Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/066bU2fV0HPWxAljILr7QIyoiW4.roa
File: 066bU2fV0HPWxAljILr7QIyoiW4.roa (raw, json)
Hash identifier: nNsA+2Hug/nVOJ9HpsoCqprYWumUiLWO5hvqgy6U8CU=
Subject key identifier: D3:AE:9B:53:67:D5:D0:73:D6:C4:09:63:20:BA:FB:40:8C:A8:89:6E
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 018573284ABEF8C10FC5765C523651B5D50E
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/066bU2fV0HPWxAljILr7QIyoiW4.roa
Signing time: Mon 02 Jan 2023 15:44:58 +0000
ROA not before: Mon 02 Jan 2023 15:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208821
IP address blocks: 185.189.53.0/24 maxlen: 24
185.189.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 06:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:4a:be:f8:c1:0f:c5:76:5c:52:36:51:b5:d5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Jan 2 15:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3ae9b5367d5d073d6c4096320bafb408ca8896e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:bb:4d:f9:81:66:cb:6e:c7:93:c1:31:85:
9c:ed:f1:ff:c6:de:e9:a4:29:2e:80:cb:4c:ce:e2:
ab:0b:9f:26:12:a1:77:a9:42:12:c4:9f:c4:91:3e:
25:a1:80:21:60:a3:5e:aa:5e:c1:74:f9:bd:2a:72:
96:b7:03:d4:22:8f:36:62:17:a1:69:f6:da:ca:88:
f9:f2:d5:3c:6a:dd:b7:76:52:f9:a9:19:55:ba:a2:
ee:22:e3:4c:9d:61:8b:8f:09:0c:b7:1e:fa:ca:c9:
37:65:60:4a:59:4b:db:d5:5f:8d:7c:96:f1:61:cd:
37:12:bb:af:2c:f7:06:e6:65:24:d5:e3:07:2b:6d:
b2:3a:17:05:9b:86:76:72:e7:1c:e0:b6:78:fc:06:
19:8e:ee:09:03:33:6c:c1:7b:e5:bf:2e:65:2b:1b:
fa:bb:8e:58:61:fd:eb:ad:89:78:9a:4c:38:52:78:
65:c1:d9:2f:73:48:80:7f:6c:d9:36:d1:f3:3e:03:
94:34:a2:35:fa:19:fa:84:4e:a6:01:f7:d7:54:fc:
90:61:3f:dd:1a:6f:67:04:ae:2e:a4:5f:4d:9c:88:
81:a7:14:d2:a9:81:2d:9e:d8:ce:ab:4c:7b:71:db:
eb:3b:76:e0:ad:6e:05:81:ee:fe:c0:5e:e1:64:58:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:9B:53:67:D5:D0:73:D6:C4:09:63:20:BA:FB:40:8C:A8:89:6E
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/066bU2fV0HPWxAljILr7QIyoiW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.53.0-185.189.54.255
Signature Algorithm: sha256WithRSAEncryption
09:89:0d:49:ae:0c:af:a3:a2:7f:b9:ee:8d:2b:f1:b1:27:7d:
cf:0e:41:69:42:fd:f4:68:17:39:d0:e1:fd:08:59:9a:71:77:
ee:e9:69:3f:6b:0a:f9:b9:96:7e:80:ae:bc:4f:f1:2d:79:e0:
b4:6d:66:26:db:1a:4f:0b:81:39:84:41:3b:d9:46:c4:a1:4d:
d6:45:69:4c:b4:34:9d:1c:5e:92:fc:b0:b4:03:2f:81:49:4f:
e2:a9:28:ab:f3:bf:b8:bd:fb:75:6a:ad:e0:9b:e5:91:d5:25:
1a:7b:af:9b:72:97:53:15:ab:c3:a0:36:ae:b5:cc:e2:17:b5:
0e:0d:00:26:f7:c4:7f:88:1b:8a:d7:30:32:78:80:93:ee:55:
e9:c3:8f:3e:0e:62:84:cd:aa:5f:b4:21:97:9e:4c:8f:1e:21:
fb:de:7c:f5:8e:b3:e3:55:b0:79:35:29:7c:ba:fe:a6:a2:bb:
d0:f3:85:bd:1b:54:87:91:90:79:cb:5f:a2:50:47:46:2f:22:
b5:a9:76:a2:0c:03:cc:a2:9d:71:f2:46:13:e1:19:70:a8:11:
e2:f1:b1:c0:87:76:2c:ae:65:cc:85:6d:05:ca:98:fa:17:90:
0a:2b:20:a7:af:33:76:18:31:7a:24:db:73:0d:f4:ea:8f:1d:
44:91:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:07 2024 by rpki-client on console-fra.rpki-client.org