Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YYsd9I89hdFIMMK8oXjznYNal70.roa
File: YYsd9I89hdFIMMK8oXjznYNal70.roa (raw, json)
Hash identifier: 8VSx2SWQI1gClkXgWefiXoyYEb5GlVGY8q0cOH/b9Hk=
Subject key identifier: 61:8B:1D:F4:8F:3D:85:D1:48:30:C2:BC:A1:78:F3:9D:83:5A:97:BD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189544A25EB49AECDC4E184C19F3E474234
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YYsd9I89hdFIMMK8oXjznYNal70.roa
Signing time: Fri 14 Jul 2023 12:04:52 +0000
ROA not before: Fri 14 Jul 2023 12:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13741
IP address blocks: 185.227.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 04 Nov 2023 22:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:4a:25:eb:49:ae:cd:c4:e1:84:c1:9f:3e:47:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 14 12:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=618b1df48f3d85d14830c2bca178f39d835a97bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:35:62:8f:a0:13:fa:93:9f:16:0b:09:31:
85:33:c0:a4:36:28:f7:6b:9b:78:b2:95:9e:59:f7:
8b:50:f3:8d:33:b1:4d:98:94:4d:a5:48:04:a2:6f:
29:84:7f:45:75:db:67:04:4d:6f:b4:0e:3d:6a:ed:
38:e1:cb:7e:ee:7e:12:61:db:58:18:fe:66:40:02:
7a:e5:8e:4a:2e:6f:81:52:40:e8:f3:d1:8f:31:9c:
a3:3a:33:6e:68:86:53:bb:e7:7f:2c:70:01:d6:39:
fb:1a:43:c9:67:63:5f:8d:d0:90:f5:81:01:a3:98:
94:ec:5d:d3:cc:2d:b5:c4:75:3f:d3:b6:55:e6:e2:
a9:61:95:ed:c1:57:2f:bc:98:5e:52:69:4c:f6:90:
7a:c9:cb:6b:d7:35:20:35:1d:f5:fb:54:6f:fa:26:
77:06:5d:b3:c0:56:99:a9:22:6a:28:7d:2b:5d:2b:
72:15:bf:f8:9b:e0:c1:c2:a3:3e:f5:66:b3:34:77:
f5:24:b7:5d:41:93:c2:c6:19:3c:46:22:38:ae:97:
8d:ce:d3:86:4a:19:14:57:ef:f7:3a:b8:8f:49:eb:
2e:09:b2:11:17:98:ca:dd:5b:dc:49:e8:06:b8:6f:
f0:4e:e2:0d:17:1a:a7:cf:8e:7e:c3:cd:09:b9:0f:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:1D:F4:8F:3D:85:D1:48:30:C2:BC:A1:78:F3:9D:83:5A:97:BD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YYsd9I89hdFIMMK8oXjznYNal70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.146.0/23
Signature Algorithm: sha256WithRSAEncryption
98:a4:77:05:e8:7e:53:32:5f:fe:d5:74:98:22:91:cc:0a:64:
33:62:b1:2e:91:40:fc:05:f6:56:44:d4:c6:7f:47:b2:92:42:
c9:22:83:f4:77:53:e7:ec:c7:15:1a:fe:dd:19:0f:92:a3:46:
71:25:e7:45:62:40:2c:83:36:92:05:b6:e5:13:4b:91:47:6f:
3a:61:bb:bb:a3:e1:7f:2e:d7:13:60:25:c4:22:0c:e4:72:c9:
6f:5f:12:34:11:2b:50:46:ce:fc:e4:60:a9:b2:05:78:c8:86:
b8:83:ef:6d:d7:08:64:21:e0:38:5f:dc:60:29:e0:26:91:e8:
87:86:ab:b4:3d:9c:93:d9:65:6c:21:68:cb:2e:34:76:33:b7:
86:f5:7a:7b:ae:76:0d:79:0d:d0:fa:2c:55:a1:13:6e:11:58:
d4:0b:5a:2b:0e:f4:4a:a8:3a:34:97:9d:0c:20:d2:f0:e5:73:
ed:f3:27:26:ac:68:dd:80:92:e6:8c:50:2c:47:68:2d:fa:a6:
8f:5c:1e:85:50:46:a2:84:52:65:7e:07:db:22:11:c6:37:0b:
1c:3f:df:7f:d6:d0:d7:c0:3d:7c:19:af:12:b0:da:50:1d:44:
33:02:2a:7d:60:b1:36:1e:23:af:06:58:25:b0:19:68:fe:db:
56:1e:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org