Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/YHVc02_wZTMeIU6YMt1lwIvP9zM.roa
File: YHVc02_wZTMeIU6YMt1lwIvP9zM.roa (raw, json)
Hash identifier: JDShP3JidVk8C+YoGC6MAqiceN/5HT9DGL3lo7Grx1w=
Subject key identifier: 60:75:5C:D3:6F:F0:65:33:1E:21:4E:98:32:DD:65:C0:8B:CF:F7:33
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 01857315EEA5E9F5404BEA386459C7273AE8
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/YHVc02_wZTMeIU6YMt1lwIvP9zM.roa
Signing time: Mon 02 Jan 2023 15:24:55 +0000
ROA not before: Mon 02 Jan 2023 15:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205787
IP address blocks: 185.206.183.0/24 maxlen: 24
185.206.180.0/24 maxlen: 24
185.206.181.0/24 maxlen: 24
185.206.182.0/24 maxlen: 24
2a0b:1640:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:ee:a5:e9:f5:40:4b:ea:38:64:59:c7:27:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Jan 2 15:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60755cd36ff065331e214e9832dd65c08bcff733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:4c:03:fd:23:b6:02:df:90:50:0c:d0:57:
15:5c:a5:d5:b2:eb:65:d5:7d:ee:d1:cf:05:19:01:
c3:23:0d:7d:ba:79:57:47:71:24:c7:54:e3:9f:c3:
6a:5f:16:a8:af:4d:af:a6:7f:b2:5a:ed:ed:e6:59:
b5:8a:66:47:40:81:1c:c7:b1:6a:70:20:05:8c:fd:
f5:f1:64:e7:0e:9b:93:f7:a8:22:a5:9c:02:5d:c3:
fc:f6:2f:b3:86:2d:9b:3b:87:63:06:d5:62:a4:63:
82:c2:fa:2c:2f:67:2a:0b:b8:0e:39:7c:8b:22:1f:
11:26:ad:c6:23:f7:ec:bc:ca:41:f2:e5:71:61:43:
83:62:a0:d0:69:05:54:04:a9:68:06:a6:2f:7e:bf:
76:ef:18:99:93:2e:77:52:3c:bf:85:e2:56:cc:b5:
27:91:97:6f:cf:f8:b4:1e:c5:58:39:b0:9f:df:ff:
e0:16:d9:4a:9d:77:c0:48:4b:be:bd:ff:6f:29:e1:
e2:e4:4c:fb:bd:48:74:4c:69:50:91:a8:29:58:fb:
c3:5a:02:2d:25:67:64:7c:35:35:37:b0:59:26:5d:
dd:6f:b1:a3:e3:05:27:28:19:4b:a8:27:98:1e:7c:
35:17:17:70:8a:fe:df:0f:fb:b0:3d:93:b0:1b:27:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:5C:D3:6F:F0:65:33:1E:21:4E:98:32:DD:65:C0:8B:CF:F7:33
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/YHVc02_wZTMeIU6YMt1lwIvP9zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.180.0/22
IPv6:
2a0b:1640:1::/48
Signature Algorithm: sha256WithRSAEncryption
2b:99:be:42:28:22:9b:b7:5f:83:02:7b:eb:d3:cd:80:13:8d:
60:5d:3f:49:d1:82:a4:7b:6b:9a:7f:f1:ec:58:8d:15:8f:22:
2f:56:a8:b6:38:80:b6:00:0e:84:e5:5f:9e:13:f1:a8:20:d8:
d9:05:af:72:aa:34:9c:76:c6:29:f0:94:32:15:c9:fb:44:72:
de:57:6c:06:d8:23:06:14:7f:c6:25:ab:e5:6b:48:31:31:f0:
8e:08:1d:f4:5c:b1:bd:8a:14:aa:98:89:27:37:6a:91:45:5d:
9a:87:84:78:fc:0f:60:36:62:65:39:6e:cd:c2:a8:12:68:bf:
af:3a:39:97:9a:b2:ba:9b:28:e2:2f:8d:15:0c:3c:d5:21:e1:
74:b3:c6:73:22:ad:df:8e:29:7b:ca:0e:fc:ba:b8:68:c2:0b:
1a:f9:73:d5:77:b0:ea:25:44:75:41:88:c6:e7:73:6c:ff:ae:
75:00:fd:c4:85:91:f1:70:51:4e:94:16:8a:62:7e:b0:e3:17:
c6:53:ae:2e:89:3e:d0:73:5e:20:ab:45:b6:ca:1a:6d:04:b2:
26:2d:17:d1:8c:4a:a0:dc:a0:2a:fb:e9:db:53:66:72:59:51:
61:52:38:fd:fa:86:92:e0:b2:65:fc:81:9c:c3:59:16:3d:ae:
ce:53:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:27 2024 by rpki-client on console-ams.rpki-client.org