Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/w19ir7FzRXd-Kyuo1iIK1s3zsqg.roa
File: w19ir7FzRXd-Kyuo1iIK1s3zsqg.roa (raw, json)
Hash identifier: 0lW+Uy6wUuTKJjbOUxIRD/yqpeLBaZyPrZPvdGSIqC8=
Subject key identifier: C3:5F:62:AF:B1:73:45:77:7E:2B:2B:A8:D6:22:0A:D6:CD:F3:B2:A8
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0185704BB7650B56E3D98AAF0F6EA3D36005
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/w19ir7FzRXd-Kyuo1iIK1s3zsqg.roa
Signing time: Mon 02 Jan 2023 02:24:48 +0000
ROA not before: Mon 02 Jan 2023 02:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60933
IP address blocks: 185.23.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b7:65:0b:56:e3:d9:8a:af:0f:6e:a3:d3:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jan 2 02:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c35f62afb17345777e2b2ba8d6220ad6cdf3b2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:27:b6:af:9a:9d:ca:7d:e3:6c:ce:86:9e:
8e:4b:2b:b2:97:e1:03:f9:10:64:0a:ea:d2:f1:bb:
00:bf:77:94:38:84:c0:76:95:a6:43:49:17:f4:4b:
99:6c:46:cd:31:65:57:21:fd:a6:9c:f0:93:4f:ae:
be:ed:2f:1e:a0:89:9b:5a:39:c0:d1:38:36:00:36:
a4:cc:eb:58:27:c1:ee:95:0b:6f:93:b3:12:b4:fe:
8c:17:3d:c4:c1:41:4c:09:28:8f:36:b9:68:62:54:
59:64:7f:21:1d:8f:87:12:18:95:26:33:d3:44:e9:
36:88:34:18:19:83:27:c3:4e:88:0f:ab:58:98:22:
6c:b8:52:55:a6:a1:cb:ea:db:43:dc:1f:04:bc:13:
31:1e:6c:ba:c2:28:36:f5:e1:5e:0a:bb:72:52:95:
98:25:88:ff:1c:dd:bf:da:49:8a:8a:d0:56:eb:20:
8a:21:57:a3:cd:7b:5c:24:40:f9:3e:d0:ce:5d:56:
4a:f2:64:d4:30:29:e2:9b:d5:0a:4e:8e:93:1b:e2:
71:f7:34:56:fc:ed:1d:d9:c6:50:d3:85:42:40:3f:
51:30:5e:37:3e:d6:b2:27:54:3b:07:c6:6c:94:59:
44:3c:ab:7a:77:63:ed:35:c3:36:bb:b4:25:c2:9b:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:62:AF:B1:73:45:77:7E:2B:2B:A8:D6:22:0A:D6:CD:F3:B2:A8
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/w19ir7FzRXd-Kyuo1iIK1s3zsqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.60.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5f:83:f1:ff:24:bb:56:de:44:c2:6c:68:df:0f:a4:aa:79:
00:89:5b:55:29:ea:7e:37:d3:54:4f:0f:03:6d:c7:46:5e:42:
11:62:28:a1:d7:d1:57:cc:61:b0:1a:43:a2:ca:59:d9:48:79:
33:5a:3e:10:5e:9d:69:f7:af:a2:d6:7c:64:7e:f8:16:9c:57:
0f:9b:67:69:e9:5b:fd:8d:b0:bb:15:5d:62:57:40:b2:d1:6d:
cb:c2:15:49:5b:c2:4b:f5:1c:af:b0:d8:08:df:89:78:e2:a8:
97:81:65:ff:35:d7:cb:ed:65:14:af:36:51:78:71:9c:80:7b:
58:9c:af:11:49:bf:57:14:13:bb:f9:7a:46:5e:6d:f5:70:af:
b8:3a:93:8a:83:15:50:c1:92:ac:40:3d:c1:99:ae:f1:04:16:
98:67:ec:cb:44:8f:54:b7:7f:ef:2d:0d:5a:b3:9e:71:f9:fd:
28:a2:11:e8:ac:bb:ea:7e:86:11:5e:5d:23:69:6e:10:2c:de:
c2:a9:a0:77:c3:c8:0d:69:fb:19:a4:a7:75:be:08:2e:5a:06:
3b:91:31:a7:ac:32:ca:c2:b4:3c:ec:77:0b:28:cf:ac:3a:f7:
9b:73:93:90:68:70:a5:fa:f0:26:82:60:b0:62:fd:67:11:d4:
7e:e8:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:51 2024 by rpki-client on console-fra.rpki-client.org