Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ajPLSygBuOZ8jSnT_FShMoivjF4.roa
File: ajPLSygBuOZ8jSnT_FShMoivjF4.roa (raw, json)
Hash identifier: +F/34hcpF3vYCS9hGFngR2BRY0Xn7qbOxV6tJ2y4wOM=
Subject key identifier: 6A:33:CB:4B:28:01:B8:E6:7C:8D:29:D3:FC:54:A1:32:88:AF:8C:5E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018FCA3D0648E3EC16189212155F35B0727F
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ajPLSygBuOZ8jSnT_FShMoivjF4.roa
Signing time: Thu 30 May 2024 16:02:27 +0000
ROA not before: Thu 30 May 2024 16:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 185.65.60.0/24 maxlen: 24
185.65.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 00:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:3d:06:48:e3:ec:16:18:92:12:15:5f:35:b0:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 30 16:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a33cb4b2801b8e67c8d29d3fc54a13288af8c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:c6:79:20:81:91:58:23:a9:e7:be:45:dc:
4b:d7:7a:db:49:b8:c7:44:b2:b7:0d:f0:8f:d1:d2:
1d:38:48:a4:1f:c9:ac:1c:11:40:bb:ca:6a:83:01:
01:21:3d:92:91:34:01:5a:bc:8d:e6:bf:68:8f:1e:
c0:8a:38:80:fd:76:c9:2f:39:e7:ca:83:6d:23:28:
1a:71:dc:cc:a2:27:05:56:d9:af:5b:a5:c5:7d:65:
69:30:90:8d:b4:bc:ac:58:c6:ba:39:72:e1:5f:8a:
ba:26:70:32:11:7e:24:14:9c:a3:6d:88:ee:e6:a8:
1c:a7:62:d8:62:4d:90:50:75:ea:c7:b9:20:ff:4d:
7c:54:74:aa:a2:df:8c:2f:de:e8:0c:21:bd:b8:f9:
43:36:0e:25:aa:5b:46:87:9c:f8:be:8b:57:df:18:
bf:38:48:96:be:cc:73:53:8a:c2:91:a7:04:c9:c8:
c0:60:c7:c5:ec:4b:eb:76:67:b9:b1:6d:59:66:c2:
da:fb:58:9b:6a:95:99:88:46:56:f5:df:c6:0a:73:
23:6e:d0:80:7a:19:d3:d6:8a:74:9f:36:c2:cb:7f:
86:0e:94:4a:4a:19:9a:e8:50:62:c6:01:bd:82:ae:
ae:c3:fa:fb:8b:2d:33:63:1f:1c:d9:45:be:d4:48:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:CB:4B:28:01:B8:E6:7C:8D:29:D3:FC:54:A1:32:88:AF:8C:5E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/ajPLSygBuOZ8jSnT_FShMoivjF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.60.0/23
Signature Algorithm: sha256WithRSAEncryption
96:ea:28:cb:7a:84:e1:e1:6e:82:1f:27:e4:bb:e1:88:e9:3e:
ce:9b:eb:cb:d7:33:93:57:9b:c6:a5:99:6d:6e:72:3d:d8:23:
74:15:87:ef:8c:64:74:35:33:c1:49:35:c8:ce:0f:09:4b:7e:
9e:9e:03:26:89:ed:48:bc:a8:83:e7:d5:e2:0e:74:c0:83:90:
62:51:5c:c9:1e:2f:8f:da:89:99:0f:35:29:97:56:61:f0:0c:
2a:09:9c:05:9b:25:d3:60:69:4f:01:ec:e2:f6:39:c2:6e:35:
99:0b:9f:dd:48:34:6d:0b:8d:97:77:40:f1:fb:1a:ca:a5:72:
23:e3:c5:46:b9:2b:64:fa:d0:65:bc:bc:51:9f:b3:42:5b:99:
2e:89:d1:fa:a5:25:8c:cc:9c:d5:49:3b:c9:bf:82:3b:b5:1c:
90:cf:87:72:f3:4c:ff:7c:9f:54:59:ca:f3:29:e2:d7:98:f1:
94:a5:5b:60:a3:a2:9c:be:d9:9c:92:a9:84:d7:c4:e1:13:9e:
cf:8d:30:39:1b:72:fc:87:7f:5f:35:72:8c:b6:19:e8:56:cd:
d0:3c:d1:99:08:f0:97:1d:25:e2:84:19:22:33:50:21:c3:03:
35:0c:e4:3a:1a:80:2a:f4:b2:c1:5a:17:6b:9d:cf:33:6f:eb:
32:ad:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:41 2025 by rpki-client