Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YKrXjmp5T1CZV-fmy-f_LGDkpqs.roa
File: YKrXjmp5T1CZV-fmy-f_LGDkpqs.roa (raw, json)
Hash identifier: l01wmXwnKoiD2LUamytyo5rGfA83JcGZndnlvzl9NNo=
Subject key identifier: 60:AA:D7:8E:6A:79:4F:50:99:57:E7:E6:CB:E7:FF:2C:60:E4:A6:AB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185783ED555D8DE5F249AE02FBDA79F8E93
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YKrXjmp5T1CZV-fmy-f_LGDkpqs.roa
Signing time: Tue 03 Jan 2023 15:27:41 +0000
ROA not before: Tue 03 Jan 2023 15:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46844
IP address blocks: 185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 13:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:3e:d5:55:d8:de:5f:24:9a:e0:2f:bd:a7:9f:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 15:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60aad78e6a794f509957e7e6cbe7ff2c60e4a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:dc:9d:f5:81:49:28:65:18:1e:a5:6a:aa:
1f:8d:2a:7a:4d:d0:68:cb:e9:c9:dc:c8:ff:92:94:
48:85:01:70:9c:73:a5:57:e2:08:e0:71:f2:23:81:
8d:d2:34:57:8a:26:09:e5:78:74:0c:59:9e:1d:50:
c2:a0:13:09:64:a6:85:51:51:10:89:73:6b:90:a4:
b7:ec:5a:e9:e7:b4:c0:c3:67:c7:c0:ce:26:ce:de:
46:93:a0:b6:d5:2c:b4:58:27:f5:53:c6:42:8d:bc:
46:df:55:29:df:65:2a:03:c2:14:98:a2:37:8f:2a:
6f:2b:89:7c:e4:8c:1a:e8:7b:7f:84:83:bb:3b:31:
0e:4c:39:f1:56:79:3e:a2:e0:61:f7:08:fa:e6:d9:
cc:c8:65:0c:9d:3e:5c:f5:62:94:3a:39:43:cd:35:
06:2f:53:07:54:cf:93:2d:9f:78:ac:bf:b6:c3:c4:
9e:19:f8:4a:62:da:f2:ff:b1:1b:6f:00:6f:82:aa:
9b:07:a6:10:de:ac:a8:e1:d6:89:80:cc:ca:e7:f0:
41:93:5e:68:a0:1e:27:6d:d3:bb:57:7e:48:61:8e:
8c:71:c8:85:d0:1e:fc:0a:f7:72:2e:87:e9:a7:d5:
49:95:37:cf:79:00:ae:75:0b:5f:12:cd:ab:2d:21:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:D7:8E:6A:79:4F:50:99:57:E7:E6:CB:E7:FF:2C:60:E4:A6:AB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YKrXjmp5T1CZV-fmy-f_LGDkpqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f2:29:09:07:4d:95:a4:0b:19:53:d9:53:79:28:b6:04:00:
8d:b1:e9:e3:99:65:45:a2:8b:dc:b6:4c:e0:8f:83:5c:52:fb:
f0:36:43:04:7f:c4:93:59:d6:af:e4:31:4d:46:24:20:b4:13:
95:23:fa:b4:0d:e3:7e:11:eb:b0:6f:6d:57:3e:92:67:21:ca:
63:5a:d0:43:65:b6:92:d5:91:d3:12:30:c1:08:f6:32:ec:56:
bf:36:c5:13:49:7e:f6:bf:97:ef:ef:cb:d5:ec:0a:ba:9a:6a:
0a:e1:93:72:ad:c5:9d:8c:ae:86:76:d1:92:ab:0a:01:79:fd:
fb:00:34:df:0a:9d:ab:c0:e7:9b:d4:75:d6:66:09:aa:48:b2:
bb:51:15:47:63:d6:b7:ba:40:2d:56:28:e5:28:39:7c:a9:a3:
f2:4d:3a:af:79:f9:e8:f1:ca:66:c9:31:30:88:1d:a8:3e:9a:
d9:ff:36:58:ea:9a:b5:a9:c2:44:7b:c4:eb:99:44:b0:8e:72:
4d:50:b9:ae:29:2b:e3:0c:41:a5:b4:db:de:c2:63:21:7c:e8:
80:5f:ac:2b:d6:d9:70:f9:51:5a:77:74:c5:48:f8:e2:67:a4:
aa:7b:4b:f1:52:71:a1:1a:bc:ca:b8:37:99:7e:df:f9:cb:8f:
62:1b:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org