Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/SrbCI-fq_JGjTY6YuUmlIfnN2_c.roa
File: SrbCI-fq_JGjTY6YuUmlIfnN2_c.roa (raw, json)
Hash identifier: pVSzFTqHVyuT2RjdvMITHkoHhz/cD0iCmZY1FOYW/i4=
Subject key identifier: 4A:B6:C2:23:E7:EA:FC:91:A3:4D:8E:98:B9:49:A5:21:F9:CD:DB:F7
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 018FED801EC8EB556DC7FFE81A5D5FC81330
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/SrbCI-fq_JGjTY6YuUmlIfnN2_c.roa
Signing time: Thu 06 Jun 2024 12:22:27 +0000
ROA not before: Thu 06 Jun 2024 12:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 185.5.147.0/24 maxlen: 24
195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 16:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:80:1e:c8:eb:55:6d:c7:ff:e8:1a:5d:5f:c8:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jun 6 12:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ab6c223e7eafc91a34d8e98b949a521f9cddbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:b9:82:46:62:ef:0f:4f:d8:ef:b7:3d:cb:
d1:51:f8:97:ee:15:ec:7b:c1:4a:35:08:04:a2:45:
1c:9a:cf:ef:70:3b:ed:90:23:8c:44:79:25:31:a6:
e8:9c:05:76:4f:e2:a4:bc:74:81:c8:36:d1:d6:76:
e8:4c:8a:6f:79:9d:d9:2a:19:b6:ea:a8:e8:d6:cb:
0a:8f:4e:9f:f2:82:62:a5:cb:e5:e2:a3:5c:c5:70:
de:a4:33:19:69:c1:93:ba:4f:90:f3:60:ff:67:1a:
84:38:be:68:37:3c:cd:db:15:b3:05:98:0f:60:10:
c5:ec:b0:b5:d6:b6:e0:08:0c:de:b9:99:42:f5:f3:
5d:b3:8f:41:e4:9a:58:00:fc:11:74:8a:e8:ce:a5:
8d:ff:fb:d4:7c:3a:f7:3d:af:ed:87:af:17:ab:14:
6f:4d:cf:0b:f2:2f:22:39:1f:e0:c9:2f:10:83:3d:
94:5b:bc:97:aa:ff:b4:64:a2:26:cb:f4:05:95:fe:
45:9d:ff:3c:a9:42:68:99:22:aa:ec:60:66:04:ef:
54:d7:cf:17:16:28:ad:47:1a:f2:03:79:65:53:4c:
1c:b0:87:59:bb:93:2a:ea:d1:fc:de:c6:09:74:b9:
cd:6a:cf:c2:54:06:16:16:f5:5e:e6:58:a2:a8:74:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:C2:23:E7:EA:FC:91:A3:4D:8E:98:B9:49:A5:21:F9:CD:DB:F7
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/SrbCI-fq_JGjTY6YuUmlIfnN2_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
195.64.120.0/23
195.64.123.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9b:ce:1e:db:ba:b2:f7:7f:91:d7:ce:ed:ac:19:83:69:6c:
3c:84:44:dd:4b:de:5d:fd:85:98:cb:c8:ea:ed:19:85:7f:13:
4d:de:b4:71:9d:69:fa:e3:b5:9e:af:c9:63:b5:b0:14:6b:51:
21:f9:06:4a:3c:b6:33:82:de:56:14:7e:c6:94:a5:88:07:7f:
38:fa:a9:f3:de:1d:56:c0:d5:2d:2f:6f:6a:d9:3a:39:be:c4:
ef:72:1d:33:be:26:36:bb:46:05:1d:80:65:c3:9c:65:96:c5:
9b:73:c3:30:c5:12:51:fe:e9:b0:3c:bc:07:5a:b3:22:95:af:
45:7e:06:a0:5f:e5:55:38:25:8e:f1:3a:97:a4:b9:75:08:48:
20:73:34:a5:a2:b9:c4:97:96:f9:f3:ff:65:6e:19:42:4d:ba:
99:3e:db:95:f5:36:6f:09:18:77:f4:97:cd:3d:1d:7e:a9:19:
a1:30:75:c7:4c:44:7c:65:8d:b6:fa:ab:5b:2f:98:d2:0f:33:
58:e0:69:b4:35:c3:5f:1d:0c:15:d8:5e:d1:71:48:e6:01:40:
69:19:bc:ac:db:1d:af:7b:4f:57:8d:e3:0e:78:c9:f9:6f:2e:
97:51:d3:49:77:0a:71:13:f1:53:4b:52:19:02:3a:d9:20:3a:
93:39:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:09:56 2024 by rpki-client on console-ams.rpki-client.org