Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/yVVnmsSiMhD0ACy7VjAnwRIbf2g.roa
File: yVVnmsSiMhD0ACy7VjAnwRIbf2g.roa (raw, json)
Hash identifier: q/GV9n6GRgrlQCaiUqW+6Spf9+u6OuG99ZCMsi45afo=
Subject key identifier: C9:55:67:9A:C4:A2:32:10:F4:00:2C:BB:56:30:27:C1:12:1B:7F:68
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0186857BE731EFB7E0A6D00B4C8A62CECAE6
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/yVVnmsSiMhD0ACy7VjAnwRIbf2g.roa
Signing time: Fri 24 Feb 2023 22:12:15 +0000
ROA not before: Fri 24 Feb 2023 22:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 185.172.20.0/22 maxlen: 24
185.64.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:7b:e7:31:ef:b7:e0:a6:d0:0b:4c:8a:62:ce:ca:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 24 22:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c955679ac4a23210f4002cbb563027c1121b7f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:86:5e:a6:5f:a7:e4:80:ac:55:00:71:86:
d6:45:f0:aa:db:7b:88:58:1d:2a:0c:2c:dc:8f:af:
fd:cd:f9:b3:38:6b:3a:6f:f4:a4:bf:55:4c:2c:cc:
2d:f1:4c:f1:2b:d9:f2:85:68:ca:23:be:e4:a1:bd:
03:cd:97:f6:23:fb:59:91:d1:78:64:f0:03:93:d5:
85:fb:68:e8:2a:71:46:49:2d:7e:99:e4:94:27:f9:
e4:2d:bd:49:50:0c:0a:8c:19:5e:22:e6:71:b7:0e:
ea:cc:e5:33:d3:6a:ef:34:37:27:6c:b5:e8:ef:f4:
f2:3a:56:9b:68:9f:e0:4b:65:30:a3:26:fa:88:8c:
68:7e:8a:f8:68:f2:dc:9f:30:79:d8:24:9a:08:85:
d3:b8:8f:90:08:98:b8:b4:5e:46:2c:7b:34:2d:68:
dc:d7:10:2c:e1:d5:6d:2a:b0:1c:3d:46:98:46:bd:
62:db:0a:f8:f1:f9:bf:8c:fb:ed:95:94:e8:96:44:
95:f6:02:93:1f:fa:fb:44:ad:41:35:25:4e:74:7d:
14:6a:65:9c:19:50:75:a1:5b:04:f1:29:4f:4c:4a:
01:23:ba:72:60:75:20:21:89:07:a2:ef:fe:a2:bb:
3e:85:38:d3:3c:30:5e:63:fd:2f:6e:00:fc:25:53:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:67:9A:C4:A2:32:10:F4:00:2C:BB:56:30:27:C1:12:1B:7F:68
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/yVVnmsSiMhD0ACy7VjAnwRIbf2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.100.0/22
185.172.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:26:12:e9:17:01:67:ba:52:ff:1b:19:d3:6f:83:f9:35:1e:
4c:8f:5d:f3:06:60:13:9b:21:34:d9:1f:23:77:e5:05:aa:59:
71:e8:39:51:b3:c0:3f:fc:1e:41:e3:7f:ef:4d:97:f3:74:17:
81:f2:85:26:08:11:01:73:b0:b1:1d:d7:3c:8b:6b:6d:e5:16:
f3:12:dc:9a:51:7f:7c:b0:78:46:90:93:c5:28:d9:a8:03:1b:
b5:d8:7b:68:41:47:80:2a:fe:1b:11:fc:f5:62:8f:a8:fb:ed:
26:38:9c:ea:c7:fa:b3:6c:46:58:e6:cc:44:81:07:f3:c1:1e:
b7:bb:83:12:b5:69:6d:a7:d6:25:e1:37:76:b2:d7:7b:cc:b7:
2f:98:1b:69:3c:5d:e0:3b:70:73:6a:9c:f3:84:9f:11:aa:a6:
13:e0:2d:be:28:60:5a:1e:86:41:e5:93:f3:8e:bb:29:24:5a:
d2:a1:4c:21:10:15:cf:97:77:23:40:ed:a1:81:9f:b2:5a:aa:
92:8f:42:e9:e6:c8:bb:47:42:26:0c:ad:f5:2c:fb:56:08:bb:
51:0a:02:43:48:76:ed:e3:f7:fc:79:3e:c0:47:6c:37:e6:3f:
d7:96:e0:dd:2b:4f:6c:c9:ff:c8:be:dc:99:56:7a:4f:85:64:
07:13:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org