Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X6PqCm87hYwEPn3MzLrxZ9u4in8.roa
File: X6PqCm87hYwEPn3MzLrxZ9u4in8.roa (raw, json)
Hash identifier: gIs78vnxtAxgWD2uI5+3u/59jGj1G/GOjwc7uHeqe84=
Subject key identifier: 5F:A3:EA:0A:6F:3B:85:8C:04:3E:7D:CC:CC:BA:F1:67:DB:B8:8A:7F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A8DBA975654E20B0A5F06B645867AF5DF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X6PqCm87hYwEPn3MzLrxZ9u4in8.roa
Signing time: Wed 13 Sep 2023 08:48:50 +0000
ROA not before: Wed 13 Sep 2023 08:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 185.221.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:ba:97:56:54:e2:0b:0a:5f:06:b6:45:86:7a:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 13 08:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa3ea0a6f3b858c043e7dccccbaf167dbb88a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:f6:72:da:dd:c0:af:53:93:f0:44:29:7f:
a8:0a:6b:3a:03:00:f6:33:85:2e:0c:b7:c1:e9:fb:
d8:9f:cf:e6:38:69:4e:0f:26:fc:d5:8b:d6:14:4c:
e3:8e:5c:dc:a2:5d:ef:4f:d9:ee:7a:84:35:c3:8d:
63:8d:a2:6c:43:fc:8d:57:94:4c:96:63:5a:a5:b7:
b0:7c:36:f6:29:31:d1:e3:3b:2a:b2:5e:4d:d4:0a:
a1:e2:de:17:78:93:66:4a:54:ef:52:9f:88:f8:4c:
dc:28:5f:89:88:6f:9f:36:7b:93:02:9c:cc:8d:f8:
40:4c:f8:cd:e0:02:bb:e2:cd:44:e6:c9:b2:70:b0:
00:06:12:85:2a:2d:11:30:79:aa:af:11:0b:8b:ba:
05:e1:c8:54:aa:e7:34:df:af:96:62:98:e6:66:e3:
a1:67:60:10:6c:40:df:83:c9:5e:24:e3:7c:11:f0:
27:cc:1c:0b:27:1b:dd:c5:d0:3d:ba:44:31:b1:3c:
6f:b6:83:8e:dd:35:83:b3:34:2c:2b:ca:95:c6:e6:
2f:05:40:49:ff:c8:72:23:be:f3:e3:d3:95:5f:80:
99:b9:24:9d:23:0d:f7:c4:55:28:63:40:bc:a5:ac:
36:31:cd:d2:84:85:c0:36:06:cb:bc:e2:3e:31:e6:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:EA:0A:6F:3B:85:8C:04:3E:7D:CC:CC:BA:F1:67:DB:B8:8A:7F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X6PqCm87hYwEPn3MzLrxZ9u4in8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:32:2e:af:8f:65:82:74:76:ff:06:39:40:04:9c:c7:8f:87:
39:1e:cf:8e:78:19:30:c7:60:76:41:81:27:d9:3f:2b:f2:f9:
61:20:50:50:87:70:88:21:f0:13:c8:6a:2a:e5:55:7d:54:4a:
bd:e8:3f:a1:59:3b:01:b9:ce:14:12:16:98:8b:9d:54:c9:d6:
6e:cb:ea:f1:e4:f3:00:6e:48:5b:b1:e5:cb:9d:28:35:a3:56:
11:a7:28:ca:2e:2c:80:ae:c2:6b:3c:20:24:04:38:75:3e:a4:
a4:29:8a:6d:76:5e:9c:c9:00:cc:02:f7:a6:86:c7:9d:a7:d4:
04:49:74:ab:0c:45:1b:d5:32:dc:eb:b3:3a:68:d6:80:ed:23:
f1:1c:aa:0b:5e:e7:59:7d:df:14:c1:09:16:a2:be:a8:30:bd:
46:b5:af:c5:f4:e2:f5:24:a7:d5:8f:d8:d0:47:fb:0b:b2:00:
71:5a:88:5c:47:95:5d:5c:aa:0c:2f:38:af:1e:ab:98:4e:2f:
ca:f5:ab:8e:21:d8:75:54:d9:5c:07:37:3b:f8:45:fd:1a:42:
ac:66:6c:2c:95:a5:33:ad:18:80:b4:4f:98:00:70:5c:24:1d:
6b:c6:66:35:cf:15:e4:9c:40:c5:6b:3d:b8:9a:3d:c8:55:f5:
c5:6b:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org