Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Mn1YTZW7DwtJqGSZ-30DXUJrQDo.roa
File: Mn1YTZW7DwtJqGSZ-30DXUJrQDo.roa (raw, json)
Hash identifier: 3MTZzCajAfj1R2eGSsfgRglyVVJarFAZZX8IQBbvWls=
Subject key identifier: 32:7D:58:4D:95:BB:0F:0B:49:A8:64:99:FB:7D:03:5D:42:6B:40:3A
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 0189B677493662D1A1D108B4706E77F2F548
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Mn1YTZW7DwtJqGSZ-30DXUJrQDo.roa
Signing time: Wed 02 Aug 2023 13:36:58 +0000
ROA not before: Wed 02 Aug 2023 13:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 185.90.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:77:49:36:62:d1:a1:d1:08:b4:70:6e:77:f2:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Aug 2 13:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=327d584d95bb0f0b49a86499fb7d035d426b403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:a3:34:4c:8a:13:1e:33:1d:9e:6d:2d:38:
2e:f9:0f:07:09:06:a6:b2:e3:14:97:cd:fc:b8:d6:
1f:25:28:48:cf:a6:7e:c6:7d:0a:2e:26:ce:91:e0:
d0:bb:71:65:0b:84:ae:c4:5a:ad:b6:c8:a5:d4:e5:
27:01:52:1e:8e:04:a8:7f:26:a0:fd:15:cd:e0:db:
11:58:42:e3:ac:ba:a4:3e:bb:81:6e:d8:55:5c:a0:
c5:dd:6b:9a:38:92:aa:3f:04:5c:9a:19:8f:58:4a:
b9:1d:12:24:ee:6b:dc:9c:93:89:47:45:bc:f7:35:
7e:08:c8:19:c8:7a:0f:ba:9e:87:89:03:5f:77:e1:
97:55:c7:f8:46:8a:b8:34:24:3f:a7:9f:16:72:97:
2a:96:11:89:b4:f2:90:a4:49:e2:21:f0:a9:3a:35:
25:32:83:3b:5c:dc:17:10:0f:80:c1:b7:16:d0:10:
53:89:e2:88:da:a6:57:1c:28:65:49:cc:d4:b1:86:
ba:0f:1c:a2:48:fa:e2:6f:d6:37:0e:68:07:9d:23:
9c:53:ca:ca:e0:df:0a:95:51:17:2a:08:ba:37:c1:
fc:9e:d4:ab:53:e6:ab:ec:a3:ff:e6:34:15:c8:ab:
b0:74:08:12:63:d7:72:0e:c9:0f:fc:2c:e6:0d:2b:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:58:4D:95:BB:0F:0B:49:A8:64:99:FB:7D:03:5D:42:6B:40:3A
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Mn1YTZW7DwtJqGSZ-30DXUJrQDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:74:fc:96:3b:b0:f5:fe:25:5f:63:13:4e:44:b9:01:33:e0:
7d:bc:d5:03:37:bb:8f:2b:0c:a4:e6:f1:e8:ee:b3:52:7a:b1:
93:ab:bf:18:23:59:e0:a6:f1:d9:48:ad:b9:d6:41:da:9c:e7:
0b:7b:a7:a1:26:7d:23:b4:c4:aa:d9:77:25:2f:0e:d4:15:83:
3f:10:f6:80:b0:4b:b6:ac:ff:b2:01:28:ec:84:ee:fc:99:e1:
11:64:bc:d0:55:48:5f:dc:54:a3:d9:74:f4:c2:4e:16:f0:43:
c8:c6:6d:3b:9b:f6:a1:f7:17:12:9e:4c:d2:31:99:a0:c6:c5:
7c:b7:8f:c8:1c:17:c9:34:8c:ab:08:4a:90:d1:73:94:1a:d4:
e3:74:d6:0f:4a:7d:9b:b6:13:2e:77:d4:f0:af:b3:01:b3:99:
77:4c:be:3e:c4:35:29:95:5b:ea:4e:be:5a:2e:7a:8e:77:dd:
92:9c:3d:93:d8:0b:1b:21:c2:8f:41:3e:66:fe:39:12:32:3b:
64:97:ab:c0:23:97:04:8e:34:c3:ac:67:b5:66:bc:5b:15:23:
de:03:d7:ae:e7:5a:5f:81:f3:a8:4a:f3:fa:2e:64:6b:ce:c7:
c4:82:9a:63:60:a4:ee:b5:54:47:a6:42:02:71:64:1d:bb:8b:
8c:a3:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:35 2024 by rpki-client on console-fra.rpki-client.org