Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/rUkCq--w_tTs9fvVgeZ4e7QCHlo.roa
File: rUkCq--w_tTs9fvVgeZ4e7QCHlo.roa (raw, json)
Hash identifier: d4XYUP0VX62W5gGPxmg2XE5dsQreqAJ0B9SeAKAByoo=
Subject key identifier: AD:49:02:AB:EF:B0:FE:D4:EC:F5:FB:D5:81:E6:78:7B:B4:02:1E:5A
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 0185CBBDAEA2BFC43956A055F768DEA2F299
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/rUkCq--w_tTs9fvVgeZ4e7QCHlo.roa
Signing time: Thu 19 Jan 2023 20:34:43 +0000
ROA not before: Thu 19 Jan 2023 20:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1836
IP address blocks: 185.169.60.0/22 maxlen: 22
2a0a:3d00::/48 maxlen: 48
2a0a:3d00:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:bd:ae:a2:bf:c4:39:56:a0:55:f7:68:de:a2:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Jan 19 20:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad4902abefb0fed4ecf5fbd581e6787bb4021e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:ba:2c:3c:9c:b5:28:a5:f8:f5:8e:76:95:
c3:f4:e6:39:14:b1:39:fa:01:5b:6d:58:72:bc:e2:
c2:b1:28:1f:2b:5a:dd:54:9d:69:44:3f:c7:2d:b5:
ae:36:0d:95:9d:f5:51:1e:1e:11:72:e4:61:ce:9f:
23:e1:f9:22:53:0b:b9:9b:24:c0:e1:50:37:8e:b5:
e7:b1:32:d1:d6:08:1d:77:1a:89:d8:a5:5e:40:37:
5b:1f:1a:88:26:a2:38:15:50:fc:3b:35:01:20:47:
64:19:04:83:0f:92:22:f5:5d:95:b4:27:c5:b0:51:
a9:28:56:b6:ab:6a:34:57:e7:3e:f3:be:ae:f9:e0:
df:ed:fd:3b:c7:d5:78:a0:34:f2:a8:c5:f1:26:1e:
64:4c:32:4f:09:01:4c:1d:83:20:30:1a:37:a8:79:
36:25:0e:6a:b7:20:4a:1f:fe:fb:d8:d2:cd:45:79:
08:da:87:a6:ab:25:e7:a3:12:14:9b:6d:7e:36:94:
2a:6d:50:1d:e5:bf:62:b6:21:09:d1:93:41:35:e1:
26:b7:44:81:c0:ec:95:a6:d7:23:98:7e:63:02:cc:
3f:26:65:d9:6d:bd:f7:e2:56:be:82:cd:de:3c:19:
3b:e4:41:56:ac:e8:a5:2e:65:1a:f7:67:ac:fc:95:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:02:AB:EF:B0:FE:D4:EC:F5:FB:D5:81:E6:78:7B:B4:02:1E:5A
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/rUkCq--w_tTs9fvVgeZ4e7QCHlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.60.0/22
IPv6:
2a0a:3d00::/47
Signature Algorithm: sha256WithRSAEncryption
b2:23:73:ec:36:3e:01:df:f4:f4:18:c0:bb:a4:07:a3:80:78:
fd:9d:85:76:8c:6b:b1:a2:c5:94:4d:86:54:22:93:6c:f2:17:
96:06:ce:ec:2a:bc:d5:b2:d6:57:4c:81:50:5c:c8:47:4e:67:
30:59:b6:3e:b4:88:20:90:ee:d4:f8:81:18:a1:67:5b:b3:b0:
ce:f2:c9:cb:ad:f3:7d:c3:18:73:9c:28:13:b1:22:2f:90:4b:
13:b1:a8:7d:f1:a7:c5:ca:86:2b:fc:80:a2:7e:b5:4e:e7:d3:
0a:0a:07:64:1c:b2:8a:95:97:c6:07:cf:8c:30:87:a8:ca:0c:
c9:7b:dd:95:5f:36:77:1e:50:25:84:21:03:8e:c2:d6:f0:db:
9b:91:05:9f:8b:9e:44:06:20:3c:6c:6e:1a:0b:25:a0:4f:e3:
87:28:7e:86:43:51:3c:da:17:b8:cf:08:88:74:f3:cd:c1:86:
91:ee:a9:00:69:2a:7a:76:1d:6b:5b:ee:09:41:2d:c2:fc:71:
37:2c:dc:86:4d:b3:a5:d3:ca:d7:a6:73:37:38:a4:b8:dd:7f:
6d:d7:e4:5e:f4:88:55:fc:33:2d:6e:65:20:0a:b1:5a:1e:91:
97:2d:e7:dc:38:cf:d2:d0:41:6f:01:7f:d5:bf:2f:02:56:ce:
85:c2:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:55 2024 by rpki-client on console-fra.rpki-client.org