Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/ooCOnjG93xsnkeyK21PzFjzawEc.roa
File: ooCOnjG93xsnkeyK21PzFjzawEc.roa (raw, json)
Hash identifier: PgpMVujspM/kL1rXqa4REsCr8sBBYk4/MNMnlHAgIa0=
Subject key identifier: A2:80:8E:9E:31:BD:DF:1B:27:91:EC:8A:DB:53:F3:16:3C:DA:C0:47
Certificate issuer: /CN=679d712b0ce66f4ed9b9340802cce29c2edb2b0d
Certificate serial: 01856E8B5827BEDBBDB5CD995EB4A9C45419
Authority key identifier: 67:9D:71:2B:0C:E6:6F:4E:D9:B9:34:08:02:CC:E2:9C:2E:DB:2B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/ooCOnjG93xsnkeyK21PzFjzawEc.roa
Signing time: Sun 01 Jan 2023 18:15:03 +0000
ROA not before: Sun 01 Jan 2023 18:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62214
IP address blocks: 185.87.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:58:27:be:db:bd:b5:cd:99:5e:b4:a9:c4:54:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679d712b0ce66f4ed9b9340802cce29c2edb2b0d
Validity
Not Before: Jan 1 18:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2808e9e31bddf1b2791ec8adb53f3163cdac047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:8f:87:33:33:b2:d7:ba:af:5a:ac:9f:32:
40:07:c7:3c:e3:fc:51:bf:06:9d:1c:04:e3:01:f2:
e3:d3:44:3c:4e:33:6d:b9:ec:97:6e:63:0b:f6:db:
d2:1e:8a:68:fc:6c:03:c7:10:56:65:fa:e2:43:20:
a9:eb:5d:a2:5e:3c:fb:6c:ed:19:41:1d:4a:0e:f4:
42:e6:55:84:9c:d4:db:21:18:3b:7b:51:40:87:1a:
b3:fe:23:5a:9e:69:c4:1b:c3:01:00:8e:55:ae:c7:
21:66:25:b7:62:73:86:70:5d:bf:02:d9:ea:5d:6b:
f8:83:f8:e2:e2:34:a9:d8:9b:b5:eb:24:1f:5d:1b:
09:65:a5:bf:c5:7d:fd:95:cc:f5:4e:8d:e9:ec:94:
9c:a3:f7:01:fb:01:70:d5:d3:28:a2:94:43:5b:7a:
b0:f4:55:32:d9:c8:0a:58:83:68:62:e5:d6:95:b9:
5d:50:e4:ac:40:5e:52:fc:85:6c:49:ed:25:cf:a5:
1c:ef:49:c5:4f:4b:42:88:d8:94:50:e6:4c:09:9b:
9a:3e:21:10:31:c0:82:c7:c6:29:c8:59:44:b0:6b:
3e:42:06:f3:21:71:4d:cf:c5:f1:2a:93:e3:11:0c:
39:36:a0:28:e8:d6:92:b1:09:9c:9d:61:cc:69:23:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:8E:9E:31:BD:DF:1B:27:91:EC:8A:DB:53:F3:16:3C:DA:C0:47
X509v3 Authority Key Identifier:
keyid:67:9D:71:2B:0C:E6:6F:4E:D9:B9:34:08:02:CC:E2:9C:2E:DB:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/ooCOnjG93xsnkeyK21PzFjzawEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/Z51xKwzmb07ZuTQIAszinC7bKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.60.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:47:e8:e6:92:a8:af:50:aa:eb:3c:78:e9:4e:25:66:da:2b:
cd:77:da:b3:b6:36:0c:bd:0e:f8:a8:f2:2f:07:ea:f4:db:b6:
1f:0c:20:95:0f:31:ad:43:df:c8:a6:24:6b:a7:2a:2c:67:b2:
96:97:13:0f:5c:bc:2b:40:81:2a:7d:cf:a4:02:b0:4d:0a:cf:
ab:49:97:87:45:9e:f8:be:c4:02:02:07:c3:39:44:63:52:56:
92:1b:d2:ff:6e:73:a6:c8:64:3f:fa:c3:fc:e1:91:77:61:42:
b1:c2:e0:2c:9f:af:83:9d:4a:a0:50:99:1a:13:48:86:5f:b1:
b4:ee:2f:c1:7d:e3:8c:6b:9e:76:55:66:53:29:17:7b:08:7f:
2e:0c:e0:2e:a0:5d:4b:da:fd:4a:79:78:b9:c4:2a:7a:58:d5:
c0:24:3c:ab:a1:df:be:eb:93:05:96:07:92:f8:cb:23:80:53:
1d:52:2b:2b:41:8b:15:bd:c8:77:eb:30:1b:4a:90:6d:92:3e:
29:68:09:cc:1f:cc:8b:22:1b:96:4f:6f:e0:bd:6d:f3:25:59:
70:51:68:bb:9d:5a:37:af:e0:b3:8d:6c:3e:4f:10:6a:3e:64:
01:3b:79:2b:62:4e:d3:9b:83:ef:ed:16:e3:eb:83:bd:f5:6b:
dd:e5:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:38 2024 by rpki-client on console-ams.rpki-client.org