Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/yNcOJwOozacdO4BwPZew2yKCYHM.roa
File: yNcOJwOozacdO4BwPZew2yKCYHM.roa (raw, json)
Hash identifier: PvIsbeS82o/yqcQjlNPYmujEM7On6WhyaRfnBLyIdD4=
Subject key identifier: C8:D7:0E:27:03:A8:CD:A7:1D:3B:80:70:3D:97:B0:DB:22:82:60:73
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 018571279AFB9B1A77B3A87F80E6147614DD
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/yNcOJwOozacdO4BwPZew2yKCYHM.roa
Signing time: Mon 02 Jan 2023 06:24:59 +0000
ROA not before: Mon 02 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60558
IP address blocks: 185.62.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9a:fb:9b:1a:77:b3:a8:7f:80:e6:14:76:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jan 2 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8d70e2703a8cda71d3b80703d97b0db22826073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:62:23:27:1f:d6:aa:11:36:76:c2:09:7d:
78:fa:ef:28:e3:84:7f:18:81:47:50:ac:e6:7e:38:
ea:28:37:7b:47:06:65:b5:5e:73:4c:52:25:36:68:
db:fb:5b:63:70:6d:08:ce:fe:11:01:3c:aa:4e:18:
8f:2d:da:d0:30:2b:c1:f6:c5:1a:53:1b:23:0b:7a:
ee:c0:fa:36:21:d4:55:77:2b:1f:56:d8:b3:2c:fa:
2b:dd:29:e9:00:9f:b3:22:59:04:98:d6:6b:57:28:
9c:56:86:9c:e1:5e:bc:a4:aa:29:fe:5f:ef:d6:cc:
c0:27:1e:cf:34:e5:59:2b:4e:2d:9b:34:3f:0d:df:
b6:b8:f9:cf:62:ad:04:01:02:d8:a5:94:0a:36:70:
1b:57:98:0e:80:2e:35:fd:16:e8:ea:e3:58:cc:92:
4f:cb:1f:fe:82:95:ee:f7:4d:a0:cb:9d:9f:b8:13:
a0:7d:8d:d0:84:a7:a5:d9:81:65:d9:97:e2:e1:58:
70:79:ed:77:28:b3:82:74:ff:71:f0:9f:fc:ce:e3:
94:b8:1c:9f:20:fb:55:82:68:99:7b:07:1b:1a:74:
99:18:cd:37:7a:4d:8d:5d:27:09:b7:6e:5b:ed:22:
51:91:c8:f7:b9:99:f6:04:8c:12:94:d9:ca:92:1d:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:0E:27:03:A8:CD:A7:1D:3B:80:70:3D:97:B0:DB:22:82:60:73
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/yNcOJwOozacdO4BwPZew2yKCYHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.36.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4e:0b:1a:39:9a:51:51:8f:6f:01:1a:9f:81:a3:ab:5f:d6:
78:a9:00:de:a2:82:6e:d1:6a:c9:6f:78:21:94:30:0c:3d:26:
64:dc:fb:69:e5:0f:a6:83:4d:89:ac:9e:4a:08:d0:e2:df:8a:
9a:31:b6:b2:45:5a:55:c5:3f:2b:39:d1:cc:ce:68:33:04:56:
f6:92:d8:9d:23:ce:35:df:c2:bb:fc:93:78:e2:be:0d:85:63:
4a:92:56:88:20:f7:b4:6c:21:8a:00:9a:b4:5c:ce:59:36:40:
fa:a6:09:32:98:03:82:e1:3c:0f:66:c6:3b:56:7c:57:9a:c3:
cd:40:cb:e3:ab:e3:d4:bf:db:d8:f3:14:b9:57:ea:b3:28:ec:
8e:54:e3:64:0a:16:17:e5:cb:65:41:12:8c:fe:f1:24:11:cc:
0d:32:90:eb:5e:6a:4c:b3:9c:3c:be:3b:9d:8e:29:05:da:c9:
5e:dd:ea:e3:0a:09:0d:f3:36:a2:1e:ee:95:06:7a:ed:56:17:
bb:1b:24:56:9b:54:7b:57:bd:32:17:0f:bd:9c:43:5e:cf:4f:
10:01:1e:b2:88:4f:23:63:bb:e0:63:7e:c2:0e:18:4f:50:e3:
43:53:92:e4:7c:25:c4:de:f9:ef:9b:1c:a2:18:43:56:e9:eb:
a0:39:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org