Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YIIX4aJoCPTsE6RCJKYX58PyrSI.roa
File: YIIX4aJoCPTsE6RCJKYX58PyrSI.roa (raw, json)
Hash identifier: BbKcMvTU1OReGu9VrobfYUqVGl28O75yt8JBtrWkr0E=
Subject key identifier: 60:82:17:E1:A2:68:08:F4:EC:13:A4:42:24:A6:17:E7:C3:F2:AD:22
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027312981B0866304436A49B87F460
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YIIX4aJoCPTsE6RCJKYX58PyrSI.roa
Signing time: Tue 02 Jan 2024 02:30:52 +0000
ROA not before: Tue 02 Jan 2024 02:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 185.222.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 18:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:73:12:98:1b:08:66:30:44:36:a4:9b:87:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=608217e1a26808f4ec13a44224a617e7c3f2ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:a7:40:6d:b9:2c:3f:9e:0c:68:9f:bf:60:
e7:0a:bd:ee:0d:4d:e0:8a:0e:98:a7:b5:e1:39:0a:
d0:a8:5d:7a:e5:2a:61:e3:08:ba:d0:f3:cb:b1:ea:
37:e2:63:49:c2:df:43:48:73:cb:1d:86:ff:c7:40:
fe:a1:47:bd:10:6d:fa:9c:f4:2c:1a:bc:cc:0a:38:
bf:a2:f2:e4:11:ae:6c:4a:25:e4:e9:fb:c3:e1:b9:
53:2a:ff:45:22:fc:08:95:38:d7:6d:5f:7f:1a:7e:
58:78:6f:90:35:78:cd:35:dd:2b:e0:2e:81:22:09:
29:d3:6a:64:a2:87:c4:17:31:25:23:0f:68:02:3e:
e3:91:d9:9a:ed:a3:0b:b0:33:91:e1:b4:1a:96:92:
71:e3:c5:aa:37:c3:95:d0:bc:14:80:73:d9:70:ed:
a1:15:30:10:6e:77:6a:1b:9a:25:7d:58:20:05:43:
9c:4d:55:aa:bc:40:42:0d:48:c8:ea:72:17:39:07:
e7:1e:66:8f:a7:82:12:41:db:26:4c:e2:1f:90:3b:
b5:b8:c0:70:b5:13:71:a5:e6:8b:c9:4d:cf:c8:1f:
68:b8:60:06:ad:10:53:49:7e:9b:5d:a2:de:3b:37:
05:b2:51:7d:96:2c:be:9c:72:70:79:90:80:05:6c:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:17:E1:A2:68:08:F4:EC:13:A4:42:24:A6:17:E7:C3:F2:AD:22
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YIIX4aJoCPTsE6RCJKYX58PyrSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f9:f5:1b:93:43:37:95:d9:6f:87:79:4b:8c:47:05:22:c5:
c0:d8:e2:9f:4e:38:36:0b:04:b4:b7:48:76:3d:d2:c8:20:5c:
1b:c9:80:ce:71:cd:42:e1:9e:69:1e:42:d7:b3:1d:36:c4:33:
f5:ed:16:2a:7b:e3:50:d2:11:9f:7f:de:e8:4c:82:06:49:81:
55:8e:41:e2:7e:2f:4b:87:f4:ff:d1:20:ed:d7:79:55:d3:ed:
7e:56:b5:f4:4e:f1:46:64:07:d6:ad:5e:62:fc:c5:08:e1:75:
b3:e5:35:0a:ad:0f:a9:14:fc:a7:85:79:ab:13:7c:b5:cc:68:
fc:c4:b6:c0:45:a9:d5:1e:58:4b:39:41:f8:a8:9a:52:dd:10:
0b:79:da:5c:d4:2c:67:1c:3f:31:4b:27:8d:c6:9b:1a:1d:6b:
c5:c8:75:7e:6b:0a:dd:7b:25:5f:c9:4b:4f:17:49:44:07:20:
bf:b1:a5:61:6d:8e:2a:40:5b:8a:c2:d7:dc:60:ed:75:f0:da:
d0:44:02:9b:69:19:ab:70:91:e8:c2:b3:78:94:55:04:1e:d7:
b6:01:ec:94:fd:35:28:98:f1:a4:47:82:60:27:15:98:3f:c2:
20:bf:78:01:34:26:55:52:b6:92:63:7d:f6:0d:ea:f8:16:9d:
1f:df:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org