Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/1F-YFVPrCy1oBR_FRsoSiySu1lQ.roa
File: 1F-YFVPrCy1oBR_FRsoSiySu1lQ.roa (raw, json)
Hash identifier: v1VnF7vzOdnwb0M6BR8wmt/B5iccr/OYpFGk0bCArVE=
Subject key identifier: D4:5F:98:15:53:EB:0B:2D:68:05:1F:C5:46:CA:12:8B:24:AE:D6:54
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 018570D53AEFD0A18A3AE844C47289626ADB
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/1F-YFVPrCy1oBR_FRsoSiySu1lQ.roa
Signing time: Mon 02 Jan 2023 04:55:00 +0000
ROA not before: Mon 02 Jan 2023 04:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201997
IP address blocks: 185.59.186.0/23 maxlen: 23
185.59.186.0/24 maxlen: 24
185.59.184.0/22 maxlen: 22
185.59.185.0/24 maxlen: 24
185.59.184.0/24 maxlen: 24
185.59.187.0/24 maxlen: 24
2a02:6ca1::/32 maxlen: 32
2a02:6ca4::/32 maxlen: 32
2a02:6ca2::/32 maxlen: 32
2a02:6ca0::/32 maxlen: 32
2a02:6ca0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:3a:ef:d0:a1:8a:3a:e8:44:c4:72:89:62:6a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: Jan 2 04:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45f981553eb0b2d68051fc546ca128b24aed654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:81:f6:50:9e:72:26:fe:59:49:7c:5f:46:
63:9d:7f:1c:98:21:f8:81:94:09:4f:0a:26:39:cf:
44:73:b2:79:69:94:5c:15:95:cb:01:53:7a:89:23:
97:d9:97:63:34:85:77:67:c0:92:10:db:9f:f8:08:
0d:61:c3:a3:0a:e6:34:fb:0c:c5:c4:1c:d3:2d:8a:
a8:66:05:10:71:a1:dd:a7:77:a8:c8:1d:59:98:6f:
23:c0:1c:5a:cc:30:6b:ed:6d:6d:85:11:f4:35:23:
c1:24:92:39:06:c0:22:d5:1a:2f:cc:cd:6b:d0:ec:
4d:7a:e6:e9:79:18:0c:1c:58:f2:4b:69:72:97:6e:
69:85:c4:f3:95:ea:b9:91:3f:0c:4d:73:30:27:51:
4a:10:77:b9:24:ec:f7:9c:ef:b9:c2:ab:1c:08:a6:
51:24:23:be:95:c2:1b:8d:5b:39:55:a6:72:bd:06:
9c:33:5b:11:10:aa:31:98:0d:2f:98:29:28:b7:89:
a7:c9:de:87:f4:5f:05:65:a6:21:63:76:2d:70:be:
e7:28:79:1b:0c:dc:fd:d9:2b:c2:d6:ed:33:7c:43:
b1:a5:75:1b:ef:9a:2a:ec:c9:3c:84:f8:f9:ad:ae:
67:9f:a5:1c:ba:e2:42:91:0c:73:e4:b6:a9:3a:61:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:98:15:53:EB:0B:2D:68:05:1F:C5:46:CA:12:8B:24:AE:D6:54
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/1F-YFVPrCy1oBR_FRsoSiySu1lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.184.0/22
IPv6:
2a02:6ca0::-2a02:6ca2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:6ca4::/32
Signature Algorithm: sha256WithRSAEncryption
17:39:c7:20:47:52:46:62:ac:05:cf:a9:f7:f5:cb:05:c7:01:
f8:4e:da:20:5b:15:f0:bc:14:03:14:bc:9c:14:09:e5:c4:f2:
8b:77:90:6d:cb:e9:da:96:fb:0b:77:5d:4f:97:d5:17:2b:b3:
6b:f0:7b:09:9f:e6:4b:87:6d:13:70:cb:d0:69:6c:5d:2b:cc:
c2:ab:81:fc:63:6d:81:fd:da:95:55:1f:ed:50:a9:23:db:f1:
69:28:93:43:63:5c:e7:91:00:a3:50:7b:37:0a:0c:a7:b3:3f:
1f:1f:95:5b:68:e1:5e:97:0c:5a:6b:ce:50:ca:c8:b6:20:7a:
3e:e5:15:ac:af:81:9b:68:ac:14:c0:e2:0d:27:18:f7:a9:15:
3d:e1:d6:9e:d8:56:38:74:23:27:80:0c:05:8b:f7:1b:3e:51:
b8:df:87:90:d9:97:34:33:92:4e:cc:02:5b:a7:49:6a:14:8c:
47:c6:7f:00:54:57:36:02:f2:1b:08:93:1a:0e:3d:f6:16:c0:
4d:1b:cb:4f:c7:c2:9e:6a:e2:01:07:28:a8:a2:37:69:88:5f:
bd:63:16:54:35:29:41:3e:0c:3b:b1:3b:ff:ff:5a:52:bf:dc:
59:59:82:ce:12:1c:db:52:17:f7:fe:b0:39:ca:f1:59:19:87:
83:e2:e9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:20 2024 by rpki-client on console-ams.rpki-client.org