Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Y2bYJT_fYyLEmE3Vi6Ms1JTy7zU.roa
File: Y2bYJT_fYyLEmE3Vi6Ms1JTy7zU.roa (raw, json)
Hash identifier: jFpyLZPOpfAwmi2ibY4sTy6K3NQjDGsQBQhKecseCrI=
Subject key identifier: 63:66:D8:25:3F:DF:63:22:C4:98:4D:D5:8B:A3:2C:D4:94:F2:EF:35
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 018800356C3D203D2F67B1C73C6605923C9D
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Y2bYJT_fYyLEmE3Vi6Ms1JTy7zU.roa
Signing time: Tue 09 May 2023 11:11:21 +0000
ROA not before: Tue 09 May 2023 11:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:35:6c:3d:20:3d:2f:67:b1:c7:3c:66:05:92:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: May 9 11:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6366d8253fdf6322c4984dd58ba32cd494f2ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:aa:a7:1c:97:c1:51:e0:a6:78:d8:40:00:
34:1f:00:e1:6b:27:ca:b4:63:67:4f:6a:63:38:e6:
fc:ac:37:9e:1a:fa:c9:2f:1e:f7:9e:dc:64:fe:fd:
31:c8:f6:e2:80:b0:f7:68:01:8e:35:b8:51:41:db:
07:a8:31:c7:4f:23:0a:33:10:76:73:b4:db:e3:81:
06:60:b1:b5:79:af:e9:ab:d7:c2:9b:d8:72:64:bf:
df:d0:b4:36:e3:09:15:50:01:69:4c:11:de:77:1c:
c2:ac:bc:48:98:ce:e9:1c:72:68:f7:28:ff:cf:57:
ff:79:c1:18:7d:ca:77:fb:c9:20:cf:52:c7:36:ff:
aa:65:6d:d6:b0:98:7e:73:5c:70:e1:26:29:3a:be:
80:b2:97:97:3d:55:19:05:91:2b:5e:df:1e:1c:18:
fd:78:bc:22:81:7f:5c:11:d8:c4:8b:7a:39:73:25:
dc:51:1a:6a:fa:e4:4c:44:2c:7c:cd:59:a2:51:a0:
64:0d:2f:5d:47:d9:b1:7f:99:f5:96:0f:06:cf:5a:
09:84:45:d7:57:20:e7:89:fa:f2:d8:ad:cd:12:b4:
40:a3:0b:e5:ef:fb:3f:51:f4:bd:8e:49:5c:17:41:
a4:94:3b:0b:20:ea:0e:e4:0f:ef:43:24:59:0e:7f:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:D8:25:3F:DF:63:22:C4:98:4D:D5:8B:A3:2C:D4:94:F2:EF:35
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/Y2bYJT_fYyLEmE3Vi6Ms1JTy7zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
7f:d6:7b:23:31:6e:d1:8c:74:1b:af:97:68:95:26:71:1c:50:
63:ae:22:9f:d6:54:ac:d1:47:78:e9:f5:44:36:fc:65:3b:7d:
c6:f6:da:42:e0:d7:56:95:3d:59:77:10:90:c3:50:42:a2:65:
8d:10:11:9f:69:42:74:83:86:c7:d5:d4:f1:81:ee:32:b4:fb:
b1:dd:e5:79:47:40:36:97:e2:ef:5d:ec:0a:79:1e:13:8a:e4:
5c:83:50:f3:cb:d8:26:35:4d:ac:90:9c:21:66:49:02:b6:af:
b1:11:9c:f1:85:46:36:2b:12:2b:f5:ce:c8:ff:1e:5f:61:52:
09:91:6e:f1:41:20:9d:4e:78:76:63:6d:06:95:6c:12:17:3a:
59:4f:db:b5:af:87:8f:84:40:46:03:1e:ab:23:c2:50:f8:14:
c7:0d:22:52:32:31:e8:ad:ea:67:65:d8:bf:fe:36:21:47:93:
df:ef:53:a2:2c:1c:01:79:b6:bc:2d:d7:02:9a:bc:80:89:7c:
5e:74:7f:9b:25:42:6f:da:da:f8:9d:11:e0:8c:41:0d:08:14:
a9:bf:c2:85:84:ad:5b:83:97:2a:17:d6:22:16:96:58:55:fd:
e5:2d:2a:f3:16:c4:00:35:6e:2f:45:71:d4:81:f6:30:00:2e:
59:31:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:52 2024 by rpki-client on console.sobornost.net