Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa
File: YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa (raw, json)
Hash identifier: l6F7s7q05cwl92N6eOWv9RrqSq2lUyDZXpl+DtvoBwI=
Subject key identifier: 62:E4:1D:24:EA:97:18:29:81:90:B2:E6:F5:FF:85:9F:72:02:0B:58
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018A87995F1D27B9F7D985524F419C2BF019
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa
Signing time: Tue 12 Sep 2023 04:14:50 +0000
ROA not before: Tue 12 Sep 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
91.237.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 03:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:87:99:5f:1d:27:b9:f7:d9:85:52:4f:41:9c:2b:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Sep 12 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e41d24ea9718298190b2e6f5ff859f72020b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:c0:be:90:31:24:78:1b:98:12:53:1f:0e:
60:9b:14:4a:d6:3e:6f:03:71:de:d1:9a:ee:31:71:
e3:0a:f6:eb:a1:52:55:97:35:97:c3:17:09:e3:8f:
d1:67:ed:2e:99:ba:3f:21:af:1d:42:b5:06:7b:e5:
59:e4:1c:8c:42:ac:aa:83:ad:90:e6:d2:f6:55:45:
d6:04:66:19:df:f2:e4:a3:92:92:34:b2:4e:d0:b1:
5c:fe:c4:7e:73:e2:e3:6e:da:53:3d:b2:87:ba:7b:
10:68:95:2a:d5:72:50:52:a1:32:c9:e1:ab:fa:8b:
1d:40:75:8d:98:ba:0b:31:4d:ed:68:23:b2:09:f4:
8c:b4:3d:34:10:5d:29:fc:80:ba:c1:50:b8:74:48:
40:d1:32:c6:99:83:5c:7a:e2:26:49:4e:da:a1:8a:
84:8d:2c:f0:a0:42:32:0e:e7:93:07:07:b9:66:57:
25:f6:23:d4:77:6c:b2:bf:dc:09:87:ad:78:84:3f:
52:f1:01:01:87:8a:28:6e:16:2d:b3:3d:2b:fa:56:
3c:e6:bf:80:83:9c:5d:df:97:ee:35:88:56:37:07:
a6:ec:01:9a:7d:4f:53:20:21:63:69:cb:66:1f:50:
6c:2f:30:9a:f6:08:38:d9:2d:4c:04:3e:2e:c1:4f:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:1D:24:EA:97:18:29:81:90:B2:E6:F5:FF:85:9F:72:02:0B:58
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:16:20:a0:0b:f6:ed:1d:65:55:75:2b:e9:14:26:c2:49:19:
ea:2c:e9:a3:9c:e7:04:62:3b:3f:4d:ed:b4:11:77:ef:de:a2:
34:bf:e1:10:a1:ac:14:62:8e:bc:d1:64:78:f5:f4:0a:c0:b3:
ed:5b:98:3c:3a:02:ec:2e:bc:24:7a:a8:ff:cf:28:65:af:92:
85:2f:f5:ca:94:c3:28:67:23:fa:ab:06:0c:d6:36:ce:f0:99:
82:6d:15:78:1c:19:48:0a:2c:98:02:6d:07:12:48:0f:c3:cd:
15:e6:3a:ef:30:b1:86:fb:86:10:b7:33:ee:5e:80:b1:12:25:
5f:b4:36:52:2a:88:6c:02:50:ae:24:e9:69:d3:c3:3e:ed:34:
25:ab:d5:77:29:e5:e3:cb:a2:35:6a:09:42:9a:7b:50:8d:7a:
8c:dc:3d:6a:a0:91:24:41:45:83:71:e3:2a:f5:ab:f8:d7:52:
82:19:4d:76:fb:18:23:0a:3b:b4:15:dc:cd:96:0d:f9:72:e6:
75:69:8d:62:4d:a4:b9:76:71:66:dd:98:ec:fc:d7:49:5f:d8:
2d:c3:fb:76:22:7d:89:49:91:44:d9:84:b3:07:bc:73:b2:2d:
0f:5e:65:05:90:66:09:26:d7:83:22:c1:4c:53:9f:05:31:3c:
d9:2b:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org