Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/Y_FCaSt7ppd80KKO-r1MTOR90dM.roa
File: Y_FCaSt7ppd80KKO-r1MTOR90dM.roa (raw, json)
Hash identifier: yP1O00Ewm/GJ4JSGpkmeTZS78RD1f4YNRkA33T73z0U=
Subject key identifier: 63:F1:42:69:2B:7B:A6:97:7C:D0:A2:8E:FA:BD:4C:4C:E4:7D:D1:D3
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 0186EF924A1F720F4B432B62896921EDB8A8
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/Y_FCaSt7ppd80KKO-r1MTOR90dM.roa
Signing time: Fri 17 Mar 2023 12:36:27 +0000
ROA not before: Fri 17 Mar 2023 12:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43824
IP address blocks: 185.212.221.0/24 maxlen: 24
185.212.220.0/24 maxlen: 24
185.212.223.0/24 maxlen: 24
185.212.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 11:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:92:4a:1f:72:0f:4b:43:2b:62:89:69:21:ed:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Mar 17 12:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63f142692b7ba6977cd0a28efabd4c4ce47dd1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:a2:0e:c3:b0:b1:02:18:7f:fd:e0:9a:17:
84:f1:26:eb:b7:57:b9:53:af:bc:6d:f2:eb:80:ce:
98:70:d6:5f:58:93:ba:77:a9:1e:b2:9b:8f:4c:1f:
1e:91:20:07:21:fb:62:2e:50:c7:97:1e:84:a9:cf:
2e:3d:c5:2c:70:31:05:8f:6b:0b:2c:be:2e:5f:86:
28:7a:cf:b8:68:89:ca:20:1d:a7:e4:26:fc:89:74:
1c:03:1b:87:ed:70:9b:89:5a:60:6d:af:2a:60:bc:
ed:6d:29:b7:56:a3:32:93:4b:8f:a2:b9:1a:b5:4f:
54:2d:28:e4:60:af:af:cf:70:db:2c:6f:82:56:f6:
a7:c3:d6:15:0b:15:c5:f8:fa:be:16:c0:34:ec:6e:
4b:0e:25:9c:89:9a:7e:ed:b2:99:c1:64:b5:fe:af:
7c:6d:29:ea:a8:64:5c:86:61:13:c2:d1:0e:5c:6f:
4a:ef:10:9a:17:ba:b6:3d:40:f2:48:75:7f:e8:77:
a9:87:84:62:ae:dd:25:f3:0a:41:77:2a:6f:56:cb:
08:3d:0c:df:d7:87:d8:96:94:fb:95:37:7d:01:a7:
0c:89:de:72:d7:b9:81:51:69:9b:4c:fb:e2:4d:5e:
58:84:80:f6:50:f9:a4:37:d5:5f:b8:ae:7c:b8:52:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:42:69:2B:7B:A6:97:7C:D0:A2:8E:FA:BD:4C:4C:E4:7D:D1:D3
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/Y_FCaSt7ppd80KKO-r1MTOR90dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.220.0/22
Signature Algorithm: sha256WithRSAEncryption
99:3b:7b:df:3d:c6:3b:08:df:32:06:67:46:dd:10:14:9e:53:
fe:a2:98:5a:18:75:4d:bb:f7:10:d1:a4:65:7d:57:52:9b:61:
93:01:df:c4:5a:29:d7:60:41:28:2f:4b:0b:d1:04:bb:1b:97:
10:c4:b0:2e:97:40:c3:e5:fd:b2:06:5a:c1:bd:8c:0f:c2:cd:
f3:0e:d6:a3:dc:02:d6:2a:d0:10:fe:0b:46:ea:39:75:71:ab:
25:94:ea:ce:ce:f2:55:eb:87:b8:4c:8b:24:24:2c:12:0c:82:
6b:c6:a0:28:90:20:55:d5:d1:c4:30:e0:e4:a0:4c:c7:d6:83:
09:2b:1c:79:32:b1:3c:77:a7:51:39:ff:79:77:c0:19:f3:d8:
76:45:db:f9:c6:db:f6:d1:de:19:cd:90:f3:35:ce:76:a5:42:
f5:41:04:78:47:2c:c1:43:55:45:7d:80:4d:f7:43:4a:cf:4e:
bb:22:4e:a5:13:50:ab:b1:b8:c3:28:48:41:34:8d:5c:be:d8:
25:37:95:21:a2:c1:85:f1:bf:3c:a6:94:b2:54:c9:8b:3a:7d:
6e:3a:ea:a4:5b:f9:05:5c:95:c5:7e:0a:d1:c1:29:9e:ed:6e:
b2:78:e7:b9:ae:93:b0:c2:d6:97:a2:22:e3:ac:d3:95:37:77:
a7:df:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:55 2024 by rpki-client on console-ams.rpki-client.org