Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/y_RP_zKJUJtvlvtYTOOeW3BGgg8.roa
File: y_RP_zKJUJtvlvtYTOOeW3BGgg8.roa (raw, json)
Hash identifier: fOofy/btvXAGqtbfLk8KzGpYeWP92aO7qx2xRNnzZqo=
Subject key identifier: CB:F4:4F:FF:32:89:50:9B:6F:96:FB:58:4C:E3:9E:5B:70:46:82:0F
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 018CC795507753F0928431F067B722E8A6FD
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/y_RP_zKJUJtvlvtYTOOeW3BGgg8.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201584
IP address blocks: 185.199.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 06:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:50:77:53:f0:92:84:31:f0:67:b7:22:e8:a6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbf44fff3289509b6f96fb584ce39e5b7046820f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:e0:7e:cd:0b:ca:f5:0a:cd:04:eb:67:39:
54:92:f9:0f:ca:b2:08:5c:83:de:f5:a7:8f:27:89:
c7:5e:f1:7a:03:14:a6:21:77:97:d1:67:f2:07:8c:
a8:f5:75:91:0e:d9:68:10:7a:3b:76:11:2a:34:d7:
58:14:a7:52:8d:19:b3:50:a5:7b:90:aa:74:c0:ce:
5d:79:57:1c:4b:3b:4e:47:58:04:2a:3a:b2:8b:e5:
9a:0b:68:e1:c3:0d:f5:17:5c:27:a3:ec:1c:6b:b6:
28:d7:6c:22:d4:9e:ee:4e:38:ba:e1:d5:9e:c6:3c:
b0:8f:b6:a3:79:d5:68:e8:2f:43:ef:68:01:05:ae:
f1:a2:2e:cb:93:88:2e:cf:b6:81:3e:16:2d:53:98:
f6:e0:99:49:2a:43:7a:c1:b9:14:3a:63:71:4c:7c:
cf:5e:0b:7b:3b:d8:e9:06:c5:6a:d1:a9:92:42:20:
92:32:6f:da:9a:fe:7c:98:03:38:cc:bd:e8:0d:81:
0a:3c:01:c3:82:0e:dc:67:4f:24:7b:68:e4:3e:93:
4e:c4:06:14:63:14:c2:fe:0f:ad:31:5e:bf:5e:33:
9f:24:8a:ef:20:91:40:10:ee:1b:db:75:bc:c3:0b:
2f:2d:31:04:3d:5d:d8:9d:99:ed:bc:b3:3d:5c:03:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:4F:FF:32:89:50:9B:6F:96:FB:58:4C:E3:9E:5B:70:46:82:0F
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/y_RP_zKJUJtvlvtYTOOeW3BGgg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e4:e3:8b:57:62:15:45:32:70:6e:b9:0e:59:9a:ec:d5:ef:
cb:32:23:e6:cd:38:dc:22:a7:13:c7:64:93:8f:9d:52:33:c5:
65:f5:e7:6e:31:32:f7:72:39:8e:f6:78:81:4a:22:0a:20:54:
71:c5:98:fc:f0:1f:b1:79:cc:1b:a7:7d:cb:13:19:11:39:31:
e2:7b:27:55:49:fc:c8:40:ff:49:d6:b5:c5:72:51:c0:6a:d9:
bc:58:6c:96:45:00:0c:42:08:e2:e7:07:67:9c:4e:68:5a:ef:
1e:74:e1:e5:b2:a4:44:c3:b1:af:ac:8b:9c:8a:02:c2:13:8e:
36:9f:2d:b8:41:15:89:11:d8:fb:9d:1b:60:a9:c1:1b:51:9b:
06:20:ea:9c:9a:25:ae:82:fe:2a:f2:8d:5e:c1:53:7f:4a:36:
9a:e2:be:5e:7a:f7:5c:c6:e8:d0:30:92:00:dd:cd:12:d1:b4:
02:30:1c:8a:71:e1:78:d3:e3:43:71:e8:b3:e0:1d:c7:c5:cc:
90:29:10:15:d6:8b:da:fa:1b:3b:b4:c5:88:ae:c3:6d:bf:2d:
22:45:f9:47:32:a4:b7:45:26:db:73:83:26:fa:a4:d6:e8:70:
d8:9e:0a:59:b8:91:bd:34:8a:da:84:b7:d9:53:b0:4a:15:08:
f3:74:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org