Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/k8BsN8ysWbbpQ9H1gV9HaGm8ZVo.roa
File: k8BsN8ysWbbpQ9H1gV9HaGm8ZVo.roa (raw, json)
Hash identifier: ZZ6y/oyEfqpn8adRouMuI6HVUuu+q0HUXYGwVkXC+3o=
Subject key identifier: 93:C0:6C:37:CC:AC:59:B6:E9:43:D1:F5:81:5F:47:68:69:BC:65:5A
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 0189978ED58FE455281C3A9CBE0E5B6CEFF3
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/k8BsN8ysWbbpQ9H1gV9HaGm8ZVo.roa
Signing time: Thu 27 Jul 2023 13:34:27 +0000
ROA not before: Thu 27 Jul 2023 13:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200432
IP address blocks: 185.107.60.0/22 maxlen: 22
185.107.60.0/24 maxlen: 24
185.107.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:8e:d5:8f:e4:55:28:1c:3a:9c:be:0e:5b:6c:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jul 27 13:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c06c37ccac59b6e943d1f5815f476869bc655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4e:40:ce:71:70:c1:21:16:2a:d7:e2:aa:99:
f4:78:26:2f:70:91:4d:45:dc:f9:d7:e1:6e:a6:39:
12:68:97:d6:0a:c4:fa:7f:d2:f8:c4:c9:35:95:32:
9c:07:bf:cd:f2:11:80:0d:2a:2e:c6:44:7b:7b:1e:
d2:de:64:30:d3:e1:f1:2f:88:9c:b4:31:ef:e7:1f:
a3:e5:91:ea:d5:58:e6:e1:59:6f:0e:de:af:e9:57:
c7:9b:27:1c:43:c1:90:97:00:b6:99:77:f5:43:02:
88:20:9b:b4:fe:e0:c0:87:bc:31:9b:0d:72:6b:73:
b2:41:09:9d:c2:89:29:b9:58:7b:35:a7:3b:3d:0a:
f6:7f:e2:9e:53:e4:57:e2:9e:fe:65:65:e4:05:e2:
71:8f:0e:cc:de:6b:6f:55:91:70:16:b8:ac:37:f9:
d7:25:f0:06:16:fb:dc:d8:cd:51:2a:dc:70:19:5f:
d2:bf:d0:a0:3a:d2:b2:21:f7:70:7b:8a:ee:78:87:
51:61:18:5e:18:40:b4:8b:f8:22:b8:63:c7:84:5e:
f0:33:08:a1:eb:e6:58:01:eb:74:52:d0:92:f6:66:
4b:00:81:53:04:1b:ff:dc:8b:b3:cd:1b:4f:d4:bd:
39:68:de:00:eb:7c:dd:fb:2d:61:25:cc:54:ba:2f:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:6C:37:CC:AC:59:B6:E9:43:D1:F5:81:5F:47:68:69:BC:65:5A
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/k8BsN8ysWbbpQ9H1gV9HaGm8ZVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.60.0/22
Signature Algorithm: sha256WithRSAEncryption
54:f3:1e:82:34:ba:9a:62:ee:43:34:a5:da:96:0a:42:0e:69:
67:fc:70:4a:dc:b1:77:06:1a:d1:0f:29:52:f9:0f:bb:66:1f:
a2:3a:37:87:dd:71:b0:94:40:e2:32:9e:35:f7:76:51:c2:cb:
fa:c5:bc:28:50:bf:78:7d:8c:df:1c:c0:09:98:7c:64:2d:77:
bb:13:79:04:b2:64:aa:80:11:62:58:cb:6a:3a:68:13:e3:d8:
bd:4b:57:b7:50:39:dd:3f:64:12:6d:44:16:bb:28:6c:dc:86:
83:4f:49:15:94:fd:c8:a3:e0:14:3b:b4:5b:f8:49:4f:e6:76:
40:2c:cc:d8:41:16:97:0d:69:f7:0d:02:79:e6:0a:7c:07:b1:
af:88:ab:4a:97:8b:09:8c:44:e2:fa:ba:9c:83:69:1e:17:a0:
7c:49:25:97:50:33:50:95:04:de:eb:72:6a:6e:07:f9:ba:46:
f4:ec:50:3f:c2:65:2d:7f:a5:bb:67:78:be:7a:a2:6d:28:44:
0e:ef:45:1e:37:0e:4c:31:be:7e:52:46:c1:3a:c6:d7:cd:d7:
de:42:34:1f:d9:79:19:5d:a5:e4:f3:ba:18:f0:7c:0e:13:71:
64:10:76:a9:61:a0:db:e2:e3:93:8f:17:15:2a:e0:8d:d2:f3:
00:37:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:35 2024 by rpki-client on console-ams.rpki-client.org