Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/cgRT1miJm_q337yipzya-INHUAQ.roa
File: cgRT1miJm_q337yipzya-INHUAQ.roa (raw, json)
Hash identifier: vuqY13/qV0x+N6Gka+s2k/bn1sZeiGiKYEjZgWz1NdA=
Subject key identifier: 72:04:53:D6:68:89:9B:FA:B7:DF:BC:A2:A7:3C:9A:F8:83:47:50:04
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 01856F2FDDD17B4CAE92565E0F35523C1804
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/cgRT1miJm_q337yipzya-INHUAQ.roa
Signing time: Sun 01 Jan 2023 21:14:45 +0000
ROA not before: Sun 01 Jan 2023 21:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205889
IP address blocks: 185.203.55.0/24 maxlen: 24
185.203.54.0/23 maxlen: 23
185.203.52.0/24 maxlen: 24
185.203.53.0/24 maxlen: 24
185.203.52.0/22 maxlen: 22
185.203.52.0/23 maxlen: 23
185.203.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:dd:d1:7b:4c:ae:92:56:5e:0f:35:52:3c:18:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jan 1 21:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=720453d668899bfab7dfbca2a73c9af883475004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:03:61:6d:c1:db:bf:1e:9f:8b:b2:35:35:
39:de:63:fe:81:3f:32:9e:cc:57:f5:ed:8c:9c:99:
c8:4c:3d:4c:03:f4:6c:e7:3e:03:31:15:3b:2a:94:
8a:27:d1:c3:a1:4b:24:74:f5:0f:95:13:5b:2b:27:
4b:32:6f:49:88:c4:8b:07:45:ad:92:0e:31:84:13:
87:83:df:c3:63:3a:97:2f:fd:56:3d:6e:d6:cd:17:
94:5b:84:2f:0f:6a:4a:58:be:05:ed:40:64:48:a1:
c5:ec:a1:b8:2e:3e:a1:9b:1a:61:d2:dc:2b:cf:d9:
07:0b:01:1c:c2:b8:c6:d2:0c:89:a1:3a:73:0c:ba:
90:37:74:6d:32:3a:98:26:dd:01:c9:54:fe:25:6c:
89:6e:f3:60:16:f5:62:e9:b4:cb:05:17:96:26:4d:
b9:29:4a:40:67:37:d9:35:7f:5f:a0:41:d2:40:1f:
67:a7:be:36:28:f9:c0:37:d6:be:6c:c6:75:68:2b:
8c:f3:16:ae:ad:f3:1c:db:25:a7:2d:2b:0f:ac:94:
83:62:b0:6a:9a:0a:4d:45:99:10:82:38:e9:f9:c5:
6a:1a:91:56:2c:41:44:1f:d8:d1:af:c5:bc:24:96:
07:30:fb:cb:2b:98:cd:57:03:fe:ef:8f:5d:eb:91:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:53:D6:68:89:9B:FA:B7:DF:BC:A2:A7:3C:9A:F8:83:47:50:04
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/cgRT1miJm_q337yipzya-INHUAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.52.0/22
Signature Algorithm: sha256WithRSAEncryption
82:55:df:81:d6:ad:39:9b:06:15:b6:09:10:50:46:f0:bf:cc:
37:8b:49:25:77:83:5e:c7:6a:9b:b5:79:4f:94:f2:5f:e6:2d:
66:1f:eb:be:e0:78:70:9b:fb:a6:bd:c1:c7:d8:84:91:38:c2:
0f:df:7b:74:5b:b9:d8:7a:3a:6c:9f:31:0b:ac:63:4d:5f:a7:
31:08:70:db:d3:ca:72:2b:51:31:7c:b0:59:90:a4:76:b2:4b:
9a:71:22:c1:2d:5c:c4:d3:83:e5:94:24:f7:44:9e:7d:18:be:
2d:03:c8:ca:f5:0a:48:2e:c5:38:ed:6e:2c:86:47:a9:ed:e5:
97:a8:5d:ac:9e:b6:95:43:01:e2:f1:d3:fd:37:d0:35:2a:38:
d6:ea:0f:4c:6c:36:4d:0e:70:4d:e1:e8:78:8d:fd:16:28:db:
86:35:b9:53:e7:b9:83:4a:f6:a6:53:0c:89:23:56:4a:95:47:
1b:98:c9:c7:98:c0:ab:d8:7b:30:8c:69:fc:d9:7d:d9:d3:32:
db:b6:fb:7f:24:12:e7:bf:9f:a2:37:33:20:be:25:a8:e1:fa:
dc:cc:ef:6c:a0:41:23:77:eb:c9:45:df:a7:c2:1b:64:0c:7d:
08:89:ad:0c:99:82:33:c9:50:68:66:b7:f6:dc:d7:cd:1b:fe:
23:a0:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:12 2024 by rpki-client on console-fra.rpki-client.org