Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/YDuQpIkRgZ1jhrdR4e53uixnxCA.roa
File: YDuQpIkRgZ1jhrdR4e53uixnxCA.roa (raw, json)
Hash identifier: Yh+Wwc1tE8FIpyL2mE0iJFQ4AP71mXJEEuH8zJb3k1c=
Subject key identifier: 60:3B:90:A4:89:11:81:9D:63:86:B7:51:E1:EE:77:BA:2C:67:C4:20
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 01857227DBF5845E824B9823A7CEA6B43A0C
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/YDuQpIkRgZ1jhrdR4e53uixnxCA.roa
Signing time: Mon 02 Jan 2023 11:04:52 +0000
ROA not before: Mon 02 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212991
IP address blocks: 185.158.206.0/24 maxlen: 24
2a0c:8d80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:db:f5:84:5e:82:4b:98:23:a7:ce:a6:b4:3a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Jan 2 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=603b90a48911819d6386b751e1ee77ba2c67c420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:f9:f1:ee:24:3e:c6:99:14:82:b2:8a:62:
8c:a1:36:0e:07:6e:d8:f2:0a:b2:a7:17:7a:9e:7b:
d3:6a:98:97:69:22:7e:55:31:9a:bb:5e:aa:df:40:
c5:44:a0:c6:0f:2d:53:66:60:f9:f4:69:a9:ff:5b:
e2:68:8c:19:d5:3a:96:f3:f4:13:06:85:63:9b:57:
59:b8:3e:13:1c:f7:26:aa:30:d3:8b:5a:76:0a:00:
a5:8a:05:64:95:b7:3e:ca:50:f8:94:8d:cb:a4:69:
e7:f2:99:f0:64:89:7e:8a:e9:d6:8a:30:ab:7a:c7:
05:76:1b:76:83:ce:fc:0c:e4:87:b4:1f:17:2e:e4:
85:99:93:ae:5a:34:32:de:de:a5:a6:23:2f:49:25:
4d:e3:f0:f9:ce:ea:ea:4c:90:0b:1a:d9:dc:79:7e:
d2:fe:f3:41:17:7b:54:bc:26:8b:96:62:a3:9b:9c:
81:b2:3c:73:02:0f:c2:90:15:07:b7:09:80:0e:b3:
02:37:01:6b:c8:bd:68:61:c9:65:b6:f5:fd:11:9f:
46:98:30:50:94:e8:02:2b:18:3d:26:aa:08:52:eb:
bb:02:2d:a1:ac:7d:bb:68:c7:a5:02:03:01:c9:d3:
a6:64:77:e8:1a:58:2a:e4:41:0b:03:1c:1c:00:e4:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:90:A4:89:11:81:9D:63:86:B7:51:E1:EE:77:BA:2C:67:C4:20
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/YDuQpIkRgZ1jhrdR4e53uixnxCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.206.0/24
IPv6:
2a0c:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
0e:77:aa:e2:7b:be:9e:47:be:fd:f5:cc:41:58:9e:b3:27:91:
c1:23:45:e3:05:77:0e:50:67:cc:b8:79:4e:f4:9c:94:7e:2d:
a9:a1:aa:ab:36:fc:90:0d:de:9c:39:b6:a2:6b:23:df:1f:b3:
3e:8e:a1:1e:16:64:21:33:a2:c6:dd:f5:c6:7c:21:6f:7b:9f:
89:00:2d:bf:30:09:6b:ca:82:c2:99:7b:06:71:d7:46:5e:85:
6c:5e:d8:6b:a9:3e:b1:ca:ca:98:02:96:ca:5c:be:e1:87:a7:
57:9b:09:e2:d6:ee:5b:a1:da:a2:e3:20:2b:c5:a7:16:98:be:
f8:c4:f2:c4:70:ea:52:b9:46:1b:28:64:ea:15:3b:af:cb:d4:
aa:6e:67:b4:3e:59:a1:9f:09:40:ad:cb:fb:7e:15:cd:3b:9c:
77:c3:f9:27:19:d2:db:95:d6:2e:71:eb:4f:e5:8c:b2:bc:39:
45:c0:17:ed:83:3d:4e:6d:e4:52:10:0a:67:38:d8:7a:33:10:
00:b4:77:c0:21:0f:1b:23:20:92:1d:8d:dc:bb:d0:58:3f:f7:
b3:62:60:0f:0f:6a:5f:82:49:73:1b:5b:d8:42:37:ba:75:40:
01:21:07:24:57:19:ed:f5:67:d4:d4:33:6e:da:e6:01:8d:9a:
60:2a:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:28 2024 by rpki-client on console-ams.rpki-client.org