Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3YzElqjaBdlJGZ-3WG60uO76UuY.roa
File: 3YzElqjaBdlJGZ-3WG60uO76UuY.roa (raw, json)
Hash identifier: N9YDxs7NQlY9YkPsa8ppY8iLTyQQc6V+h5R7bF+GkHI=
Subject key identifier: DD:8C:C4:96:A8:DA:05:D9:49:19:9F:B7:58:6E:B4:B8:EE:FA:52:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018894F211DC492BC27CC83C43386CB64A70
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3YzElqjaBdlJGZ-3WG60uO76UuY.roa
Signing time: Wed 07 Jun 2023 08:21:12 +0000
ROA not before: Wed 07 Jun 2023 08:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 185.209.38.0/24 maxlen: 24
185.209.39.0/24 maxlen: 24
185.226.106.0/24 maxlen: 24
185.214.100.0/24 maxlen: 24
185.214.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 08:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:f2:11:dc:49:2b:c2:7c:c8:3c:43:38:6c:b6:4a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 7 08:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd8cc496a8da05d949199fb7586eb4b8eefa52e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:b3:f6:74:ed:46:dd:28:8a:21:d4:0b:a1:
d0:61:32:d0:54:3a:61:be:2e:ec:8f:0d:18:17:96:
e0:04:25:0f:b5:66:de:3e:56:72:5b:82:7f:d4:c7:
8c:60:a6:68:d7:c8:a0:aa:5f:c5:67:8f:61:29:3d:
00:a7:da:fb:b3:78:27:6e:23:ee:ee:78:47:41:8f:
3f:5e:5e:19:bf:86:87:c6:76:c0:00:df:29:f4:d5:
7d:a9:1b:ce:75:19:87:35:3b:36:27:99:0e:c7:d2:
0b:aa:a4:ad:5b:59:c9:37:29:25:61:30:b6:80:b2:
72:82:79:f2:33:83:21:74:6c:ef:02:a4:eb:c4:d1:
54:af:4e:26:28:f5:ff:a8:e5:1e:18:b3:56:3a:46:
65:2e:1e:83:40:80:b4:0e:bc:ae:eb:b5:04:5c:a7:
cd:c8:72:d5:c3:0c:5c:2b:92:86:22:56:ad:f9:d7:
48:9c:b4:b9:d1:72:83:d3:68:af:a1:61:61:ca:2f:
2e:dd:20:fb:95:81:0f:b1:f5:c7:7b:6a:06:b6:64:
ef:f5:e3:79:f6:c1:55:6a:7d:a9:b5:11:14:aa:97:
3d:e3:07:f3:3b:34:f0:c0:9b:ee:2e:62:06:29:9e:
54:62:94:67:b7:81:6c:ae:59:5b:bc:9c:fa:28:52:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:C4:96:A8:DA:05:D9:49:19:9F:B7:58:6E:B4:B8:EE:FA:52:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3YzElqjaBdlJGZ-3WG60uO76UuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/23
185.214.100.0/23
185.226.106.0/24
Signature Algorithm: sha256WithRSAEncryption
62:af:f0:33:87:36:24:55:a5:3e:03:0a:22:cb:b5:87:51:4c:
ab:94:27:6f:72:7a:af:b3:ca:67:37:ae:af:b8:ae:ba:52:cb:
ed:67:f1:2c:98:a4:a4:db:da:75:c6:9e:7d:cb:bb:f7:f9:f5:
5b:a6:a3:18:66:ed:d3:8b:c8:14:47:95:32:5a:e7:53:1a:7b:
2c:b1:ed:6a:a4:52:de:6b:57:16:4a:d9:4c:9d:e2:4d:ec:1f:
64:43:62:e3:db:7d:90:93:dc:3b:57:31:c7:ae:be:e3:54:e9:
e1:ea:8a:db:59:30:14:81:3c:d8:43:e1:d2:16:73:a2:13:26:
5b:b3:0b:05:76:82:92:be:43:1a:90:06:c6:4c:20:64:c6:a4:
87:15:5d:b3:94:41:a9:fd:c2:78:10:8a:5d:72:a4:36:34:0a:
04:b9:b2:45:72:39:18:c5:24:49:ac:8a:9d:a6:4e:3e:ae:1f:
3b:81:09:09:68:ed:aa:06:43:5b:7f:38:d6:85:a5:22:a9:c0:
10:18:bb:23:a4:98:d5:dd:78:cb:95:1f:90:56:7a:1e:e6:5c:
2a:ca:9e:8c:09:59:1d:2c:b5:22:71:9a:eb:8f:5f:eb:f3:98:
35:6b:d5:3c:36:75:79:8d:1f:02:47:53:27:d0:c2:d7:d1:03:
10:44:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org