Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Y_WKtsbypPnxSr9e6Y1KO9C03KM.roa
File: Y_WKtsbypPnxSr9e6Y1KO9C03KM.roa (raw, json)
Hash identifier: i+Yo52//w+uDZ6UB6ItiRTPRwopvvREqbTo07/kBA9I=
Subject key identifier: 63:F5:8A:B6:C6:F2:A4:F9:F1:4A:BF:5E:E9:8D:4A:3B:D0:B4:DC:A3
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 018A236ADA2CCED914E5F06D14C0E480B5F3
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Y_WKtsbypPnxSr9e6Y1KO9C03KM.roa
Signing time: Wed 23 Aug 2023 17:21:59 +0000
ROA not before: Wed 23 Aug 2023 17:21:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39826
IP address blocks: 185.84.144.0/24 maxlen: 24
185.84.145.0/24 maxlen: 24
185.84.144.0/22 maxlen: 22
185.84.147.0/24 maxlen: 24
185.84.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:6a:da:2c:ce:d9:14:e5:f0:6d:14:c0:e4:80:b5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Aug 23 17:21:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63f58ab6c6f2a4f9f14abf5ee98d4a3bd0b4dca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:af:5b:d4:6c:6f:bc:17:89:3c:c4:71:57:
91:1d:f4:0a:e0:a6:28:f7:e4:c1:ad:e7:80:8a:97:
e7:53:24:11:67:9e:16:1d:e5:e2:93:c7:41:dc:fc:
90:68:07:1a:fc:82:94:83:36:27:ea:4a:6c:08:26:
a9:9f:ae:0e:7e:fb:02:c0:44:21:d5:70:3d:89:df:
d2:af:eb:f1:b2:71:65:1c:5b:d0:77:2e:2d:93:06:
4a:be:c6:e7:fb:bd:4c:b2:cf:a4:69:b5:25:57:1d:
8c:58:28:41:e8:af:49:ca:61:83:1f:7b:f2:0e:32:
56:23:c2:1c:05:55:5b:bd:4e:77:df:6a:57:8f:c6:
4d:63:da:4f:f3:f9:aa:bf:a9:36:5e:ca:a0:c7:0a:
82:63:b0:32:9a:82:c0:3a:bc:2f:06:9d:72:52:e8:
11:18:b9:14:83:fb:40:c0:e5:b0:ab:ad:5e:c3:41:
d4:ca:da:29:95:85:0e:9a:cc:9e:6e:2d:c7:8d:29:
d8:5b:f9:54:49:58:d0:08:32:d5:73:f7:6f:84:1e:
48:fe:77:17:6f:19:1c:81:fe:48:f5:fc:4c:0f:8d:
fb:ff:e5:57:ed:d2:f6:3c:2c:26:98:6f:b1:93:3c:
74:b3:bb:45:c7:e7:d1:79:4a:e7:87:09:8c:9e:46:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F5:8A:B6:C6:F2:A4:F9:F1:4A:BF:5E:E9:8D:4A:3B:D0:B4:DC:A3
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Y_WKtsbypPnxSr9e6Y1KO9C03KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
34:db:d7:0d:e6:b3:87:d7:29:3a:5f:3b:3d:9b:e9:91:0e:38:
6c:c2:dd:2b:4d:1d:22:c7:09:6b:08:ea:79:a5:61:8a:e5:e3:
2e:60:a8:10:81:63:5d:2b:ce:6d:64:21:30:34:9b:89:93:2b:
01:bd:f3:d0:5b:99:f8:c6:2f:9b:ce:40:86:6e:cb:64:94:60:
c9:b7:5b:67:17:07:31:50:3f:fb:72:a5:32:c8:00:8a:9a:af:
c6:6a:b6:f7:c6:60:9c:da:8c:85:d9:09:fd:27:ef:9e:e6:9e:
9d:f1:d2:eb:2f:03:4a:3d:34:64:b5:74:d7:33:c1:c2:e7:f9:
76:ca:f1:f5:45:e3:17:aa:0a:08:8e:36:b9:d4:03:a0:fb:e6:
da:21:bb:cb:79:11:c9:99:d9:6a:7a:3f:3d:c3:c3:63:91:c0:
e1:17:e5:6c:74:ca:9b:2c:4e:07:0b:f9:fa:a1:38:2c:8a:ca:
8e:d7:dd:50:47:35:47:ec:14:ee:13:82:0a:98:67:03:9f:8c:
c9:34:af:e4:fc:e3:5e:3b:5d:91:1a:00:4e:5a:39:ab:95:0e:
0a:72:f3:a7:40:e5:79:d2:3e:44:61:2a:f9:aa:32:04:b8:cd:
9d:ce:7f:f3:0d:29:44:2b:63:36:55:8f:af:42:1f:f5:92:0e:
ca:47:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:02 2024 by rpki-client on console.sobornost.net