Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1yy5HOTd-9TVJhhKX_R--zcN5Cs.roa
File: 1yy5HOTd-9TVJhhKX_R--zcN5Cs.roa (raw, json)
Hash identifier: 2ruad51TlM7stKELBovdfw7jGYSqncGro1j3JATwfW0=
Subject key identifier: D7:2C:B9:1C:E4:DD:FB:D4:D5:26:18:4A:5F:F4:7E:FB:37:0D:E4:2B
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019053C0FB74E0955809366B21419940EDF8
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1yy5HOTd-9TVJhhKX_R--zcN5Cs.roa
Signing time: Wed 26 Jun 2024 08:54:34 +0000
ROA not before: Wed 26 Jun 2024 08:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 185.60.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 03 Jul 2024 10:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:c0:fb:74:e0:95:58:09:36:6b:21:41:99:40:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 26 08:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d72cb91ce4ddfbd4d526184a5ff47efb370de42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:d8:90:e9:db:52:f3:4c:17:7d:d1:c8:3e:
2a:43:77:97:ba:be:32:74:26:60:78:94:de:b7:7a:
79:fe:46:86:67:d1:22:28:c7:c0:f5:52:f0:04:72:
46:e3:2b:ed:4e:ff:4d:8c:df:95:0c:98:68:84:a8:
ec:e7:8d:ff:a7:02:65:60:79:db:a9:ab:07:d9:95:
e2:4f:2d:dd:00:2b:3a:a0:ba:be:76:71:7c:c9:f1:
16:bb:b5:6c:e4:a2:0f:dc:16:dc:6b:78:e4:fb:19:
dc:43:92:4d:de:ce:1a:88:16:e1:fd:5b:c0:88:8c:
e4:cc:28:04:f0:26:a3:a0:9a:38:d4:e8:56:82:a7:
eb:53:19:98:81:96:3e:40:73:f9:7f:30:39:09:62:
fa:6d:d0:4d:18:1b:7b:97:7b:fa:c3:8d:43:52:36:
e9:6d:e4:01:8a:0a:2e:d8:ab:ae:60:fb:e4:7d:bd:
71:60:7c:2e:66:95:b3:bc:58:9c:52:a6:f0:5b:2c:
56:71:7f:4d:a1:43:39:10:7a:b8:77:8e:f0:21:89:
04:cb:75:56:55:84:18:c7:f8:2e:ce:44:f8:d8:63:
98:f9:48:63:fd:ad:a1:8a:2a:30:0c:a4:43:92:82:
1d:3f:3c:04:ae:e5:46:90:42:4c:bd:24:45:c6:4c:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:B9:1C:E4:DD:FB:D4:D5:26:18:4A:5F:F4:7E:FB:37:0D:E4:2B
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1yy5HOTd-9TVJhhKX_R--zcN5Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.144.0/22
Signature Algorithm: sha256WithRSAEncryption
55:15:d5:16:87:71:d9:08:9c:98:ed:a2:9a:52:3f:51:f4:3f:
e9:38:b9:42:06:56:4b:9d:e8:20:8f:cd:1f:c4:f2:23:1e:19:
c2:2f:40:31:1c:ca:cd:93:d3:e9:1f:0d:e6:21:cb:ae:b0:91:
b2:7b:fa:d6:06:6f:a5:f2:35:3f:85:ba:96:f9:95:46:5c:5b:
43:c2:a9:83:b4:d7:77:3c:2c:49:8a:ce:94:29:a5:08:46:c8:
1c:25:36:b3:b9:a1:d5:79:ea:51:c4:40:24:c7:f4:4f:4b:4e:
79:8c:42:43:ab:9d:1c:94:84:15:43:e1:73:b1:9a:fe:84:78:
c4:1f:92:e2:7c:49:9c:60:e8:2d:d6:06:a9:1f:c2:b6:e0:14:
a4:02:d8:19:6e:7b:ee:bf:b0:c7:88:ac:ed:61:ee:d8:8d:23:
3b:a8:49:89:a7:4a:c1:46:9a:05:33:c2:93:ed:63:3b:32:c1:
3f:67:25:23:dd:a5:81:77:9c:da:26:eb:97:7b:fc:b0:4e:a9:
e6:2f:32:77:7e:40:18:55:80:d3:83:12:26:86:d9:ce:7f:73:
69:69:4a:80:26:25:3f:cc:9a:23:53:93:2f:45:ec:88:d8:52:
12:ba:c8:8b:19:b7:22:01:5f:de:b8:2d:e9:1a:a7:45:95:77:
09:c6:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:59 2025 by rpki-client