3:66:c8:f5:94:51:17:3c:3b:5b:
e3:aa:5c:86:0f:8d:ac:e4:a3:95:5c:84:e9:76:93:
da:dc:9a:b6:14:85:8c:73:1c:48:e0:b2:ff:f6:4e:
cd:d6:f3:15:c0:63:71:00:e3:a9:5b:7e:9a:f1:56:
ce:ff:41:35:1d:42:a2:e4:ed:ed:50:45:95:02:5c:
d4:64:d2:5f:05:e1:6d:3d:b1:6b:58:c6:e9:29:06:
94:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:BC:C7:85:A2:BE:A8:BF:52:09:58:28:A9:BB:7E:50:81:71:08
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/YsO8x4Wivqi_UglYKKm7flCBcQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4c:05:08:9d:04:3a:12:af:f3:6c:1d:4f:8b:b2:e6:8d:53:
42:1c:52:57:3c:0c:c3:0c:78:e4:94:f2:45:53:69:d6:02:d4:
37:60:c4:98:f2:30:70:18:8b:e9:b2:cc:11:cb:33:b9:14:4c:
59:84:d4:b7:93:c9:cb:2a:ad:dc:22:4a:c2:d3:79:1a:5e:40:
58:4b:e2:da:37:07:d3:51:86:55:0d:48:f8:a3:6a:2d:a2:ce:
84:d2:cd:34:f7:34:f9:7f:5d:d0:df:b5:ca:00:e0:9c:11:43:
63:11:7a:2d:9a:1f:4a:a4:ed:76:46:a8:05:25:2b:8e:cd:fb:
5b:76:cd:16:92:5b:7f:00:53:33:6c:e2:ce:6a:81:53:f3:ff:
9f:20:16:ff:f0:89:8b:23:3f:3a:12:05:24:51:b4:32:74:d4:
f8:01:a9:8a:2c:18:a2:e8:3f:a3:03:39:76:3f:03:18:42:11:
5f:12:e5:15:65:5b:10:60:08:2f:8d:b3:69:fd:03:0d:4e:fc:
47:f1:6d:3e:9b:55:6b:74:7b:cf:56:87:5b:41:59:a5:af:2b:
29:9b:8b:ed:59:9e:59:5d:60:eb:31:81:41:0b:a4:3d:b1:f3:
84:fd:64:11:b0:00:62:7f:54:0a:ac:24:3f:28:8e:e9:75:46:
bb:fc:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org