Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa
File: 6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa (raw, json)
Hash identifier: QyMaSQkFB2DfXBCJISTKA0kvxsPPWioCGrM1Czx2xiw=
Subject key identifier: E9:D6:07:D2:5F:6F:61:F0:E6:87:33:F5:60:2D:31:BF:E9:CA:48:B7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63AFEF4FBA671202017AA7DBC1B7D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa
Signing time: Mon 02 Jan 2023 09:00:46 +0000
ROA not before: Mon 02 Jan 2023 09:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 10:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:3a:fe:f4:fb:a6:71:20:20:17:aa:7d:bc:1b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9d607d25f6f61f0e68733f5602d31bfe9ca48b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:43:da:3c:3f:6a:7f:bc:76:5b:01:e4:1f:
1d:76:21:b5:61:8c:52:84:d1:3d:e1:15:53:fc:55:
d2:a4:25:52:c6:06:9a:27:cc:ac:d9:3f:85:c6:25:
c0:3a:d1:8d:ff:0d:bf:dd:51:0e:1d:f6:0d:6c:76:
cf:2e:54:5c:fb:23:2b:22:0d:fc:5c:aa:10:6e:9b:
cb:bf:93:69:00:48:d4:0e:c3:14:bd:17:31:90:54:
7b:38:12:be:4a:42:34:f3:76:38:d8:03:ed:b4:79:
2b:c2:79:11:42:3d:e3:15:e7:a1:1b:f0:c2:de:8f:
fe:b7:6f:b0:f2:0c:97:4f:66:4f:88:0b:3b:e5:11:
a0:45:4c:56:5c:7c:32:c1:9d:d2:14:9c:29:48:ee:
26:7d:18:08:d2:6b:28:3a:8a:5a:86:39:58:e2:c1:
30:b0:d1:3c:36:32:fd:50:de:bf:90:fb:2b:ec:83:
3e:aa:3f:34:52:04:65:1f:19:98:59:fd:49:29:77:
7a:31:6d:ce:6b:64:cd:07:9d:22:01:ef:ad:ee:d4:
c3:cc:d7:44:ae:c8:26:0e:84:76:0d:2f:a6:9d:f4:
17:d3:3a:fe:c1:ae:0e:8a:57:9d:66:e2:70:1d:f5:
87:10:14:d8:52:c4:0e:a4:93:58:36:dd:56:7a:37:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:07:D2:5F:6F:61:F0:E6:87:33:F5:60:2D:31:BF:E9:CA:48:B7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6dYH0l9vYfDmhzP1YC0xv-nKSLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2d:92:e5:ea:ad:cd:22:cb:cf:f6:a4:20:65:cd:3a:82:ed:
24:c9:73:e5:23:c7:31:1e:42:31:9d:10:76:f1:95:26:26:b8:
18:a7:61:46:d6:e9:02:f2:9e:56:d3:2c:6c:1d:89:3c:29:cb:
a4:1a:05:44:bc:65:2f:28:9f:1f:e5:4d:0c:ee:06:18:0e:88:
2b:8b:8d:01:85:f3:66:94:75:63:8a:ba:3e:9d:d1:af:6e:3c:
11:cb:ef:b2:57:dc:3d:0d:89:4f:17:02:df:78:88:43:b2:e4:
49:6a:76:d2:a8:a2:f7:3f:0b:cf:05:5e:17:74:20:d9:71:2b:
8e:28:2c:51:a9:4f:22:6c:be:e1:1a:f1:06:8d:bc:98:fc:2e:
cd:d5:5f:4c:78:0c:57:51:e6:eb:89:a5:80:bc:e4:17:34:6d:
78:b8:a6:d5:bf:36:03:82:4c:55:7b:5b:e6:f7:d0:91:a7:6f:
f6:e7:68:9e:92:14:0f:35:20:da:f5:ab:4c:2d:b6:e9:30:e6:
67:08:5a:54:be:68:24:4f:fe:c6:c0:96:8b:da:36:ae:66:7c:
4f:d7:19:62:60:b9:3b:4c:03:42:c8:03:76:6c:64:f3:ed:0d:
c2:c6:ef:eb:19:36:d8:cb:55:10:d3:37:4c:af:e1:00:32:43:
5c:ef:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org