Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/bJaPDWmK1WnlLif372L_EHlX11o.roa
File: bJaPDWmK1WnlLif372L_EHlX11o.roa (raw, json)
Hash identifier: ot5PENU0lI8doxkfjOlWhH6ekQ5m+vLsKgqI0lbyndQ=
Subject key identifier: 6C:96:8F:0D:69:8A:D5:69:E5:2E:27:F7:EF:62:FF:10:79:57:D7:5A
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 01856CF85B774581636E76229523785DA3AC
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/bJaPDWmK1WnlLif372L_EHlX11o.roa
Signing time: Sun 01 Jan 2023 10:54:53 +0000
ROA not before: Sun 01 Jan 2023 10:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60398
IP address blocks: 185.249.105.0/24 maxlen: 24
185.249.107.0/24 maxlen: 24
185.249.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:5b:77:45:81:63:6e:76:22:95:23:78:5d:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Jan 1 10:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c968f0d698ad569e52e27f7ef62ff107957d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:be:7c:ad:a1:a4:af:44:34:12:75:2f:58:
a9:61:70:ca:43:e8:e1:0a:79:49:8d:8e:13:9f:fc:
90:07:92:4c:6c:cb:69:de:ee:a4:c3:ec:35:f8:ec:
58:30:53:46:5e:af:78:aa:52:e3:a5:d4:b5:82:03:
da:a6:11:b3:51:18:49:2e:01:c6:d2:39:1e:63:f8:
b7:a2:69:5e:94:84:99:b8:c2:2b:4c:ba:ca:84:3a:
df:3e:da:38:ac:56:23:ab:49:06:23:c6:a1:24:d5:
fe:d5:e0:05:85:0a:a6:9c:2b:b0:14:d5:01:8a:61:
71:24:72:33:fd:f2:d0:17:b1:72:f2:db:50:2f:7b:
35:dd:4f:15:e4:7d:26:c1:c2:1a:dd:c5:46:45:3b:
6e:e6:92:ac:d9:2d:d1:df:89:2f:12:96:e0:ac:99:
73:f2:ca:4d:ad:7f:cb:07:4a:5e:c8:9d:5f:00:a5:
c2:10:0f:f8:10:7b:bf:28:07:3d:fa:91:3c:1c:9e:
ad:51:eb:2e:25:e8:1f:70:4d:ee:a8:af:67:db:39:
6f:81:c4:24:f3:54:64:e8:df:06:56:a7:47:34:40:
be:02:c9:b5:ca:c7:77:f9:60:fd:dc:c4:3a:97:40:
7a:6f:c7:da:f7:88:0c:93:a4:b9:da:64:a9:4a:5d:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:8F:0D:69:8A:D5:69:E5:2E:27:F7:EF:62:FF:10:79:57:D7:5A
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/bJaPDWmK1WnlLif372L_EHlX11o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.105.0-185.249.107.255
Signature Algorithm: sha256WithRSAEncryption
96:b1:6d:56:1d:19:05:97:58:ff:6a:9e:5f:45:10:4e:26:dc:
9f:ba:d2:bc:19:20:cc:a3:3c:13:24:07:b0:e6:f1:1f:d2:da:
ae:23:ba:12:a6:0a:90:7d:5a:ba:09:c3:19:c2:89:7c:84:f3:
33:11:bb:b0:c4:31:f6:33:08:cd:60:b4:78:3d:3e:9c:67:c1:
3d:49:b6:f6:a2:88:96:bd:2f:41:e5:77:93:9d:6b:3c:cd:10:
d3:ea:3e:f2:c4:06:2a:6e:ec:31:fe:e1:5e:9c:86:4e:01:ce:
15:c9:39:b1:8e:d5:87:30:22:cb:9d:74:72:a9:d0:51:84:06:
4e:0b:d0:04:39:47:22:24:e2:84:0e:53:1e:2e:9d:b7:0e:a9:
f7:a2:d9:dc:21:c5:52:17:2c:39:0a:82:94:60:ad:c8:83:27:
9a:ae:ca:c2:2a:fa:30:a3:27:7a:40:ac:8d:10:09:6b:c2:90:
61:5f:dd:eb:07:1e:3a:2f:2a:c0:c5:c8:9c:bc:75:df:d2:63:
10:d5:39:23:d1:26:4b:57:15:f8:f7:b6:1e:c5:fd:91:40:16:
17:9f:b2:9f:81:dc:e8:4d:a6:5e:d5:4f:a0:3d:63:e6:a7:80:
55:82:f7:68:25:1d:32:c4:d7:cc:22:82:dc:bf:cc:ac:ab:5e:
86:8b:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org