Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/pxZCvewYtij9OWmyE3YTO7G4ShM.roa
File: pxZCvewYtij9OWmyE3YTO7G4ShM.roa (raw, json)
Hash identifier: GPx/X0C1sOIeXQX0sJ4AVqxpCfkoPHQaptUOSqXgo9U=
Subject key identifier: A7:16:42:BD:EC:18:B6:28:FD:39:69:B2:13:76:13:3B:B1:B8:4A:13
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 018849AE4BA5531CB6BB84F33DD783216B98
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/pxZCvewYtij9OWmyE3YTO7G4ShM.roa
Signing time: Tue 23 May 2023 17:35:39 +0000
ROA not before: Tue 23 May 2023 17:35:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47216
IP address blocks: 185.119.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:ae:4b:a5:53:1c:b6:bb:84:f3:3d:d7:83:21:6b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: May 23 17:35:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71642bdec18b628fd3969b21376133bb1b84a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:19:a1:be:2e:0e:8e:23:13:67:f1:f2:9f:
cd:93:b7:c0:fe:04:d9:2f:d1:8f:1b:93:ae:af:ad:
49:e6:90:a8:c2:b0:27:d8:fa:bd:f1:13:85:71:1c:
61:36:4b:88:04:b9:e8:c7:40:c2:14:4d:bb:23:84:
62:ab:fb:1a:61:55:58:27:03:ae:98:d2:93:fb:55:
16:cd:1a:6f:2a:c6:f3:0e:2e:55:0a:52:86:36:ec:
06:b7:1a:b0:4b:56:7d:49:a7:90:de:81:a4:cc:32:
96:c0:dd:a7:42:7e:47:09:ae:93:22:6f:eb:cc:9a:
ad:e8:b3:04:5e:85:da:c6:94:3e:b6:87:fb:e2:6d:
55:1d:fe:d9:b5:87:c2:21:f3:f9:d4:22:8c:10:32:
60:db:51:be:9e:7a:d2:11:70:14:be:b0:9c:8d:fc:
a0:b4:e1:b0:d2:95:96:e6:5b:37:d9:0a:42:d0:c2:
48:4f:85:66:00:c7:db:23:f6:42:f6:78:28:2c:4e:
3b:be:a4:ab:a2:c5:cd:2a:f8:77:d1:7e:48:f6:9c:
08:4d:a4:c1:9f:e1:28:b8:d2:7b:d8:27:ec:15:9f:
f8:b4:79:54:86:0a:e7:59:46:62:1f:b5:f8:53:02:
5e:09:78:82:69:10:5f:6d:f9:06:fe:5a:65:9f:c3:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:42:BD:EC:18:B6:28:FD:39:69:B2:13:76:13:3B:B1:B8:4A:13
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/pxZCvewYtij9OWmyE3YTO7G4ShM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:64:fb:f4:2b:ff:58:1f:70:36:11:6d:00:ca:e0:6d:d0:c9:
4f:5c:86:ac:55:35:64:d3:b4:0e:8c:4a:84:05:24:d5:8f:c7:
97:b2:5a:24:76:06:b1:b1:f7:61:61:9e:c9:1b:e7:54:c9:76:
1e:f0:38:d3:a8:eb:ec:88:2e:72:d7:96:53:c1:6a:a9:d2:ff:
cf:34:2f:37:9d:14:53:8d:20:a8:1c:f1:90:fa:69:92:8c:d7:
d1:9d:14:64:21:f9:f6:7c:37:23:3f:60:80:e8:a4:e8:73:bc:
01:6d:7a:8e:81:21:e5:5b:48:a0:42:e6:d0:d0:b2:5a:25:45:
aa:67:ed:85:c7:e6:08:ee:3d:98:3b:93:bc:71:07:42:63:87:
62:e0:38:b4:3a:54:da:c6:80:55:33:b3:0e:33:3a:7b:46:ab:
c0:09:52:1c:4b:23:42:72:da:0c:f7:9a:b9:f2:80:fb:62:f4:
94:74:3a:32:c2:26:c0:3c:cc:12:40:93:c9:6b:4f:94:9f:5a:
b2:04:c4:41:62:27:8a:12:e5:6e:3d:66:87:51:0e:79:bd:78:
49:a1:8d:39:69:d9:5d:ec:2e:b7:55:df:33:7e:df:23:d7:76:
a9:be:2e:c3:2e:6f:7b:c2:58:f0:dd:16:26:00:76:00:99:f1:
5f:17:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:58 2024 by rpki-client on console.sobornost.net