Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/Qn0Yy34rmQvDZS8t6HV5MrSKyNw.roa
File: Qn0Yy34rmQvDZS8t6HV5MrSKyNw.roa (raw, json)
Hash identifier: sxSbD4OKDtQoRaBCmlMOoTCwI3zV41H5EwRb7kuEvJ4=
Subject key identifier: 42:7D:18:CB:7E:2B:99:0B:C3:65:2F:2D:E8:75:79:32:B4:8A:C8:DC
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 018967A32002145168350314287B34D51FEE
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/Qn0Yy34rmQvDZS8t6HV5MrSKyNw.roa
Signing time: Tue 18 Jul 2023 06:14:51 +0000
ROA not before: Tue 18 Jul 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202767
IP address blocks: 185.155.60.0/22 maxlen: 22
185.135.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:a3:20:02:14:51:68:35:03:14:28:7b:34:d5:1f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Jul 18 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427d18cb7e2b990bc3652f2de8757932b48ac8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:b7:4b:64:c9:4d:b9:e4:3e:42:07:aa:9c:
93:3b:6a:54:96:26:38:12:64:77:ee:5a:ef:50:e0:
64:b3:b8:9c:c7:c4:05:6d:66:e2:21:c1:bb:4b:ec:
3a:bf:c6:4d:57:b1:8c:7b:9e:6d:97:15:ef:49:ac:
6b:94:89:12:43:11:b2:3e:1f:c3:a3:91:69:e1:6e:
a6:6a:fe:9d:69:ee:1e:b0:84:5d:df:19:3c:a8:23:
fa:ae:42:92:22:88:9a:ec:c4:60:3d:fb:2d:b2:36:
16:ab:5c:2f:44:38:75:00:36:0f:d9:10:08:a1:60:
52:21:21:cd:24:08:4c:1d:2b:e0:2f:b5:ef:c3:de:
db:95:cd:eb:ec:30:53:72:1e:b0:16:20:00:6a:ea:
99:82:e3:b5:74:bb:7e:6a:97:95:2e:28:51:d5:a8:
d6:40:c0:f5:65:8d:6b:17:cb:8d:ee:5e:89:c0:de:
c1:1c:63:a8:92:61:fe:d2:af:2b:4c:0b:b0:44:a5:
0f:fe:de:bc:9f:1d:a7:22:68:98:37:b7:4e:97:09:
40:56:f2:99:54:16:b9:4d:df:8a:1a:78:ca:26:bc:
98:0f:13:03:4e:39:12:ac:0b:eb:5e:55:47:c5:be:
61:af:1e:e2:3a:70:d9:70:6a:9f:6c:9b:2e:13:52:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:18:CB:7E:2B:99:0B:C3:65:2F:2D:E8:75:79:32:B4:8A:C8:DC
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/Qn0Yy34rmQvDZS8t6HV5MrSKyNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
185.155.60.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ad:cf:f0:76:a5:4a:d5:68:1b:39:8f:fb:c3:0a:48:9e:c1:
24:a2:1d:bd:11:1a:af:19:ef:15:89:a3:d8:93:a6:79:53:00:
44:87:ac:6c:9a:5d:35:7f:fa:08:a8:68:6a:ea:4c:08:60:49:
ae:02:01:05:97:91:78:83:48:e8:f7:6d:a2:49:d4:0d:b0:3e:
95:82:60:1e:d0:8d:04:85:09:c6:ca:99:29:e9:09:97:c3:82:
ee:60:69:1c:77:14:4e:cf:98:89:41:73:d4:88:77:49:cf:a1:
df:05:cb:9a:21:82:e6:95:3b:3e:1b:7f:8c:ff:b7:41:82:60:
1b:0c:50:11:e6:c7:5a:1a:8a:b8:ed:80:2c:d7:5a:17:be:fd:
a3:df:50:d4:40:4d:5c:34:cd:25:3c:70:1b:4d:c1:db:54:1c:
26:03:46:29:52:4b:65:ba:77:3b:e2:e3:08:ef:cf:1e:96:c0:
58:7d:fc:93:93:0e:2c:fb:cc:2d:24:9b:0e:b2:6f:ec:a5:61:
aa:5b:c8:3c:a9:0a:b8:6f:d4:34:b2:44:8b:e3:94:29:3d:8d:
c5:f5:80:a2:6c:00:0c:e1:ff:4d:5c:c1:dc:75:69:73:6b:7a:
bd:d2:3c:ca:76:f0:af:00:dc:b8:90:48:92:fd:b9:9b:1a:03:
f4:d1:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org