Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4dOubWJ_fL905IYB9PEl-JHH6M0.roa
File: 4dOubWJ_fL905IYB9PEl-JHH6M0.roa (raw, json)
Hash identifier: WTsq6Rt4HFpWp4sRKEKmVJqhoep3I7RYwgFcSg1OYJU=
Subject key identifier: E1:D3:AE:6D:62:7F:7C:BF:74:E4:86:01:F4:F1:25:F8:91:C7:E8:CD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C678B38C0D1C76CC98999EE00CC398343
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4dOubWJ_fL905IYB9PEl-JHH6M0.roa
Signing time: Thu 14 Dec 2023 08:57:06 +0000
ROA not before: Thu 14 Dec 2023 08:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209336
IP address blocks: 185.246.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:8b:38:c0:d1:c7:6c:c9:89:99:ee:00:cc:39:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 14 08:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1d3ae6d627f7cbf74e48601f4f125f891c7e8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:8e:fe:9f:3d:d1:eb:65:cb:93:9f:8e:f9:
7c:fe:e3:00:bf:89:77:34:6d:4e:56:a7:e2:eb:97:
d0:32:a5:a8:85:50:75:0b:fc:e7:9d:32:40:8f:e5:
ad:51:01:8c:4e:4f:10:01:ab:f3:bb:de:2f:0f:f5:
ee:b9:86:61:c6:0b:b9:76:ca:22:b8:00:40:df:88:
86:c5:b7:99:ff:67:0b:14:ba:1f:66:5c:65:07:c5:
a5:48:2d:52:4b:47:a4:88:8b:df:03:47:1d:1c:41:
08:81:ce:1a:90:e3:93:8a:90:a5:36:7b:b7:b0:1a:
10:ce:bd:4f:16:0f:9c:94:fe:8c:7c:de:af:47:57:
4c:3f:8b:d1:b8:52:aa:a8:ff:ae:55:6b:55:06:5d:
a3:67:fb:31:ab:af:fb:0e:5f:6b:18:04:a5:d6:97:
29:a5:77:d8:6d:7f:93:2c:8f:3b:f4:78:be:cb:89:
f0:8a:f5:b2:0d:a0:c2:e5:c1:b7:11:2f:64:10:55:
eb:b0:d0:cd:16:9c:77:45:5f:18:57:75:16:38:dd:
26:5c:62:4c:04:12:93:4e:39:a2:07:7c:4f:bd:59:
be:e7:3a:6f:92:c0:ca:25:c7:a9:8e:b4:fd:dc:3f:
6d:90:9a:ac:d4:e5:ea:63:15:e6:1b:21:c3:ad:e9:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D3:AE:6D:62:7F:7C:BF:74:E4:86:01:F4:F1:25:F8:91:C7:E8:CD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4dOubWJ_fL905IYB9PEl-JHH6M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e3:93:67:54:95:e9:77:27:0b:12:3a:88:dc:02:bf:fe:43:
46:b2:23:5e:cc:a3:f6:40:76:73:3f:e7:9a:8f:01:ee:11:55:
89:1d:7f:61:ef:98:5d:13:bc:9b:34:63:7a:c8:38:c4:3e:ce:
8e:ca:b9:45:7e:8f:be:1e:21:4d:26:9a:1a:39:fd:8f:27:47:
e9:f0:da:01:8f:0b:86:c2:22:c8:4a:26:dc:60:f9:0f:1b:3a:
69:cd:64:5d:07:ae:ce:bc:bd:84:89:c3:d3:a2:bd:c7:60:0d:
29:6c:35:cb:13:a4:91:f5:8c:d8:45:a6:09:43:7f:74:2c:91:
9d:5c:c4:d1:db:76:cf:e7:38:37:3d:59:2d:95:7d:b2:ee:24:
79:f7:28:5f:bc:d9:6b:1e:4b:5f:3a:08:87:d4:46:f6:a5:25:
80:0b:1f:f8:72:0d:34:dc:88:d0:a9:9c:97:14:ca:49:a9:c7:
3a:f8:57:b0:fe:5b:b9:0f:47:2b:60:3f:19:1e:18:79:70:01:
b9:3b:56:9f:e7:b2:cc:31:a0:16:d2:38:37:43:97:90:1c:97:
b7:02:7a:0b:1f:9e:00:07:17:6f:07:8e:87:33:e1:ba:35:3b:
a3:19:fb:cf:f5:1d:79:41:ac:df:d5:73:10:e3:ea:47:07:83:
1b:55:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org