Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/YD4mQxBJaOLjwUmx31Se0csehz4.roa
File: YD4mQxBJaOLjwUmx31Se0csehz4.roa (raw, json)
Hash identifier: SNJi5gGBFZGc16/Qg1VsW4WJrxj4/hVeo/5MEJjNRhs=
Subject key identifier: 60:3E:26:43:10:49:68:E2:E3:C1:49:B1:DF:54:9E:D1:CB:1E:87:3E
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 018570F084753366D79BA3B7BD6C288125F0
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/YD4mQxBJaOLjwUmx31Se0csehz4.roa
Signing time: Mon 02 Jan 2023 05:24:48 +0000
ROA not before: Mon 02 Jan 2023 05:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42487
IP address blocks: 185.173.200.0/22 maxlen: 22
2a0e:e080::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:84:75:33:66:d7:9b:a3:b7:bd:6c:28:81:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Jan 2 05:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=603e2643104968e2e3c149b1df549ed1cb1e873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:2b:44:3c:35:4b:ca:16:de:63:49:fd:8b:
a3:bc:a0:e0:e1:5b:a0:26:7d:40:f6:8c:9a:a5:97:
1a:2f:51:9d:80:88:c3:51:99:0d:82:38:22:43:51:
52:c1:11:3c:75:bc:32:ac:55:cf:e0:48:8d:97:ba:
00:a4:f0:e4:de:7a:7b:f8:93:ec:a5:5a:fb:64:9a:
66:0a:26:d1:1d:37:e8:3c:f5:1c:a2:0a:6e:3a:8f:
23:01:a4:83:a6:ce:96:5d:87:14:0e:6d:4a:4e:42:
50:e0:bf:37:56:d4:84:29:30:2a:e7:3a:b8:36:0b:
be:3d:f8:01:6d:20:f3:2b:65:78:fb:54:44:b5:1c:
04:a0:bd:0e:76:61:f9:64:6a:97:60:fb:b4:8e:2b:
bf:5b:4b:a9:38:1d:b0:c0:23:16:06:1b:24:10:18:
96:5b:dc:ca:d5:ba:f8:af:52:32:f1:d2:d8:03:4e:
ac:34:d7:4e:2f:34:b3:c5:84:c4:4d:b8:1a:83:ad:
2e:56:6e:0e:6c:e8:98:4b:13:7c:df:18:34:dd:39:
6c:64:d7:b2:6a:0f:f8:f7:51:83:0a:2b:c1:b8:4f:
12:69:00:35:1f:e7:54:d5:60:a5:b6:be:0f:a5:48:
2f:26:cd:f3:e5:a2:cc:eb:db:5d:29:6d:07:ac:cf:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:26:43:10:49:68:E2:E3:C1:49:B1:DF:54:9E:D1:CB:1E:87:3E
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/YD4mQxBJaOLjwUmx31Se0csehz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.200.0/22
IPv6:
2a0e:e080::/32
Signature Algorithm: sha256WithRSAEncryption
0c:d4:04:2c:04:81:7f:d0:c9:70:ef:8c:3b:e4:5d:9b:ab:e4:
24:12:cb:6b:3c:b1:6d:20:f6:96:e1:3d:19:19:f7:23:5d:21:
37:fb:ed:d6:ac:ab:80:dc:b2:60:bb:ea:1e:86:34:b5:e3:c8:
94:2d:80:54:e1:34:18:8c:1a:74:61:da:f5:af:32:8e:9f:74:
3d:f6:67:69:68:f9:d9:3e:39:60:ac:19:eb:bf:4d:26:a9:d2:
1d:46:58:ae:1a:03:2e:9a:42:01:2e:44:45:02:b6:d0:8f:3d:
68:6c:7d:24:7a:b5:c5:9a:e4:ac:21:48:24:8f:c1:54:ff:f3:
28:c2:71:64:05:31:41:13:d5:7e:78:c9:51:d3:5d:20:81:a7:
1b:0a:8d:57:b1:28:30:e8:3c:07:9c:47:b5:c0:1d:b9:36:7e:
4e:c0:63:9d:42:ef:79:6f:15:22:da:89:6e:b8:c3:c8:24:44:
90:9d:c9:05:bf:59:a7:c6:cc:d0:e3:75:e4:d7:e4:63:dd:0c:
39:03:28:c3:7b:33:d7:5c:91:f9:61:18:94:b1:b1:65:bb:bb:
c7:ae:c9:a6:a1:f0:b8:0e:05:bd:52:e9:09:b4:9d:b3:54:f5:
c1:e4:69:8e:29:e1:01:b2:34:8f:7d:b7:9b:f0:e5:ee:9d:0e:
ed:97:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:26 2024 by rpki-client on console-fra.rpki-client.org