Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3RnKcioPRIPgk2OVBXsgl4yT5e4.roa
File: 3RnKcioPRIPgk2OVBXsgl4yT5e4.roa (raw, json)
Hash identifier: xD4Az7MVwqopEDfJnVXf5tHMrWPQpPlBbAeRaQwNHBw=
Subject key identifier: DD:19:CA:72:2A:0F:44:83:E0:93:63:95:05:7B:20:97:8C:93:E5:EE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027207B3E3E65A3CB524D813185746
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3RnKcioPRIPgk2OVBXsgl4yT5e4.roa
Signing time: Tue 02 Jan 2024 02:30:52 +0000
ROA not before: Tue 02 Jan 2024 02:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.210.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 17:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:72:07:b3:e3:e6:5a:3c:b5:24:d8:13:18:57:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd19ca722a0f4483e0936395057b20978c93e5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:70:d4:a9:8d:49:e9:f3:d9:4d:f1:a6:4c:
5f:46:f7:0e:ac:5a:94:bb:61:48:10:a5:f9:7d:98:
aa:a2:c1:a0:00:fb:af:a9:2f:84:1b:e1:9d:0d:3e:
7c:70:13:0e:e2:b1:a6:9c:46:ca:84:8a:01:5f:73:
ef:eb:b0:85:3b:6c:b4:66:3a:a4:bf:e4:8f:61:31:
e7:26:d9:7b:04:50:2e:8b:a2:14:9b:d6:a2:c9:79:
bd:e2:c8:f3:fb:14:5c:58:4a:3e:64:50:9f:85:8b:
ef:4a:0c:d1:a0:43:eb:f2:8a:6e:c6:39:ff:02:17:
47:28:c8:b2:d1:60:f8:e0:61:96:00:cb:21:9e:22:
08:a3:d9:c4:3f:c4:ac:4c:98:51:d1:80:e4:8d:8e:
fa:33:c6:43:81:61:df:b3:3e:55:0a:1e:f4:ef:da:
4e:ee:bc:7f:0f:d5:51:99:ef:5d:f2:3e:93:92:98:
61:8b:d2:34:89:72:d5:da:c1:ab:eb:7d:ff:61:75:
ff:c0:f6:d7:a2:19:47:78:8b:60:66:ca:71:1a:1e:
94:08:de:37:bf:4d:e4:05:1a:7b:e6:26:8a:4a:70:
08:a2:ff:97:d0:cf:95:be:9e:9c:ca:32:60:cd:5c:
7a:4b:5f:28:db:e1:8e:47:71:7d:f1:89:5f:d8:89:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:CA:72:2A:0F:44:83:E0:93:63:95:05:7B:20:97:8C:93:E5:EE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3RnKcioPRIPgk2OVBXsgl4yT5e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cd:d7:cd:64:4d:24:f1:84:cb:62:97:14:41:4b:0f:a1:28:
00:86:cd:cf:47:2a:4b:88:95:29:72:6e:44:69:55:11:ce:25:
46:dc:91:db:5a:30:d5:de:79:05:b5:15:5a:0a:ba:15:5b:8d:
93:7f:aa:22:5b:a4:c5:06:c4:03:92:d8:55:d4:f8:63:ce:30:
8f:fa:23:a8:90:f1:e5:2d:72:63:03:a3:80:34:ed:3f:92:4a:
51:d9:a8:33:50:58:a0:32:04:59:c2:f2:d8:2d:cf:2d:07:e6:
12:35:5d:ec:14:42:89:4a:0a:6b:ce:0b:d5:64:32:4c:d3:b9:
4a:24:d7:15:70:cc:8c:31:40:ab:cc:da:1e:3c:13:55:05:07:
a5:92:28:37:e0:30:09:7b:e7:9a:7a:43:d9:0c:47:9f:fb:43:
73:c5:16:31:a0:a6:80:cf:79:4c:ad:65:7a:87:b8:e2:05:76:
8d:db:b2:64:97:c7:df:63:8d:9e:9f:fc:b7:02:30:5a:74:75:
0e:fc:ae:48:07:f1:43:48:18:13:32:eb:9c:27:b2:72:16:f0:
ac:ee:a1:02:ea:05:38:e5:e1:26:12:4f:94:34:f7:93:1a:91:
7e:12:45:ea:25:1b:b5:69:a4:29:e4:21:f7:f2:c2:73:0f:95:
8b:4e:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org