Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Jvjh0k1hCLR-Wv1GX8IMXMskc_w.roa
File: Jvjh0k1hCLR-Wv1GX8IMXMskc_w.roa (raw, json)
Hash identifier: I3m2jpFhWQtUeegAAiUkGmLWWpH6UKaaAcitWXklMRY=
Subject key identifier: 26:F8:E1:D2:4D:61:08:B4:7E:5A:FD:46:5F:C2:0C:5C:CB:24:73:FC
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01856E01B79997B55D34D9AE91A6C3A7A84E
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Jvjh0k1hCLR-Wv1GX8IMXMskc_w.roa
Signing time: Sun 01 Jan 2023 15:44:44 +0000
ROA not before: Sun 01 Jan 2023 15:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 185.201.60.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b7:99:97:b5:5d:34:d9:ae:91:a6:c3:a7:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jan 1 15:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f8e1d24d6108b47e5afd465fc20c5ccb2473fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:22:6d:7a:45:5e:53:8d:13:74:69:6c:41:
c7:c4:75:94:4c:a8:4b:21:27:3e:98:ec:cf:88:43:
91:85:27:b3:99:a4:4d:12:d3:42:0f:d3:b0:e5:9a:
0d:27:eb:a9:09:ca:f6:a7:5a:4e:2a:c6:91:02:b5:
6d:9c:ed:8c:3f:a8:cb:bf:64:c3:fe:c0:57:b2:99:
98:9d:71:b9:f6:c1:63:d4:94:97:43:d0:f7:d1:99:
d0:3e:67:87:44:25:19:1c:ba:d5:df:e4:a2:bc:5d:
11:35:5d:37:2c:08:8b:88:d4:ba:fa:e9:36:d1:7a:
6f:ec:ef:02:b5:04:25:f0:d9:4b:95:56:78:44:35:
c2:ef:a6:77:21:41:58:b8:61:e8:92:a1:c0:6c:1c:
68:e8:ef:0a:d7:3d:b6:fa:b2:df:e7:b9:ce:a8:c5:
a5:58:d1:6a:6c:df:42:02:3b:01:94:8a:bd:3b:6a:
26:36:1d:2f:aa:50:94:bf:55:78:21:a0:8f:84:a1:
2a:b6:11:af:dc:10:a2:ce:b4:ce:55:93:0f:59:98:
09:1d:be:99:1b:90:e2:d4:19:09:b2:53:e0:49:69:
5d:a5:55:1e:e3:8e:57:db:46:8c:22:26:7f:f9:38:
51:c9:50:85:61:39:38:7d:0d:78:07:2a:77:d1:34:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F8:E1:D2:4D:61:08:B4:7E:5A:FD:46:5F:C2:0C:5C:CB:24:73:FC
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Jvjh0k1hCLR-Wv1GX8IMXMskc_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.60.0/22
Signature Algorithm: sha256WithRSAEncryption
97:76:fb:f7:2d:12:5e:51:e0:46:0a:01:18:13:b0:6f:89:95:
52:b5:6f:a0:9f:0e:06:26:2f:36:03:bd:c6:82:23:de:9e:1f:
bb:04:e2:2c:d7:86:01:95:a5:c4:94:cc:0c:e9:6c:37:9b:08:
e9:1d:d3:89:3a:08:12:2e:8e:8c:8c:fa:e7:3b:a9:c4:f2:12:
36:49:d5:f2:db:f8:7e:b8:3b:09:35:82:35:85:b5:72:a6:1e:
b3:5d:a6:72:2a:47:7c:dc:1d:0c:8e:79:bd:9a:b5:f1:fa:01:
89:c6:1a:70:0e:bb:18:db:e5:1d:a6:20:93:bf:85:e9:5c:ca:
da:5e:64:75:1c:f7:ce:d1:74:03:e0:26:87:f2:a8:90:eb:b5:
4a:86:26:8e:83:cb:ee:4f:46:2e:17:80:a6:ea:35:c1:6b:cc:
16:ce:53:b8:ae:ae:64:06:0f:f8:f4:cd:b3:dd:e4:6f:93:8a:
01:77:e3:3d:bc:cc:e9:c7:d5:ce:af:8a:ae:a4:91:e3:9d:68:
35:7f:02:40:e0:8a:84:d2:86:3e:cc:ef:ef:93:78:0f:7f:c7:
e8:40:30:60:fa:a9:fe:9f:5b:64:78:0f:b8:43:61:14:99:7b:
d7:ad:34:5e:c0:36:4e:f7:d6:ee:f1:70:1e:98:7d:53:21:d3:
e7:ae:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:05 2024 by rpki-client on console-ams.rpki-client.org