Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/yVfSdfi2VIa9Mwyv7dffDD5bGBY.roa
File: yVfSdfi2VIa9Mwyv7dffDD5bGBY.roa (raw, json)
Hash identifier: KpqijIdjxJxQOjP3GxK4uJeehrnCBKkEe/JRbeQM1GA=
Subject key identifier: C9:57:D2:75:F8:B6:54:86:BD:33:0C:AF:ED:D7:DF:0C:3E:5B:18:16
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 018D79AC5C4D04EECCB70E241E01BE6373AF
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/yVfSdfi2VIa9Mwyv7dffDD5bGBY.roa
Signing time: Mon 05 Feb 2024 14:29:15 +0000
ROA not before: Mon 05 Feb 2024 14:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.34.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 07:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:ac:5c:4d:04:ee:cc:b7:0e:24:1e:01:be:63:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Feb 5 14:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c957d275f8b65486bd330cafedd7df0c3e5b1816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:05:fd:2c:5b:e8:ad:e9:e2:31:2c:88:c0:
e9:03:0b:2c:84:be:2e:d4:8b:1d:af:b8:1a:55:e0:
d1:5d:86:52:09:ef:a2:b6:d1:2e:69:62:1e:3a:3a:
ad:d9:fe:ac:fb:53:5a:63:c3:c9:25:20:d4:12:52:
14:3c:c1:90:6c:c5:cf:0a:17:2e:8e:96:30:01:43:
63:fd:2d:b7:84:9d:cf:53:40:66:ce:f7:de:24:9e:
0b:2d:3c:35:2e:f5:60:c4:5b:46:14:c1:e0:ac:46:
dd:15:f2:1c:0c:f3:6d:64:48:3c:04:b0:29:4f:5d:
24:2a:57:d0:86:06:2d:ce:00:aa:2a:bf:d4:68:f1:
b7:da:89:a9:a7:51:65:85:81:b4:58:ae:2f:52:2a:
88:25:d1:89:bb:11:cb:14:a6:d5:ec:fa:05:5a:46:
97:a4:c6:94:44:67:f1:ce:b9:48:3a:62:af:e1:84:
6a:e6:89:55:59:a6:e3:de:54:30:30:7f:08:f0:98:
b1:d4:43:9f:17:f3:87:ec:8f:70:dd:35:4a:0b:b1:
24:a4:f0:f9:6e:93:0d:8d:d6:83:ba:dd:d2:b0:83:
3c:cc:e0:4b:d3:c5:70:08:b6:6d:e3:b9:5e:a5:56:
db:8a:d4:91:4b:78:b0:b5:ca:1c:94:f1:bf:6c:c2:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:D2:75:F8:B6:54:86:BD:33:0C:AF:ED:D7:DF:0C:3E:5B:18:16
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/yVfSdfi2VIa9Mwyv7dffDD5bGBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.226.0/24
Signature Algorithm: sha256WithRSAEncryption
73:af:29:21:72:cf:af:ba:fe:01:6e:bb:ae:9d:13:42:a4:94:
6b:15:7f:cb:da:b9:9e:76:ca:19:9b:51:8c:e2:72:91:b9:37:
74:b7:df:f9:79:86:e3:ea:61:d9:15:3a:97:f1:e7:90:d6:5c:
ce:22:cd:86:45:fb:c4:31:13:53:20:d7:d9:d7:30:42:6b:73:
f9:28:c0:6c:20:e5:d4:8d:f7:75:34:38:5d:8f:8f:b4:f3:42:
78:42:e4:a7:b3:69:27:23:d7:b5:fe:66:ae:fd:85:23:1c:97:
15:a9:5a:36:5f:db:c6:77:b4:ec:4c:9f:8c:8b:89:b0:3d:22:
df:89:b2:ad:65:8b:1c:68:da:3d:49:4f:94:48:c0:7e:12:7b:
d8:ff:37:49:b3:cb:1b:bd:9e:25:f9:7d:68:83:d4:e9:3e:46:
42:11:70:ed:21:e3:3c:f1:a7:ce:46:3a:87:df:94:28:3c:fa:
f1:9b:7f:13:1d:7c:b8:f0:5c:1a:b7:71:43:7d:61:40:64:b6:
27:d9:8c:14:14:68:4e:00:c5:f6:59:4a:a7:b9:9a:57:57:2c:
41:31:12:c3:f0:1c:32:aa:02:ae:b0:4c:d3:a8:2b:51:3c:6f:
7c:4a:92:5c:8f:e0:8e:2c:72:ac:1c:0d:22:92:d4:5d:3a:86:
4c:5a:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:34 2024 by rpki-client on console-fra.rpki-client.org