Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/3Bc9VYUoOQFjTIMtCHg1jnKJhdw.roa
File: 3Bc9VYUoOQFjTIMtCHg1jnKJhdw.roa (raw, json)
Hash identifier: FAkdSMDZyRASnIWJ6nYDVFyAufNTIqzR9sRaUDb6djQ=
Subject key identifier: DC:17:3D:55:85:28:39:01:63:4C:83:2D:08:78:35:8E:72:89:85:DC
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 01857321D817EBD1D99674BC8F79CD39F969
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/3Bc9VYUoOQFjTIMtCHg1jnKJhdw.roa
Signing time: Mon 02 Jan 2023 15:37:55 +0000
ROA not before: Mon 02 Jan 2023 15:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201127
IP address blocks: 185.189.60.0/22 maxlen: 24
2a0b:d680::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:d8:17:eb:d1:d9:96:74:bc:8f:79:cd:39:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Jan 2 15:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc173d5585283901634c832d0878358e728985dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:6f:f9:e4:3b:d9:90:7a:14:e5:26:02:ff:
08:ca:fb:e9:b5:49:90:ac:c8:8d:5b:2c:6d:39:e4:
ec:29:aa:c6:42:01:a8:38:1d:60:0b:bb:c7:ab:60:
ae:3a:59:cb:ae:34:99:c5:5a:2e:ae:ce:4a:6d:69:
4b:88:9d:0a:83:f3:72:21:b2:3b:b7:d2:71:7b:d9:
89:88:1b:b5:da:a4:d9:57:bd:f6:fb:df:37:dc:d0:
73:91:f7:1f:ee:01:4e:40:5d:7b:1e:5d:fe:61:d2:
e7:f9:a4:5d:b4:ef:ea:12:70:b3:72:7e:87:2f:95:
29:3a:42:26:0a:29:d3:57:6b:8f:e1:8f:66:bb:ab:
12:b3:eb:c5:e5:2b:c5:de:f3:d1:49:8a:c5:a7:3b:
ce:20:1d:86:e5:09:dd:36:8d:7e:b7:16:2d:57:06:
25:2a:dd:55:d0:6b:2e:ef:0b:b2:e5:4c:c1:1c:a0:
1f:c9:4f:79:de:d1:0f:a1:2e:fc:5d:27:68:d1:74:
a7:56:ca:d9:ab:e6:23:8b:d6:d7:ea:94:69:54:2e:
61:33:eb:10:d3:39:e3:f8:2e:97:5b:29:97:32:03:
61:80:55:ad:50:f4:ad:14:b0:32:02:e8:f6:52:ca:
a9:4c:c9:5f:96:48:3c:7b:c3:b1:35:d4:91:e4:49:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:3D:55:85:28:39:01:63:4C:83:2D:08:78:35:8E:72:89:85:DC
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/3Bc9VYUoOQFjTIMtCHg1jnKJhdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.60.0/22
IPv6:
2a0b:d680::/32
Signature Algorithm: sha256WithRSAEncryption
44:a9:e0:26:08:5e:9c:da:72:2c:ae:18:fb:5a:84:b9:1c:8b:
e7:7d:f2:01:b4:cc:0c:a1:2e:d4:59:b0:a2:0c:d2:c4:ab:1a:
7d:bf:17:91:e5:bd:f8:5e:bd:26:08:46:a7:c9:22:c3:45:c6:
80:09:49:8a:5a:9a:8e:29:39:11:3b:13:93:bb:61:7b:38:58:
1e:17:26:85:e0:6b:18:18:98:83:9b:0d:7f:56:84:d5:81:03:
4e:dd:2e:1a:e5:57:53:a8:ce:ee:bd:c8:2f:39:19:32:bc:80:
0d:38:8a:f6:ce:25:56:9a:0a:be:bd:c2:d6:18:a6:36:a8:26:
67:c4:7f:37:6e:c0:32:2e:d1:64:d0:3f:a3:24:05:45:11:1c:
a8:36:be:68:99:8f:5e:87:95:af:53:a6:75:88:ed:f0:65:74:
48:1b:11:5e:29:f0:54:3b:31:d5:60:8f:fd:36:1d:a0:35:0e:
30:c6:16:90:09:bb:cd:0a:9f:60:a7:77:7b:fd:d4:d6:5b:5c:
32:1c:1b:6c:a5:38:5a:52:c6:5e:f9:6c:11:2e:0a:a0:93:25:
7c:1e:47:01:43:c9:dc:55:c6:91:83:c2:a9:52:07:53:79:6a:
bc:af:bd:d6:2a:54:d0:fe:a8:62:ba:ab:0c:d1:50:f9:09:e1:
7c:04:6a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:35 2024 by rpki-client on console-fra.rpki-client.org