Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/iPHI0iS7RA_fD2x0sS5nPThNY7Y.roa
File: iPHI0iS7RA_fD2x0sS5nPThNY7Y.roa (raw, json)
Hash identifier: MYuAhsnvdZz/yJKFtwlNk9kUCaWIdSNhtT52HxRUwRY=
Subject key identifier: 88:F1:C8:D2:24:BB:44:0F:DF:0F:6C:74:B1:2E:67:3D:38:4D:63:B6
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 01881E7A737DA02A5D9E01713BE802C3CE36
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/iPHI0iS7RA_fD2x0sS5nPThNY7Y.roa
Signing time: Mon 15 May 2023 08:15:21 +0000
ROA not before: Mon 15 May 2023 08:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59771
IP address blocks: 185.205.24.0/24 maxlen: 24
185.205.24.0/22 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:7a:73:7d:a0:2a:5d:9e:01:71:3b:e8:02:c3:ce:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: May 15 08:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88f1c8d224bb440fdf0f6c74b12e673d384d63b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:aa:c3:e4:27:66:89:76:ff:ff:26:61:87:
6a:1f:67:67:c4:18:48:47:a9:7b:bd:1b:62:60:49:
08:cd:8f:5c:b3:1a:65:70:b9:22:a3:72:07:f1:4e:
cd:8d:e3:e8:9e:09:2d:c8:cc:b1:17:79:75:23:a7:
91:e2:38:36:17:cd:6d:af:3e:0c:d2:c9:ec:b2:07:
7c:03:6c:2a:54:cc:d8:00:5f:57:aa:6f:2b:ed:94:
88:f4:7b:87:7b:e4:07:00:22:1a:ef:25:3b:2a:97:
a7:32:ab:c6:ae:24:6b:c6:7e:8e:8b:ee:82:a9:71:
7e:13:e7:15:e3:91:36:71:47:c1:65:2a:40:1f:ac:
49:67:c0:d2:3b:01:6e:c8:f7:98:e7:32:ca:d5:e5:
1d:a5:07:b2:3b:75:c1:cd:da:7d:7e:36:7b:13:bd:
76:8a:45:ec:7d:b0:9a:11:39:7a:e8:2e:de:71:78:
60:ce:4c:9a:b8:7b:75:b3:5b:f6:e3:df:a7:72:db:
5f:dd:8d:2a:d7:58:b9:06:ee:36:e1:78:a7:49:ce:
9f:9d:a2:32:22:de:3f:d8:53:7e:f7:76:4f:2a:a0:
80:78:33:bf:15:b4:3d:e7:d1:6b:eb:c8:1a:eb:06:
c5:44:1c:4c:62:9d:87:03:a6:9a:07:0b:c8:61:84:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:C8:D2:24:BB:44:0F:DF:0F:6C:74:B1:2E:67:3D:38:4D:63:B6
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/iPHI0iS7RA_fD2x0sS5nPThNY7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:97:43:ea:ca:bb:dc:3e:61:60:e3:07:1e:e3:a3:66:33:9f:
af:35:18:b3:d6:c0:2c:b7:03:b3:62:f7:bf:d0:89:79:d6:4a:
52:fa:37:e3:2b:07:a0:54:5b:af:32:ce:d4:5b:75:d4:67:03:
c2:62:55:71:89:7a:fd:fd:15:97:04:90:d1:de:fb:d5:ce:fe:
72:bb:ef:35:d3:95:a3:27:75:ea:f3:ff:90:84:11:16:a2:62:
09:0b:5f:d6:2f:7c:60:d0:70:ea:05:71:44:5b:d7:d5:0b:40:
9a:bd:93:7c:97:c7:02:f8:d3:36:8c:9f:c4:e5:3c:4f:e1:c4:
23:dd:3e:68:cd:96:a2:6d:52:a5:58:4c:4a:ac:c1:88:af:ae:
44:22:0d:15:4a:26:29:fc:a3:05:a3:21:87:dd:4c:f8:73:4c:
3e:e3:7d:00:9b:a4:43:44:d3:f5:8f:e8:46:29:7a:87:32:df:
f4:ea:8f:25:a9:91:28:45:7e:25:22:37:fc:bd:3b:09:0e:b1:
af:c8:80:8f:c8:4e:50:7d:7f:77:f9:d4:29:29:ad:b1:7a:2b:
72:8e:44:45:53:c6:e7:d0:b5:65:2e:2d:38:c1:e9:0e:f5:2a:
96:dc:82:dc:8c:c0:74:d3:8c:96:84:d3:22:e2:85:23:3e:42:
4f:d1:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net