Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/y6ZMKFS5ueD60kmkg687k7csC4A.roa
File: y6ZMKFS5ueD60kmkg687k7csC4A.roa (raw, json)
Hash identifier: qNNmG40618L8n4tD1XGp2BHjkHtO2QBs7BcN7Mx6EeA=
Subject key identifier: CB:A6:4C:28:54:B9:B9:E0:FA:D2:49:A4:83:AF:3B:93:B7:2C:0B:80
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 0186A1529534479634E322BEAE8536BEA436
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/y6ZMKFS5ueD60kmkg687k7csC4A.roa
Signing time: Thu 02 Mar 2023 07:56:29 +0000
ROA not before: Thu 02 Mar 2023 07:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57293
IP address blocks: 149.255.144.0/21 maxlen: 21
149.255.144.0/20 maxlen: 20
5.197.240.0/20 maxlen: 20
185.146.112.0/22 maxlen: 22
5.197.208.0/20 maxlen: 20
5.197.0.0/17 maxlen: 17
5.197.0.0/16 maxlen: 16
5.197.224.0/20 maxlen: 20
149.255.152.0/21 maxlen: 21
5.197.128.0/17 maxlen: 17
5.197.128.0/21 maxlen: 21
5.197.128.0/20 maxlen: 20
5.197.136.0/21 maxlen: 21
5.197.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 21 Jul 2023 05:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:52:95:34:47:96:34:e3:22:be:ae:85:36:be:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Mar 2 07:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cba64c2854b9b9e0fad249a483af3b93b72c0b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:1b:0d:10:a4:78:85:0e:71:51:f1:9a:57:
b4:3c:55:f6:b7:fa:83:ea:c2:21:a7:22:02:c6:b8:
a0:27:03:9c:ee:4c:9b:73:e1:f8:8d:5e:d1:c8:7a:
77:77:5a:c5:e7:9a:49:fa:7e:53:a8:22:f4:7a:a8:
60:09:59:92:b4:30:d9:27:7c:31:ca:25:9d:5a:91:
9f:d7:b3:18:b1:e8:f7:8a:6e:2c:27:dc:8f:30:e5:
b7:96:82:22:50:bb:fc:46:16:06:e0:4e:55:0e:6a:
b9:4f:bd:10:97:44:d4:a6:f6:14:ef:67:7d:0e:5a:
49:7f:78:3f:6b:53:e4:41:51:b0:fb:ec:46:9f:7e:
7a:93:69:f6:57:ec:45:e9:cb:19:e2:1c:15:69:7b:
00:19:ec:3c:7f:a4:78:93:23:f7:44:77:09:21:aa:
5f:a6:bd:f6:15:15:99:be:99:d6:f9:ee:71:06:c6:
67:4b:68:70:6d:eb:28:57:7d:06:69:d8:b2:90:f1:
52:fe:94:26:c2:08:57:0d:f6:7a:49:b8:36:72:eb:
a4:cf:26:8c:0c:01:dc:ea:03:46:0e:d2:bd:30:71:
e0:f0:f3:e8:0a:84:5c:c8:ea:d4:63:fb:67:2a:92:
12:9d:a9:03:12:6c:71:0b:aa:51:33:12:b8:2a:3e:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A6:4C:28:54:B9:B9:E0:FA:D2:49:A4:83:AF:3B:93:B7:2C:0B:80
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/y6ZMKFS5ueD60kmkg687k7csC4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.197.0.0/16
149.255.144.0/20
185.146.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:87:28:2a:e5:e6:ef:b3:87:f3:ad:c9:f2:77:ff:1f:94:04:
0e:42:23:e9:00:86:f2:c3:ab:f2:ea:92:35:97:aa:52:8a:ce:
5b:85:b5:d0:18:62:fe:5d:0f:35:d4:24:29:fc:1c:bf:c6:23:
b2:1a:2a:1f:df:e9:44:24:a3:9f:05:e6:5d:d2:14:31:40:2e:
7e:61:4f:86:bf:82:db:45:57:cc:05:e7:e9:2d:6e:79:21:99:
a2:8d:78:9a:c7:28:6f:e5:67:37:30:16:e1:01:70:5b:7b:d8:
d8:ae:48:da:fb:d0:59:e9:1a:01:6b:77:f6:61:62:84:50:0d:
55:8b:b0:6d:b4:be:f8:6f:82:a2:87:ae:16:16:d2:24:00:e3:
fb:4c:94:0f:51:81:33:9f:3c:ce:f1:42:97:76:7a:60:13:22:
f4:36:f5:36:f9:67:de:fc:16:c7:a8:28:e1:e8:36:9c:5e:cb:
c9:84:98:fb:04:32:b0:6f:58:16:ba:fe:5e:10:df:f6:ce:9f:
74:0c:2c:11:45:c4:2e:9d:4c:2b:d8:ee:a8:6c:2c:aa:e0:c2:
58:65:e4:f6:ae:fa:53:e5:ab:dd:24:ec:a6:21:ab:47:fa:a3:
e4:76:48:17:25:67:37:fd:01:bf:8b:fc:d3:d5:25:c9:38:a2:
3f:e6:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:30 2024 by rpki-client on console-ams.rpki-client.org