Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/C-7yvQ1m_3Ixd47x4-hQYWlzuUM.roa
File: C-7yvQ1m_3Ixd47x4-hQYWlzuUM.roa (raw, json)
Hash identifier: iKeYW4G6KRs57fiCZEHI9UX+LS0qImCiY8xYozh6U20=
Subject key identifier: 0B:EE:F2:BD:0D:66:FF:72:31:77:8E:F1:E3:E8:50:61:69:73:B9:43
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01856E0B110D2D500F52F59CD1ECACA9EC72
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/C-7yvQ1m_3Ixd47x4-hQYWlzuUM.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58010
IP address blocks: 185.60.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:11:0d:2d:50:0f:52:f5:9c:d1:ec:ac:a9:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0beef2bd0d66ff7231778ef1e3e850616973b943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:07:df:c9:af:6b:70:e6:d1:6b:1a:1b:ac:
df:fe:11:d5:0e:ef:52:a2:76:94:b5:80:32:46:2c:
d1:fd:7e:13:94:5c:5c:68:95:c3:31:d1:2c:48:4b:
c0:fe:a7:a8:1c:32:49:cf:3a:2b:88:ab:03:db:81:
40:81:67:da:4e:95:25:5c:e4:83:7a:90:9d:d3:61:
f8:9d:97:99:55:8e:9c:a8:a4:c2:c1:73:78:59:5a:
78:6c:f3:82:01:97:67:1c:c4:35:b7:ad:1b:71:af:
fb:25:bb:d5:86:2b:22:99:31:de:80:b5:49:20:10:
73:3b:36:e4:9d:7e:91:64:bd:bb:26:7d:bd:a4:4a:
5f:a7:e5:21:cb:ff:d3:7d:7e:2c:62:6a:50:29:f5:
25:f2:5b:15:b7:24:37:20:9d:40:42:6a:c2:9c:10:
45:4d:7f:55:65:47:26:9d:28:f0:d7:44:24:f1:30:
0a:16:58:a2:fb:d9:a6:72:fe:1c:d5:1c:9d:25:5b:
92:60:b6:b7:e5:59:a4:28:2e:ed:bf:0c:f0:77:bd:
67:c1:8d:70:70:5e:46:1d:b6:86:23:24:37:bd:c9:
7a:52:73:3a:11:c4:35:3e:3b:8c:03:cb:e9:cd:b2:
12:ee:24:11:3a:c7:15:2c:d7:69:bb:ff:5b:89:ec:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:F2:BD:0D:66:FF:72:31:77:8E:F1:E3:E8:50:61:69:73:B9:43
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/C-7yvQ1m_3Ixd47x4-hQYWlzuUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:15:ef:88:f7:4a:65:d4:cb:0b:4a:23:9c:71:67:73:bd:b7:
a4:73:29:08:19:39:f8:68:6a:0d:5e:51:58:b4:e0:19:73:62:
71:42:b1:4f:12:31:83:7c:d8:c6:99:bc:e1:7f:1a:15:85:a3:
a8:ca:09:71:92:ee:0c:5e:05:b1:b7:2a:be:a9:71:49:4c:28:
45:dc:ec:d5:b5:fd:68:90:a6:d7:0f:76:fd:32:a2:0a:c6:be:
8a:8a:e4:ce:57:a7:8f:26:b2:b7:7a:8a:d5:aa:25:aa:d2:2a:
01:02:41:33:59:19:52:6c:c1:e3:24:f8:5e:66:58:97:7c:ae:
b7:d5:57:67:cc:fc:0e:8a:17:48:d8:33:05:86:2f:c0:b2:3f:
a5:6f:dc:df:1c:e7:4d:46:ca:93:14:23:da:ea:87:89:e0:7e:
7d:de:b2:49:d6:c2:79:0e:de:70:0b:31:55:29:d1:a6:f5:e1:
ea:8a:95:0c:03:fe:16:9c:3c:40:8d:01:a6:90:28:49:48:0d:
c3:51:ac:ff:d8:64:60:af:30:76:3e:99:79:0f:08:88:f4:c5:
12:56:1e:96:00:f3:0d:b3:38:04:d6:fe:dc:d2:da:b7:f4:e1:
a4:eb:fb:d2:b4:92:2e:38:08:61:00:a0:69:a1:3a:12:00:ae:
9d:25:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:47 2024 by rpki-client on console.sobornost.net