Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/YFtuWxIZUogyTOaylPPJa8M-yXA.roa
File: YFtuWxIZUogyTOaylPPJa8M-yXA.roa (raw, json)
Hash identifier: J6HBmYvNx22X0gxtfh5z+WsH+CELGwGsVtd8bKUDTdA=
Subject key identifier: 60:5B:6E:5B:12:19:52:88:32:4C:E6:B2:94:F3:C9:6B:C3:3E:C9:70
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01856FC2924DE5B7D12D4F5A52FC315B9A36
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/YFtuWxIZUogyTOaylPPJa8M-yXA.roa
Signing time: Sun 01 Jan 2023 23:55:00 +0000
ROA not before: Sun 01 Jan 2023 23:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20845
IP address blocks: 185.79.94.0/23 maxlen: 23
185.79.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:92:4d:e5:b7:d1:2d:4f:5a:52:fc:31:5b:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 23:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605b6e5b12195288324ce6b294f3c96bc33ec970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:ff:5c:1b:1b:af:f4:76:cc:8d:7e:35:11:
29:71:cd:2c:19:32:b6:21:b0:ea:ac:62:d0:72:17:
6c:c8:2c:60:96:0a:33:40:6f:8d:c7:79:e1:ce:50:
35:e7:e9:99:52:89:2d:88:a2:8b:85:f4:ab:5d:79:
5b:aa:4d:b5:26:ac:67:57:18:7f:48:c6:3b:67:15:
d6:39:eb:37:8b:c1:9a:15:13:f3:ba:a1:e2:02:fd:
18:84:54:f2:88:5c:da:dc:1a:9c:fd:83:02:6a:8f:
46:46:2b:e3:b1:4f:89:24:55:f2:f2:8a:63:56:be:
c9:eb:e4:a7:72:63:c1:ca:85:5c:f7:90:6b:df:c2:
31:2b:2b:7e:f0:0b:a6:25:78:10:f1:33:d2:8b:c4:
a7:51:19:4e:a4:90:34:e2:24:90:4f:1d:9b:34:ec:
ef:01:02:fa:c3:ed:a9:34:2b:8b:bc:fd:6f:7b:ed:
b0:bb:34:9e:5d:a7:4d:46:69:da:8c:00:be:f2:2f:
f3:50:57:cc:0c:d6:2a:3e:3a:37:e2:6d:57:9b:d0:
d6:93:2e:f7:b9:8c:6b:d0:d4:db:af:ea:ea:32:61:
ee:0c:8c:d6:5d:3c:49:d6:bf:5f:e9:32:e2:f1:75:
fb:30:fe:ea:4f:26:75:9b:57:f1:e4:b5:6f:44:2d:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:6E:5B:12:19:52:88:32:4C:E6:B2:94:F3:C9:6B:C3:3E:C9:70
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/YFtuWxIZUogyTOaylPPJa8M-yXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:4d:34:ed:93:f3:18:af:c4:79:f4:3f:a9:70:6d:84:46:04:
cc:9b:0b:ec:4f:75:92:7d:a8:36:a0:4e:ed:dd:a5:14:44:a3:
9e:ce:00:35:28:af:61:87:c8:d6:a6:82:ed:2c:69:e3:9e:a8:
37:a1:df:e6:b2:8f:c6:cb:dc:67:fd:ae:47:d0:d4:29:bb:25:
b9:ae:52:3a:52:af:d9:79:85:fd:4d:4c:bc:44:d9:71:28:0c:
a7:0e:d6:76:61:19:56:03:cf:2e:78:5b:5c:d7:a8:63:4c:6c:
c3:7e:10:ff:7b:d6:f8:70:58:4e:31:d7:a4:f7:e1:d6:ee:71:
28:29:02:9a:be:9f:44:6a:ad:d0:f7:08:7b:8e:e1:c3:0a:dd:
8f:14:35:92:e5:9e:84:34:bc:82:50:2f:96:6a:6c:6f:b3:01:
a4:6a:26:c9:70:94:6c:83:04:13:cf:f8:9d:97:0f:3b:2a:a0:
a3:59:12:4f:10:47:42:4e:5b:40:ce:13:8f:d0:df:97:63:74:
96:ad:7c:18:4c:0c:ff:8c:34:8b:83:07:6e:0b:07:9c:4f:a3:
bc:ab:55:c0:87:4e:32:f5:d8:49:d5:c5:d2:8a:8d:a1:ef:c9:
f2:f3:81:f9:92:63:78:4c:94:1d:b4:b4:e0:1f:52:2b:5f:5a:
78:48:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:17 2024 by rpki-client on console-fra.rpki-client.org