Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/y3QYnj3PfKiVr_RwFZkPujdfQV8.roa
File: y3QYnj3PfKiVr_RwFZkPujdfQV8.roa (raw, json)
Hash identifier: q0wP+4iDIdux6y+rvM7GbLILkWUyOPFcMyaW677KcGY=
Subject key identifier: CB:74:18:9E:3D:CF:7C:A8:95:AF:F4:70:15:99:0F:BA:37:5F:41:5F
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0187115D6955ACF56D2F51BB4C4C2726B27B
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/y3QYnj3PfKiVr_RwFZkPujdfQV8.roa
Signing time: Fri 24 Mar 2023 02:05:47 +0000
ROA not before: Fri 24 Mar 2023 02:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59802
IP address blocks: 185.68.198.0/23 maxlen: 23
2a05:19c0:2::/48 maxlen: 48
2a05:19c0:2::/47 maxlen: 47
2a05:19c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Mar 2023 02:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:5d:69:55:ac:f5:6d:2f:51:bb:4c:4c:27:26:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Mar 24 02:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb74189e3dcf7ca895aff47015990fba375f415f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:fc:54:c7:1a:7e:08:0b:ed:49:6a:5c:3b:
22:9c:c0:a9:76:1d:d7:7f:29:d7:37:c8:8d:ca:8f:
14:4c:e9:f3:ef:9f:e1:7b:9b:86:c5:bf:53:03:06:
25:f8:06:7b:fb:06:7f:f7:cf:06:db:b1:67:8f:77:
73:09:93:5f:4f:70:a9:9e:cc:e3:c8:5e:b6:8f:c2:
cb:a7:db:ec:2c:1c:6b:8f:51:2f:77:1b:59:79:9b:
04:ca:e5:2d:f6:65:d0:41:d7:f8:7a:b2:5f:a9:b1:
05:67:3f:21:e9:9f:72:e5:94:0d:2d:0c:59:20:1d:
c3:a1:36:e1:97:4f:39:da:fa:3f:78:8a:ab:5d:a1:
4a:65:95:49:cc:22:b6:45:ee:a6:05:e7:d1:ee:93:
f5:36:57:aa:d5:cb:b6:18:d0:67:bb:a5:3c:29:56:
b0:40:07:45:15:24:0a:6b:30:65:59:1b:a1:28:1e:
78:bd:31:a4:65:25:ad:45:10:c7:13:8a:88:65:22:
62:87:4b:aa:bd:44:1f:47:d4:c5:25:d5:10:a3:d1:
74:02:16:da:a1:91:27:38:ff:c6:d6:16:67:09:99:
59:f0:91:f7:9d:ff:0a:15:f7:45:dd:46:9b:cc:ce:
7c:80:49:1a:66:1b:4a:4e:46:e6:72:17:ad:4d:91:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:18:9E:3D:CF:7C:A8:95:AF:F4:70:15:99:0F:BA:37:5F:41:5F
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/y3QYnj3PfKiVr_RwFZkPujdfQV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.198.0/23
IPv6:
2a05:19c0:2::/47
Signature Algorithm: sha256WithRSAEncryption
4d:40:f5:4c:7a:1f:43:88:cd:77:be:1b:b7:1f:ef:1b:b2:c1:
f1:3d:c6:0d:40:0a:3f:8f:79:44:4f:bf:25:df:e4:c0:6b:2e:
12:60:97:d6:4b:0a:57:47:7e:b6:ee:f1:4c:69:57:cb:88:f0:
1d:e6:fa:23:30:da:41:b0:d3:98:d1:43:c0:1e:50:35:85:ca:
39:44:11:55:7a:bb:8e:7d:fb:0f:fd:69:d4:f3:6d:62:97:2f:
03:37:88:94:37:53:ee:0c:28:e0:95:07:20:b4:b1:e7:3e:f4:
9a:46:d1:a1:f3:df:17:fc:99:c9:00:91:9f:71:32:ac:58:39:
d9:b5:a7:3b:67:4f:f2:d4:2d:31:ab:e2:ca:66:a4:fa:66:f8:
33:a9:c6:c9:23:d1:f3:23:3f:6c:01:de:f7:c3:94:7a:da:b2:
d2:4e:8a:f2:45:ee:3c:47:51:24:19:46:5c:46:e3:53:ed:40:
fc:d9:ec:51:0b:f8:52:c2:7c:62:ac:20:4c:29:55:96:ed:d4:
5b:cc:7b:1f:cf:df:fd:ee:1d:d8:25:9e:43:30:cb:75:c1:f7:
0d:11:6a:5b:19:0d:ac:a6:25:eb:34:f3:2a:77:59:e4:a4:68:
18:a9:b2:32:f1:c9:61:4a:f2:1b:dc:c7:38:99:6c:f4:8e:ba:
10:9d:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:33 2024 by rpki-client on console-fra.rpki-client.org