Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YKAtD2M9tQ7fH2i5-kH2-UkdEuc.roa
File: YKAtD2M9tQ7fH2i5-kH2-UkdEuc.roa (raw, json)
Hash identifier: xZP2R/LoLm9VtfjM6bWpOu85/NUBoPBvcJMeodVYrM0=
Subject key identifier: 60:A0:2D:0F:63:3D:B5:0E:DF:1F:68:B9:FA:41:F6:F9:49:1D:12:E7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185817D78BFE4EA1226A45EA3BD57DB4092
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YKAtD2M9tQ7fH2i5-kH2-UkdEuc.roa
Signing time: Thu 05 Jan 2023 10:32:41 +0000
ROA not before: Thu 05 Jan 2023 10:32:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 85.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 06:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:7d:78:bf:e4:ea:12:26:a4:5e:a3:bd:57:db:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 5 10:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60a02d0f633db50edf1f68b9fa41f6f9491d12e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:8e:8b:32:3d:27:47:d5:52:f6:6b:95:be:
c5:78:29:62:d6:ba:1f:5e:3a:3d:6c:8a:2c:5f:fa:
d2:95:d4:89:94:84:a6:b0:5a:03:75:82:14:22:da:
8f:c1:c2:15:90:af:be:bc:4d:61:01:e7:06:f1:7c:
a3:03:40:5b:2b:61:c2:fc:7f:0e:b9:33:cf:84:4f:
af:7b:6a:70:d8:ae:95:3f:38:13:c0:e5:5a:71:b8:
5a:ed:68:13:af:92:ee:3a:0f:f3:16:7c:8b:94:7e:
a0:c8:11:50:25:54:c0:03:8d:07:d6:c9:f1:77:60:
21:34:50:01:e4:fe:22:46:bf:5c:6b:cd:1f:4c:9c:
f8:b4:ae:3d:01:6b:33:74:a0:a8:51:0b:8e:17:96:
54:bc:81:a6:9b:13:17:5e:8f:42:fe:79:6d:c0:04:
92:ec:51:1b:ea:66:06:ae:24:c7:5a:03:bb:2f:69:
82:19:8e:66:75:a7:a6:55:4f:62:78:20:d7:5c:82:
be:b5:f9:8a:c6:c3:ce:b2:15:e3:5f:ce:c5:5c:6e:
d9:1d:6d:63:02:4d:23:c0:64:41:eb:15:e2:5b:96:
3e:82:92:de:ce:20:fa:4b:32:fe:8e:4b:ed:1c:04:
cd:df:f2:8e:3f:21:47:b2:d1:c8:d1:4c:ef:86:04:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:2D:0F:63:3D:B5:0E:DF:1F:68:B9:FA:41:F6:F9:49:1D:12:E7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YKAtD2M9tQ7fH2i5-kH2-UkdEuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3c:be:72:af:15:ac:fb:f1:5f:e6:0f:02:09:31:62:29:69:
58:aa:87:9f:3d:a9:bf:cc:13:5d:fb:96:7a:3f:4c:b6:3c:fc:
bd:d8:07:e6:d2:9e:d3:b6:ab:ec:4a:a1:23:09:31:15:a0:12:
b5:5d:5c:40:59:e9:92:0e:42:7b:f5:39:68:2a:a5:f8:bb:fd:
40:b1:88:10:70:54:b9:29:fb:a2:2f:9f:96:58:a4:bd:01:dc:
88:98:18:64:53:2d:c6:f6:0d:a6:a5:e4:df:e7:d6:77:7a:ef:
50:49:92:47:46:44:6f:fe:38:5e:76:ae:fe:62:d9:ab:77:a8:
a7:64:88:ae:d4:58:42:2c:d6:3a:1e:19:04:8d:e0:6c:d1:2a:
28:87:13:c8:b7:69:9f:43:21:2a:a5:5d:c7:5c:f8:9c:13:c6:
9d:bc:21:70:4d:79:e5:ac:91:b5:25:1c:b6:05:bc:2a:3b:3d:
62:96:7f:c5:8e:fc:1e:ce:e8:8e:8c:7d:f0:15:6e:26:67:98:
95:bf:2f:1a:98:b7:c6:95:0c:22:1d:b0:9c:db:1d:73:9f:7c:
5d:81:68:23:a4:ce:5d:71:98:d0:04:af:c8:8a:32:18:c9:8e:
ca:d7:01:6d:e7:4b:1d:67:9a:89:33:87:43:b4:63:fd:6c:1b:
e0:2d:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org