Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/I_r_ipm6QCkSqG7vAcvNpnBe90M.roa
File: I_r_ipm6QCkSqG7vAcvNpnBe90M.roa (raw, json)
Hash identifier: n1bKf4ukWfZPq60bTv+MnZxQz8YFREq7ybJgCDp4i60=
Subject key identifier: 23:FA:FF:8A:99:BA:40:29:12:A8:6E:EF:01:CB:CD:A6:70:5E:F7:43
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 018CC501399B8B28200F7FD20FB941D2B38F
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/I_r_ipm6QCkSqG7vAcvNpnBe90M.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60475
IP address blocks: 185.235.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 07 May 2024 15:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:39:9b:8b:28:20:0f:7f:d2:0f:b9:41:d2:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23faff8a99ba402912a86eef01cbcda6705ef743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:72:1f:ae:de:3b:a4:bd:5b:cc:24:ea:01:
78:c5:2c:01:83:b0:b7:f1:04:d2:88:82:1e:b7:4c:
97:96:b8:0d:74:dc:ea:99:96:cb:f7:19:80:7a:a8:
7c:0f:a4:11:00:99:80:a0:ec:1c:4b:9f:b9:78:dc:
6c:eb:6c:76:09:cd:3a:99:30:27:3c:af:06:36:a0:
bf:88:83:f1:96:96:10:66:96:eb:fb:1a:61:14:11:
1b:59:81:eb:4a:7c:db:53:6c:79:3b:cf:f2:8d:7f:
2b:f7:81:4a:dc:e6:24:a3:83:4a:01:5b:b8:29:eb:
e1:42:23:6b:dd:ae:14:ed:d7:9a:6b:be:2c:29:c5:
eb:c4:2d:59:a4:a0:ce:50:8f:1f:86:6f:56:dc:0b:
40:88:d3:43:04:f7:0f:12:21:a9:54:bd:01:23:4a:
a5:65:4b:c9:c6:0f:3c:eb:d1:33:49:d8:db:32:c5:
d1:4e:22:98:67:78:62:8d:bc:8c:25:c3:85:3f:b6:
64:30:a9:9e:f7:29:46:0c:41:15:a3:b0:db:de:c5:
d2:fb:b7:6a:a1:03:d6:86:33:db:b1:22:65:24:ae:
ca:af:d1:fa:1c:78:92:58:e5:8b:91:9c:c0:2d:04:
6a:e8:76:4b:5a:f8:71:3e:44:d2:76:86:1b:cc:fb:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:FF:8A:99:BA:40:29:12:A8:6E:EF:01:CB:CD:A6:70:5E:F7:43
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/I_r_ipm6QCkSqG7vAcvNpnBe90M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.20.0/22
Signature Algorithm: sha256WithRSAEncryption
96:58:cd:d2:69:8f:c0:2d:04:6b:1b:71:9b:ab:88:24:e0:da:
f5:0f:d0:c4:62:20:4b:0b:6e:2e:c6:4f:53:a0:d4:20:1a:57:
89:60:ca:6a:7b:bb:fc:5a:d2:91:6f:30:67:eb:a3:6f:33:4e:
9e:a2:1b:3a:74:8a:ef:da:7a:23:29:a3:1d:62:9f:a6:1a:98:
dc:04:cc:b1:86:9a:30:d8:40:49:f0:23:33:27:0b:3f:fa:af:
9d:3f:4d:0f:49:68:b6:46:69:af:ea:97:5c:d9:d1:c3:a6:85:
03:02:68:a8:c8:34:55:1a:a0:01:09:60:0f:d2:70:3b:a8:a5:
58:1c:35:27:51:49:31:13:ae:a1:f1:50:31:bc:e9:42:eb:21:
6f:96:1d:33:65:ca:89:ca:bc:18:2e:06:d7:7e:c7:5c:4a:7a:
e5:92:4d:c6:45:87:a0:ab:4c:d5:2f:40:ab:db:17:fa:b3:e2:
64:3b:a1:e1:39:4b:0d:14:5d:d4:94:c9:d9:a7:16:85:3b:55:
ab:1c:c3:6a:3b:3c:f6:ba:91:15:48:28:e6:5f:db:82:46:1c:
6e:c6:b1:fe:d9:8f:c6:b1:eb:9d:65:45:25:aa:78:5b:0d:6a:
c7:ad:be:3d:88:d0:8f:88:4b:50:19:74:71:da:29:f3:32:fe:
05:c9:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:08:25 2024 by rpki-client on console-fra.rpki-client.org