Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6sknzg6rFwGVwkmcmxfFEeOT79Y.roa
File: 6sknzg6rFwGVwkmcmxfFEeOT79Y.roa (raw, json)
Hash identifier: Vjbdd3jWwtTKmuh0PsUg7DYvJOnKzdeht/V0s6cN/zg=
Subject key identifier: EA:C9:27:CE:0E:AB:17:01:95:C2:49:9C:9B:17:C5:11:E3:93:EF:D6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62FFAC8A122648C4AE677F6E9A286
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6sknzg6rFwGVwkmcmxfFEeOT79Y.roa
Signing time: Mon 02 Jan 2023 09:00:43 +0000
ROA not before: Mon 02 Jan 2023 09:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33932
IP address blocks: 185.230.54.0/23 maxlen: 24
185.227.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2f:fa:c8:a1:22:64:8c:4a:e6:77:f6:e9:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eac927ce0eab170195c2499c9b17c511e393efd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:5e:65:72:d7:07:e9:f1:f8:15:ff:d5:9d:
fc:1a:58:a9:ff:02:b3:c2:6e:c6:3c:5c:2e:62:b1:
f5:45:3e:32:3c:ee:7a:5d:81:50:c5:a8:55:e3:7b:
ac:f7:cb:b9:e4:3e:2d:1b:52:b0:39:05:76:6f:79:
41:ea:47:6a:d2:43:1d:61:50:a2:6d:53:f5:e6:a0:
db:77:94:75:5e:c2:dd:59:af:d8:85:35:6e:ff:e7:
3f:b8:fa:b7:13:89:2e:55:ba:07:f7:37:51:4f:d6:
81:72:fb:5a:39:5e:e3:fe:79:30:00:2f:dd:ba:c0:
6b:3c:5e:f7:84:51:9d:98:80:91:b0:5f:67:c8:02:
16:e5:8e:ed:5e:93:f6:78:eb:8f:2f:89:55:73:54:
d9:4c:55:31:4d:84:d5:dc:ce:6c:40:bb:8e:1c:0f:
96:16:6a:fa:4c:74:a8:0a:e0:8a:88:4e:a3:4c:dc:
e4:b2:13:ee:10:98:92:5f:6a:2f:3d:9a:c0:f3:ef:
24:7b:f7:92:a2:67:e5:1c:a6:20:36:90:28:56:20:
e2:bb:06:ce:13:03:fe:f5:8a:58:6c:15:2d:aa:b9:
51:61:8d:5a:bc:ce:b4:24:99:0d:b2:66:7b:ce:2f:
99:f0:9c:b4:43:04:b4:af:ff:0c:79:a5:a8:79:29:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:27:CE:0E:AB:17:01:95:C2:49:9C:9B:17:C5:11:E3:93:EF:D6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6sknzg6rFwGVwkmcmxfFEeOT79Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.204.0/24
185.230.54.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:3a:dc:5f:02:04:db:40:33:77:91:27:f9:43:45:26:4d:e0:
f9:7d:31:53:6a:65:e6:3d:ec:72:bb:a7:ef:1d:e0:d0:de:0a:
b5:1f:fe:19:61:36:68:e2:f6:bf:dc:d7:fb:b8:db:db:f3:4b:
46:19:10:37:ef:a3:b1:b7:25:fc:44:5b:95:fa:7b:bc:84:db:
4c:b4:bd:04:95:a4:7c:e5:84:b3:3e:d1:4d:ce:79:df:07:3a:
12:85:5d:d5:20:71:28:4b:63:e0:af:ab:c7:8d:07:bf:41:a6:
a8:7d:51:04:c9:85:00:40:eb:5c:d6:bb:ed:25:94:ce:7d:8e:
90:7f:94:43:e4:8d:26:a8:7a:64:a5:60:2b:b5:76:ad:3a:8a:
2b:91:95:97:15:81:16:e2:bd:68:c7:e1:12:b7:b4:60:50:87:
3c:d0:67:cf:03:7d:c0:06:e8:45:8a:78:1f:72:ac:75:09:56:
d3:2f:32:d6:0c:49:53:06:f0:05:e4:08:cd:71:23:9e:dc:d4:
a5:ca:f2:e7:f6:90:2f:a0:cc:52:15:62:4d:b4:0e:89:8a:d9:
11:9d:04:ca:06:73:72:b2:0c:4d:6e:b7:d2:ba:fd:dc:79:91:
d8:ba:5e:a3:62:16:81:b2:ba:2f:79:75:3e:a2:e1:50:b9:8e:
51:df:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org