Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ZNlbn0jrcjxfQAxx9Xl72PiyqI.roa
File: 1-ZNlbn0jrcjxfQAxx9Xl72PiyqI.roa (raw, json)
Hash identifier: LyPpaLpWtXJd3viZSdeUl5NIpjLOnp12j/NDl36jO3M=
Subject key identifier: F9:93:65:6E:7D:23:AD:C8:F1:7D:00:31:C7:D5:E5:EF:63:E2:CA:A2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018BB8B8741E29220FFE15CEDBA4AB210727
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ZNlbn0jrcjxfQAxx9Xl72PiyqI.roa
Signing time: Fri 10 Nov 2023 10:12:57 +0000
ROA not before: Fri 10 Nov 2023 10:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 185.221.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Dec 2023 11:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:b8:74:1e:29:22:0f:fe:15:ce:db:a4:ab:21:07:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 10 10:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f993656e7d23adc8f17d0031c7d5e5ef63e2caa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:dc:e3:91:a6:60:b6:79:4b:f0:fe:e5:97:
62:9b:11:82:fa:e1:ea:0f:28:c4:d9:bb:03:99:4d:
bc:bf:e1:64:a4:e9:ed:82:c4:09:9f:71:43:1f:46:
d5:e3:c7:54:73:13:ac:6d:61:93:a3:c8:c6:30:46:
1c:7e:f2:df:ea:ba:f3:a0:d2:f1:83:79:45:52:1f:
fb:ca:b3:35:8a:c8:63:60:c6:84:b7:d0:59:24:4c:
56:40:4b:76:64:54:4c:0d:53:cd:a1:d8:16:9b:43:
3a:15:2e:85:f0:28:0e:4e:a7:f1:2f:e2:8b:41:d0:
f9:4a:da:d4:cd:26:14:03:07:29:49:34:c6:1d:53:
b6:74:f7:5d:f5:ce:f2:bc:56:fe:65:75:9c:10:12:
83:f8:d3:4c:e5:eb:a2:cb:e4:d5:ee:33:d7:91:03:
0e:07:bd:b4:b6:aa:0a:c5:03:e1:33:ed:5e:00:ba:
39:af:b7:04:a7:55:08:fe:5f:fe:13:25:0a:2e:3c:
14:b2:5c:0f:54:83:1c:ff:56:76:6d:d7:d1:de:3b:
d5:47:da:e1:db:7f:46:bf:d2:e4:41:5d:38:e1:b8:
b3:1a:b5:e1:57:4e:40:44:1b:94:39:09:d2:fd:f3:
69:42:cd:4f:36:2f:e4:24:0b:97:e9:7e:7d:92:7a:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:65:6E:7D:23:AD:C8:F1:7D:00:31:C7:D5:E5:EF:63:E2:CA:A2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ZNlbn0jrcjxfQAxx9Xl72PiyqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e0:75:59:60:96:22:54:2f:ab:4a:1d:30:59:2c:46:64:42:
74:55:94:c1:db:be:f9:34:e2:8d:48:2c:77:9b:28:ab:73:24:
52:86:90:12:af:a6:d5:a0:b0:c9:6c:e3:b7:f6:47:b6:73:94:
3d:f2:17:27:1a:cd:d8:f0:b4:06:a0:81:37:a2:57:65:07:3e:
49:de:46:6b:a9:ca:0c:d2:6a:3f:a6:4d:33:62:8a:8a:ed:17:
f0:58:e5:4a:a0:5d:2b:5a:ca:bd:6c:c2:80:d1:a2:26:c1:ae:
96:ce:f7:2e:f8:10:5b:d7:2c:c7:38:c8:3b:a4:10:56:e8:b6:
88:75:c9:de:fe:a6:ff:31:6a:0b:b8:e9:76:25:94:16:40:e9:
e2:b8:55:67:d5:c7:ec:08:88:c0:59:75:6d:6a:06:c2:ce:0d:
b7:7e:94:9f:4e:a9:fd:0d:91:a8:e6:92:d5:42:08:00:2f:60:
0d:24:b9:13:8c:30:05:66:e1:38:01:99:15:a3:21:14:5a:1b:
52:ae:66:37:66:50:d2:c9:3d:d6:f6:91:56:7e:3e:44:eb:ea:
b5:ce:b9:98:c5:3e:56:3b:6d:8b:69:87:2c:e2:00:97:b7:e9:
46:b2:ee:72:f0:78:d5:d0:74:76:66:45:80:c8:30:fd:92:66:
21:2a:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org