Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/bOYGyC38Ph7FrFfwndojHnEly6w.roa
File: bOYGyC38Ph7FrFfwndojHnEly6w.roa (raw, json)
Hash identifier: R/0MBTkCfXCqE9LuVmXSJaTVUGWOM0fPFwO/TW3B5Ao=
Subject key identifier: 6C:E6:06:C8:2D:FC:3E:1E:C5:AC:57:F0:9D:DA:23:1E:71:25:CB:AC
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 018FE8A3023424ADB4FB3CD45ED7EE22519A
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/bOYGyC38Ph7FrFfwndojHnEly6w.roa
Signing time: Wed 05 Jun 2024 13:42:27 +0000
ROA not before: Wed 05 Jun 2024 13:42:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206406
IP address blocks: 185.187.92.0/24 maxlen: 24
185.187.93.0/24 maxlen: 24
185.187.94.0/24 maxlen: 24
185.187.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 08:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:a3:02:34:24:ad:b4:fb:3c:d4:5e:d7:ee:22:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Jun 5 13:42:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ce606c82dfc3e1ec5ac57f09dda231e7125cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:d3:c5:7f:25:0e:91:5f:08:70:36:dc:93:
2f:75:d0:77:a8:7b:51:b4:06:ee:56:2e:95:7a:76:
77:72:55:61:8f:01:de:aa:1d:da:44:53:12:63:01:
7c:b2:37:79:43:a6:df:68:ca:2d:b4:aa:25:a2:7e:
e6:d4:ae:47:4e:66:35:16:41:9d:ee:21:91:5f:4e:
58:77:98:f4:d5:f6:63:9c:3c:ea:2e:3f:dc:5b:50:
f3:e2:e3:e1:6c:9d:0a:c6:3c:5c:06:34:98:a0:bf:
ad:a4:19:2c:60:32:c2:41:78:47:4a:53:85:df:a9:
06:50:28:13:5d:ad:6c:52:cc:80:39:9d:8e:f8:74:
08:c7:bd:23:14:a0:bb:ca:f5:0f:98:df:21:72:db:
dd:76:a6:38:d4:b0:fb:95:4b:b0:18:7c:c4:14:b3:
99:05:e4:0f:fa:5d:d0:75:b4:ed:50:08:c3:85:ea:
d6:55:b1:df:d8:71:62:fd:15:6e:ee:b3:93:66:e1:
3b:a9:4c:f5:80:5b:7b:60:69:dd:44:85:68:fa:a8:
3e:93:1f:6f:3b:32:26:37:a4:9e:c3:06:f6:9f:2a:
02:43:20:c1:a2:f1:6e:7f:bf:e0:bb:28:f3:fb:cc:
b7:4b:e5:15:13:d6:9d:c7:83:08:bb:ca:e1:be:e1:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E6:06:C8:2D:FC:3E:1E:C5:AC:57:F0:9D:DA:23:1E:71:25:CB:AC
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/bOYGyC38Ph7FrFfwndojHnEly6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c7:35:6f:f8:20:50:a9:11:36:3b:9a:27:ae:75:d0:65:d4:
23:74:97:53:63:95:eb:2c:32:43:20:4e:2f:9c:58:2a:96:85:
43:60:75:a4:26:71:8a:2d:e9:dd:af:29:fc:0f:ac:00:fc:b8:
b0:29:f6:76:1e:b6:a8:2c:25:b3:33:89:d2:cc:77:b7:ed:f2:
e1:bf:6a:9c:e8:ba:ba:43:a0:72:6f:67:fe:97:7d:3b:26:55:
35:b9:8c:f9:df:ed:08:19:6a:2b:43:3d:8f:d3:54:bf:e8:ad:
1f:70:d3:99:66:ff:72:de:f4:8d:65:a7:da:96:37:31:b8:12:
58:3a:8c:59:ea:b0:b3:41:60:e4:12:85:04:74:c8:4a:08:6e:
51:b5:55:36:2d:03:26:98:57:52:68:bb:44:6c:0d:8a:8e:92:
c5:86:20:63:b9:49:7b:dd:20:51:85:c1:cf:9c:71:22:30:50:
73:bc:e7:b5:46:77:84:d5:4d:81:ad:8d:5d:f9:29:16:2a:e0:
0b:ff:7e:b3:a0:37:40:2a:bf:9d:b8:98:d7:d5:0a:88:b4:d6:
a9:1a:93:11:5a:8c:77:d5:65:1d:21:7e:08:4f:d9:bf:85:51:
ea:15:6f:63:05:ed:14:21:9a:66:4c:8c:02:ab:27:90:99:12:
ac:39:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org