Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/YHo6H305veJxiAK-vUwmfhKlY7g.roa
File: YHo6H305veJxiAK-vUwmfhKlY7g.roa (raw, json)
Hash identifier: Rnx7PBqGnwroS2TkTR04qY5e7xX03zuwPXcZt5upGiQ=
Subject key identifier: 60:7A:3A:1F:7D:39:BD:E2:71:88:02:BE:BD:4C:26:7E:12:A5:63:B8
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0185718C2BE8A00BFE819B892D219D24AB7C
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/YHo6H305veJxiAK-vUwmfhKlY7g.roa
Signing time: Mon 02 Jan 2023 08:14:49 +0000
ROA not before: Mon 02 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21104
IP address blocks: 185.86.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2b:e8:a0:0b:fe:81:9b:89:2d:21:9d:24:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=607a3a1f7d39bde2718802bebd4c267e12a563b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:8c:3b:77:3e:f8:06:ba:b7:b6:3c:f1:cf:
4b:d7:54:50:07:dc:26:f1:80:65:ee:fa:8b:3b:a6:
59:5c:63:2d:3f:07:7e:34:6f:5b:e4:54:2e:d4:20:
d7:64:79:65:4c:73:e0:d9:0f:ee:62:fc:a6:7e:11:
78:92:bb:60:df:d2:77:69:04:3b:e4:ac:c4:39:75:
d5:2b:65:0b:0a:b1:68:28:66:6c:57:75:79:83:fa:
91:34:54:e2:a4:5d:f1:3d:a5:66:61:b1:26:99:10:
7c:d6:95:be:15:c8:14:3a:d3:e0:69:3d:49:6a:ff:
9c:dd:ad:9d:80:e5:ab:11:14:c1:9b:64:6c:eb:4e:
12:b8:aa:79:22:91:0e:87:18:49:11:53:aa:26:44:
22:2a:c3:62:c9:5f:94:46:1f:d5:07:b9:47:94:69:
9c:3f:1e:4c:1e:62:77:4a:74:96:19:94:ab:98:0e:
bb:9a:44:2c:c0:f2:62:22:4b:25:0a:92:34:db:f1:
1b:e5:80:d2:33:c3:78:1d:ab:5b:06:4b:91:0f:75:
a4:f6:4d:0a:43:05:fb:71:17:b2:d8:99:15:59:5b:
07:e4:8f:8f:ca:b5:1f:56:fd:d1:76:6b:29:3a:49:
6a:21:43:ad:60:2b:91:d9:1d:4f:75:8b:ab:2b:95:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:3A:1F:7D:39:BD:E2:71:88:02:BE:BD:4C:26:7E:12:A5:63:B8
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/YHo6H305veJxiAK-vUwmfhKlY7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.193.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:91:ab:1a:64:17:9c:f1:9c:6d:25:38:05:26:12:5e:f4:c2:
62:a9:ad:4d:c4:9b:dd:f8:ae:4e:b3:70:31:d8:6a:ca:8c:c9:
fa:b3:d2:39:58:85:2b:eb:82:a3:a6:24:5c:0d:27:c4:fa:4b:
12:a2:6b:73:6b:1f:3c:8c:45:28:4d:06:bf:09:ca:09:53:f8:
f3:6b:7e:6b:dd:b4:9f:85:01:c8:e7:73:96:46:8f:bb:cc:6e:
db:78:59:cc:b6:6b:73:4e:49:10:e4:c7:2e:6b:89:3c:26:bb:
2c:e0:8d:5e:d2:1c:6e:2b:bd:66:bb:21:e2:28:f3:88:1f:a8:
c8:13:71:9b:d5:17:53:4d:87:9d:22:fa:ab:d6:a9:6a:0f:0b:
94:07:5b:a3:57:b7:98:bc:f6:1e:9d:7d:f0:b8:eb:50:47:0a:
08:6b:95:b0:e4:e4:76:3d:aa:6c:bb:af:29:89:32:8b:b0:ae:
b4:aa:58:6e:dd:50:fe:95:8d:6f:7d:bb:bc:6b:0e:17:d0:c2:
8e:0e:63:19:66:09:80:00:b4:64:ab:9d:47:24:6a:fc:69:46:
85:1e:82:51:fe:b9:1d:75:08:fd:40:b6:4e:8a:f5:5e:50:71:
aa:06:e0:a0:92:5f:77:b7:1d:4e:a3:8a:46:94:a2:7a:9e:ee:
95:e4:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-ams.rpki-client.org