Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Y4q6Pd20JpIed-GtgMPjjLx1uXY.roa
File: Y4q6Pd20JpIed-GtgMPjjLx1uXY.roa (raw, json)
Hash identifier: hLUZMh3zjDSXNr24os/9VxHivxaJbWqjdwkU0uH6jGg=
Subject key identifier: 63:8A:BA:3D:DD:B4:26:92:1E:77:E1:AD:80:C3:E3:8C:BC:75:B9:76
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018977C4B46F44942ABADCA11B1F6466A9DD
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Y4q6Pd20JpIed-GtgMPjjLx1uXY.roa
Signing time: Fri 21 Jul 2023 09:25:27 +0000
ROA not before: Fri 21 Jul 2023 09:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.172.38.0/23 maxlen: 24
185.149.26.0/23 maxlen: 24
185.149.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:c4:b4:6f:44:94:2a:ba:dc:a1:1b:1f:64:66:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jul 21 09:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=638aba3dddb426921e77e1ad80c3e38cbc75b976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:f4:0f:a5:58:86:5e:24:5a:19:23:dc:76:
0d:a0:1e:1a:07:3f:28:3d:bd:49:65:5b:ba:d0:9b:
0d:9b:87:67:ee:47:d9:f1:5c:c3:96:16:89:7b:2b:
32:b1:3e:c6:a7:37:f8:07:b2:0a:49:68:52:7a:06:
35:f3:68:ab:dd:14:d2:65:25:ce:cc:b6:26:2d:15:
9f:ca:b6:04:df:e1:2b:d8:57:20:65:2f:2e:3c:45:
85:de:10:76:f6:7e:7b:67:49:08:57:77:94:64:fb:
96:fe:6d:26:87:86:1a:fc:95:a1:65:cb:e4:6a:14:
48:fc:85:92:dc:9f:5c:44:73:33:99:5b:bf:87:f9:
40:1a:cd:2b:9b:95:9a:98:0a:c7:20:b1:4c:fe:75:
c5:ae:a1:53:c5:52:fc:2d:4d:ff:3c:ff:ce:80:f7:
66:77:1d:d1:4a:99:f8:32:01:93:08:f9:a7:e9:dd:
74:33:72:77:fc:b7:9d:fc:6c:28:23:58:cd:28:cb:
4f:82:d9:bc:df:21:38:f2:8e:f1:e9:f1:4d:cd:fe:
41:cd:14:8f:67:4f:ec:6d:5c:65:90:db:62:56:55:
bd:ce:d0:d9:6d:f5:27:49:1c:49:d9:b0:52:ff:a4:
21:d7:61:f9:40:6e:e1:25:2a:41:32:5a:c0:03:d9:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:BA:3D:DD:B4:26:92:1E:77:E1:AD:80:C3:E3:8C:BC:75:B9:76
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Y4q6Pd20JpIed-GtgMPjjLx1uXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.25.0-185.149.27.255
185.172.38.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9a:22:8f:01:45:b3:2e:95:ef:46:db:3a:04:20:95:f5:17:
9c:81:5d:71:37:18:7f:fd:d2:03:97:0e:7b:b5:54:7f:8f:db:
2e:0a:40:14:a4:d0:f7:7a:34:5f:8d:12:d5:15:09:67:b5:8b:
d3:c2:31:c0:52:78:02:af:d7:b8:2d:e1:96:fd:f7:6e:0a:29:
2f:5c:94:85:23:63:de:7c:85:79:05:ff:f1:f3:a7:3e:2e:26:
8e:cb:fa:33:42:02:b1:40:ff:b2:a5:2b:3c:ff:ce:3e:88:e0:
63:69:33:ce:4c:ab:01:aa:80:b9:92:80:0f:4c:b0:0e:cf:e3:
a9:93:e4:68:9a:9c:a8:d2:c6:ff:7d:33:e8:2f:5e:0e:5d:a9:
b1:f2:32:f6:bb:6f:b8:70:e2:c2:a7:0d:23:e0:e8:fe:b0:0d:
fd:2d:c0:20:ef:d7:f9:aa:80:67:2b:5b:eb:78:3f:0f:68:8a:
f8:ce:0e:24:96:ad:1e:17:4a:4f:6c:3c:98:2f:f8:99:f2:99:
b3:a4:19:1c:4e:43:20:42:f1:ce:5b:98:70:a4:15:35:c3:89:
eb:12:3c:90:1e:41:e4:a8:be:6a:9d:aa:d6:77:30:72:b2:78:
59:2c:03:7d:e0:6a:32:62:b4:94:a6:af:d0:3a:f1:a7:08:8d:
b5:76:7d:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:50 2024 by rpki-client on console-ams.rpki-client.org