Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AgX2E4suxDZzzahA3h47qeU0wDE.roa
File: AgX2E4suxDZzzahA3h47qeU0wDE.roa (raw, json)
Hash identifier: FCesOgGDj4hDyCNuu1p/JUrJYytS4fI9I9+oO4X8yU8=
Subject key identifier: 02:05:F6:13:8B:2E:C4:36:73:CD:A8:40:DE:1E:3B:A9:E5:34:C0:31
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01877B85DA04EB39A226CBCD8A473ED8D78F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AgX2E4suxDZzzahA3h47qeU0wDE.roa
Signing time: Thu 13 Apr 2023 16:49:42 +0000
ROA not before: Thu 13 Apr 2023 16:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59816
IP address blocks: 185.199.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:85:da:04:eb:39:a2:26:cb:cd:8a:47:3e:d8:d7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 13 16:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0205f6138b2ec43673cda840de1e3ba9e534c031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:0e:56:12:e1:ba:0a:d1:e8:77:41:40:37:
88:ea:53:31:24:18:ca:7a:4d:57:9e:c0:f4:d6:22:
b1:c8:68:61:28:28:47:ba:ea:b7:af:30:d4:2f:a4:
22:c6:2d:c7:9a:58:8f:77:a6:e1:98:50:10:0b:04:
5e:02:44:f9:2a:a9:ac:7c:45:4f:6f:c2:a1:99:00:
76:9e:2a:a4:d4:3b:49:ec:3f:21:05:bd:0b:77:b1:
ad:13:1b:3c:fb:65:f8:6f:26:08:94:c8:c6:c1:ab:
7c:09:97:fa:9e:38:94:e3:2f:74:55:24:a6:cc:4e:
c3:b9:be:d3:df:5e:7b:32:0b:3a:dc:57:9a:03:23:
28:0b:8f:ce:4d:72:9a:f7:6e:eb:bb:72:8e:06:1f:
84:a8:d5:86:e6:cf:89:74:8e:46:f7:23:c8:9e:e1:
7e:fa:bc:2a:a8:59:59:36:36:da:a9:88:98:bd:f1:
29:26:c3:6c:87:96:53:91:86:8b:32:76:0a:ca:91:
cc:fa:69:d3:bf:1f:3f:a1:99:4c:3d:41:c6:38:f9:
b3:0c:23:0d:e0:24:7b:38:c8:a6:40:e1:24:c3:1b:
ad:65:3e:63:2f:0b:69:6b:00:dc:3f:00:fd:58:7c:
67:71:07:fd:12:e1:e0:bd:95:b9:d9:17:7b:23:19:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:F6:13:8B:2E:C4:36:73:CD:A8:40:DE:1E:3B:A9:E5:34:C0:31
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AgX2E4suxDZzzahA3h47qeU0wDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.158.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c3:7a:fb:7c:62:a2:d9:6d:03:27:a0:0d:d3:04:88:42:cb:
75:2c:d5:c0:e9:4a:52:a1:24:05:5f:f4:aa:2c:78:93:20:fa:
69:b3:52:62:27:1f:81:79:9d:ca:fc:8c:5c:40:3e:59:23:71:
49:08:5a:09:73:43:3a:9d:12:5a:9d:13:49:7f:b0:3f:16:df:
42:b3:82:fc:36:ee:3b:b6:e8:b2:91:6c:4a:1d:88:9b:cb:ea:
85:d3:e4:d9:15:e0:45:d6:f9:e8:44:15:4c:d5:28:50:f7:fc:
2e:6e:d0:80:59:60:af:86:cf:12:12:2c:27:bd:4f:a1:cd:49:
aa:88:87:4b:1e:fd:e3:ad:25:61:b2:76:8b:28:6b:36:13:bc:
a9:0a:25:0b:09:cb:8c:ef:92:60:cd:fa:49:05:f8:22:db:53:
7a:b2:aa:4e:58:10:6d:5e:19:19:10:e1:11:aa:f8:12:b2:99:
b1:21:6b:26:f6:d5:db:dc:66:c2:73:2b:ef:5c:bd:a3:f0:25:
0d:40:33:b8:8e:85:c4:40:24:04:1f:a5:a2:9e:69:58:c9:f0:
80:b8:4b:98:0a:5e:11:80:c8:33:ce:59:d1:b6:f6:f3:75:73:
3d:44:bb:fa:50:53:5e:de:80:aa:3b:d1:98:38:f2:63:a0:7f:
65:0b:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org