Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/c-O41R5P7nywjQI-tWOMQ3pQqUo.roa
File: c-O41R5P7nywjQI-tWOMQ3pQqUo.roa (raw, json)
Hash identifier: qdWzLXAoPnplCD4cRrOXsCg3yAEnZyco6dNgzbn9dkc=
Subject key identifier: 73:E3:B8:D5:1E:4F:EE:7C:B0:8D:02:3E:B5:63:8C:43:7A:50:A9:4A
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 018844C50D33B027ABA92B52670598C7CBC3
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/c-O41R5P7nywjQI-tWOMQ3pQqUo.roa
Signing time: Mon 22 May 2023 18:42:24 +0000
ROA not before: Mon 22 May 2023 18:42:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16633
IP address blocks: 185.201.17.0/24 maxlen: 24
185.201.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:c5:0d:33:b0:27:ab:a9:2b:52:67:05:98:c7:cb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: May 22 18:42:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e3b8d51e4fee7cb08d023eb5638c437a50a94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:8c:dc:bf:05:f2:89:02:4d:ac:85:cd:5c:
de:09:cb:aa:4d:34:8e:41:b3:5e:c0:2b:96:29:61:
c0:fa:01:60:ea:27:f0:ac:12:cc:0b:af:53:c8:47:
34:bd:6f:a6:22:10:55:4a:b5:31:38:b5:ee:8a:27:
0f:ad:61:05:08:57:b7:17:d0:c2:8e:f0:18:a1:eb:
ed:28:8c:ac:4e:4a:5e:81:e5:af:3b:9b:ee:23:fd:
3d:f6:46:0e:7f:d0:8c:e7:41:6c:63:36:48:6b:14:
01:fd:77:65:7f:f3:9f:29:73:fa:58:ed:f8:89:32:
78:69:7e:d5:cc:b7:c8:d6:f4:e3:fd:1a:bb:0b:48:
07:0d:34:9c:a5:e4:8e:81:de:a3:9a:8f:e4:7d:7e:
65:42:ca:4f:a8:26:19:8a:73:34:1b:8f:f6:8b:f2:
c1:88:f0:51:5d:c0:09:dd:11:b6:2c:1a:42:4f:6c:
3f:4f:24:23:d6:9b:d9:f0:b1:ce:9e:0d:7b:e7:23:
3a:e7:f9:6e:91:7d:46:b5:45:85:16:50:65:27:3a:
77:b1:85:ed:cd:69:ff:84:38:57:d6:7a:e1:29:30:
5e:86:79:8e:c5:04:23:26:2d:33:8e:40:1a:6f:28:
38:a9:55:8c:36:d3:11:a1:c3:5e:52:0e:17:75:a0:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:B8:D5:1E:4F:EE:7C:B0:8D:02:3E:B5:63:8C:43:7A:50:A9:4A
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/c-O41R5P7nywjQI-tWOMQ3pQqUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.17.0-185.201.18.255
Signature Algorithm: sha256WithRSAEncryption
76:bb:65:37:52:73:da:bc:85:10:80:cd:fb:3d:40:66:ef:d5:
7c:d9:25:48:d1:13:9f:0e:23:0b:b6:2f:47:51:7f:9a:6e:c1:
4d:0e:dd:7a:af:41:98:5f:22:69:ae:fa:2c:be:ef:b8:13:84:
94:66:07:a2:9d:3c:46:e2:c8:a7:c6:67:ca:0f:de:80:c7:df:
c6:7e:5f:6b:13:65:d9:f1:0d:9f:40:e3:69:3f:d7:23:53:84:
63:54:18:f8:06:d9:da:e1:61:61:a2:55:01:a0:17:68:6f:50:
36:2a:c2:60:e9:d0:3e:00:5e:87:fa:af:0f:d1:47:d2:48:af:
ed:6a:cb:ec:08:b3:77:8f:bc:9f:2d:1a:45:0e:9a:aa:55:41:
a1:f5:64:d5:f2:61:6e:8d:b4:56:b0:83:5e:ca:6c:27:46:97:
ac:0d:57:bb:a6:ad:65:96:15:71:2d:63:f3:bf:d6:b1:79:2b:
05:a8:8b:ff:1c:ac:fc:b3:a6:4a:bd:c4:f8:33:95:29:88:f1:
65:d4:b2:a2:f4:ed:2e:85:9b:23:89:b6:82:d2:3e:2b:49:52:
fe:8c:fb:d7:81:f0:f7:20:63:1e:ba:be:9f:f4:3b:49:76:87:
75:8f:9b:31:f3:58:3a:f9:ad:79:c3:de:49:9c:3f:53:36:4b:
da:92:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org