Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0DmBzPmu65cr4bg5PyDdZu3is28.roa
File: 0DmBzPmu65cr4bg5PyDdZu3is28.roa (raw, json)
Hash identifier: 3E5rGhx1PGw+w4rfQp5xlkXodCLcjyurahw5xdcxMJs=
Subject key identifier: D0:39:81:CC:F9:AE:EB:97:2B:E1:B8:39:3F:20:DD:66:ED:E2:B3:6F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189C6E18FE3B912EDFB9CFD872DC62F6BF6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0DmBzPmu65cr4bg5PyDdZu3is28.roa
Signing time: Sat 05 Aug 2023 18:06:58 +0000
ROA not before: Sat 05 Aug 2023 18:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 185.225.20.0/24 maxlen: 24
185.221.20.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 15:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:e1:8f:e3:b9:12:ed:fb:9c:fd:87:2d:c6:2f:6b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 5 18:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d03981ccf9aeeb972be1b8393f20dd66ede2b36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:6c:62:0a:8f:ac:87:50:2b:f0:c8:9d:06:
e7:a5:a4:30:1c:09:38:5e:14:2a:b4:a6:cc:b1:42:
0b:da:86:fa:11:b3:a9:61:4c:6b:e0:93:72:0b:41:
51:9e:23:75:f4:c5:8f:c1:d6:8b:4c:2f:b2:38:74:
b4:f2:ca:bd:f7:d4:1c:46:20:3d:7e:f8:9a:20:da:
dd:6b:7c:e9:ae:a4:7d:4d:8d:9e:b5:d7:9c:41:70:
7c:85:64:e7:75:07:da:81:e8:1e:3b:04:1e:77:a2:
49:b7:d0:ac:1b:99:35:bd:3a:1b:bd:9d:1d:b5:f1:
1d:4c:5d:51:10:03:63:50:6f:e2:f4:72:35:b1:1d:
f3:3c:8c:37:0c:ae:1e:2d:cd:48:b8:78:2e:86:66:
34:e3:fa:b6:28:df:29:46:50:c8:b2:d2:45:d9:13:
f8:e1:cf:74:39:09:60:3e:6d:c8:cf:75:38:8b:7f:
11:8a:92:02:e1:4b:da:84:af:0b:5b:8f:72:d4:04:
dd:6f:17:93:a9:ee:18:f6:96:0b:6b:31:3e:20:12:
88:86:9c:53:e7:e2:2c:14:66:8f:3d:f2:cc:0a:78:
ff:cc:ff:79:40:2e:ca:9d:b0:c7:03:30:73:c3:ec:
4c:70:62:d9:11:3e:c2:a4:80:e5:83:1c:ef:77:5b:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:81:CC:F9:AE:EB:97:2B:E1:B8:39:3F:20:DD:66:ED:E2:B3:6F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0DmBzPmu65cr4bg5PyDdZu3is28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.20.0/24
185.223.83.0/24
185.225.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cd:d0:53:1e:14:18:35:69:49:96:96:20:cb:72:5d:64:b1:
cd:49:f2:48:8a:58:aa:71:9a:18:c8:53:27:c1:9b:1f:41:43:
76:05:2e:4b:b9:d5:71:c5:fd:ea:aa:21:7c:b0:75:f4:97:b2:
c3:8d:ef:39:33:53:e0:fd:21:bc:a4:59:40:32:19:05:5e:84:
91:09:54:15:91:eb:94:fd:4a:59:6a:96:b1:7e:dc:20:58:eb:
d2:e6:84:31:4d:24:37:57:4f:fc:01:e6:af:78:38:1b:fd:44:
f3:46:cc:66:6d:21:e5:8f:43:37:c7:39:9a:16:a1:8c:44:40:
2e:a9:f3:0f:4f:fa:21:73:53:aa:d2:5c:c2:df:3a:da:90:d8:
ea:e0:71:85:62:e2:0e:fe:bc:eb:0b:d1:a7:38:d7:6c:b9:92:
35:4c:43:68:07:4f:31:9b:bb:99:b6:06:e8:3d:17:dd:3f:5e:
81:6e:62:83:c2:11:4d:4a:02:3a:46:19:ea:b7:df:31:46:b3:
1c:04:70:47:13:d6:ae:27:ae:be:c7:cc:29:98:ba:39:df:5a:
51:73:90:d1:06:37:31:c7:18:05:2a:6a:a9:bf:32:4a:dc:36:
11:f6:97:2a:96:ec:1b:63:d0:de:97:7d:c1:3e:2e:df:32:63:
a9:1f:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:19 2024 by rpki-client on console-ams.rpki-client.org