Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/yNMfVcEC70k3wSiTYU65gIJx2Vk.roa
File: yNMfVcEC70k3wSiTYU65gIJx2Vk.roa (raw, json)
Hash identifier: G+aetq6qwSKzMX6vsIcYr7yuEgOQ92kF60YQSIsZ5A4=
Subject key identifier: C8:D3:1F:55:C1:02:EF:49:37:C1:28:93:61:4E:B9:80:82:71:D9:59
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 018E20D31CD2D185B703EF7CEFE73D144A29
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/yNMfVcEC70k3wSiTYU65gIJx2Vk.roa
Signing time: Sat 09 Mar 2024 01:28:10 +0000
ROA not before: Sat 09 Mar 2024 01:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205896
IP address blocks: 185.206.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 10 Mar 2024 12:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:20:d3:1c:d2:d1:85:b7:03:ef:7c:ef:e7:3d:14:4a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Mar 9 01:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d31f55c102ef4937c12893614eb9808271d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:8e:0a:ba:dc:4c:7e:de:a6:e0:d4:f7:dd:
c8:dd:46:cb:b4:18:a2:9b:ed:63:79:65:e3:ee:06:
cc:d4:b7:65:75:86:c5:06:c0:11:73:68:4e:8c:54:
8e:ed:fb:c8:4e:3f:2b:69:19:7a:0d:bb:94:45:5c:
e3:24:d5:ab:81:f4:4c:e4:d1:76:7e:81:ac:9c:7f:
60:0a:7d:38:00:41:f6:00:19:ed:f8:c7:28:a2:2d:
9d:0b:48:57:2c:25:d8:f5:9b:57:86:70:3e:30:57:
85:65:3e:e8:1a:b7:94:d4:b4:c2:ea:c3:67:8d:31:
e6:62:90:1d:d2:06:4d:c7:f2:64:0a:49:f8:36:e2:
58:2e:31:ed:71:ca:f7:c8:69:43:ff:8a:9a:e3:20:
e2:13:bb:81:65:9f:17:f2:d6:d0:60:2c:6d:19:b1:
ac:65:0c:79:3f:a8:79:91:35:27:c3:91:81:5a:3d:
c9:90:a0:c5:af:f8:b5:0b:2b:ac:0f:05:a9:d9:1f:
2f:ba:57:64:fe:a1:c9:a2:63:48:7f:d3:45:ae:d8:
7a:29:fd:fc:4d:51:be:2c:ff:11:6f:84:e9:5d:44:
d2:4f:d2:7f:84:1f:42:9b:d3:6d:61:39:02:5e:2d:
c3:de:43:6c:13:52:6c:d7:9d:fb:b3:fd:9c:05:89:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:1F:55:C1:02:EF:49:37:C1:28:93:61:4E:B9:80:82:71:D9:59
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/yNMfVcEC70k3wSiTYU65gIJx2Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:28:7f:e0:68:c8:51:44:f4:f1:27:1d:4c:81:ae:f3:3a:02:
c6:7d:95:6e:aa:ee:9d:6d:a8:23:aa:b4:06:4b:1f:0e:bd:70:
cc:ca:e2:9c:30:76:44:8c:4a:40:e8:f8:42:0e:7c:98:70:b7:
12:5b:c3:76:69:3d:92:bd:a0:f3:a4:e1:94:b0:70:c2:ff:3d:
72:88:f1:e8:c7:0b:3d:34:46:b9:7e:79:86:cf:42:c6:a0:4d:
db:ec:0e:b3:09:a4:c7:56:7c:a3:55:e0:3e:3c:96:b0:e2:71:
21:f1:6e:70:5b:97:e7:07:03:be:af:0f:9f:c7:b7:98:f4:5f:
f2:22:ab:16:ed:0e:15:be:fb:4a:4d:b9:a9:40:30:ed:25:50:
e1:d8:12:ef:be:b2:b9:dd:3a:39:48:1f:d0:0b:b8:69:b5:1a:
37:35:6b:ca:cc:4a:c5:4e:04:3e:ff:9c:ac:30:c6:47:94:13:
ad:74:7a:4c:ad:07:6c:00:94:18:10:5a:59:c2:90:e1:80:11:
e6:84:3d:e3:b0:46:a0:e1:2c:6c:e7:82:60:05:00:92:0e:a6:
c3:43:8c:af:6b:79:67:b8:98:95:4d:28:42:ea:80:a2:36:54:
2b:ed:7a:ec:f2:1e:bf:5e:24:c4:60:2f:4b:11:04:10:bb:72:
f9:a6:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org