Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/50VI0PSHAAV0UNijrLOl4aH_OK4.roa
File: 50VI0PSHAAV0UNijrLOl4aH_OK4.roa (raw, json)
Hash identifier: Ah4/P7PICiw39wcDK37s/x1uHUgLHblgdwHaJAbM5g8=
Subject key identifier: E7:45:48:D0:F4:87:00:05:74:50:D8:A3:AC:B3:A5:E1:A1:FF:38:AE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AF0F502EECCA8298042922966695C9285
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/50VI0PSHAAV0UNijrLOl4aH_OK4.roa
Signing time: Mon 02 Oct 2023 15:15:03 +0000
ROA not before: Mon 02 Oct 2023 15:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 185.220.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:f5:02:ee:cc:a8:29:80:42:92:29:66:69:5c:92:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 2 15:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e74548d0f48700057450d8a3acb3a5e1a1ff38ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:22:57:53:0e:aa:8f:91:d3:54:b1:fa:04:
0c:b0:2d:64:79:de:93:ea:93:12:f7:3e:d1:0a:43:
b7:d4:85:07:c0:34:51:21:70:e3:11:b9:fd:2f:35:
ec:99:61:85:d8:42:9a:6d:76:d5:cb:87:04:28:d9:
6d:c9:ac:bd:ed:98:57:1a:f5:e3:36:69:d8:bf:07:
c3:bf:07:b3:ed:49:bf:60:14:14:c8:14:7c:cd:8d:
aa:94:d4:dd:7f:d6:6a:a4:03:74:08:5e:a1:5c:75:
83:d9:7f:28:93:a4:84:b8:b0:71:8c:23:b6:39:cb:
41:e4:e9:80:5a:ba:4f:80:71:e6:40:b6:4d:a9:08:
ca:7d:f2:52:3e:2e:89:1d:06:c5:67:db:c4:92:70:
a1:42:1e:cb:11:0b:1a:e9:e7:2b:e8:6e:cf:7e:cc:
85:5b:1b:64:70:2d:e5:eb:7a:ef:d7:02:05:c2:e0:
cd:7a:8d:43:0d:23:05:8b:42:05:56:25:84:cb:31:
46:03:ec:33:99:f2:cc:6d:fb:d6:ab:e2:18:c6:f6:
84:d5:bc:0d:3a:97:6b:54:ae:c5:e3:95:0d:b0:95:
70:82:be:67:27:32:e9:3d:80:80:1d:4d:91:d8:78:
b3:8c:70:8a:d3:83:a3:31:63:35:04:7d:f5:98:fe:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:48:D0:F4:87:00:05:74:50:D8:A3:AC:B3:A5:E1:A1:FF:38:AE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/50VI0PSHAAV0UNijrLOl4aH_OK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.250.0/24
Signature Algorithm: sha256WithRSAEncryption
45:85:ce:5f:15:db:cc:32:bc:f8:66:4e:05:02:99:1c:8e:98:
09:14:c9:f6:fc:4a:41:65:d8:60:63:3a:e8:f2:24:4a:03:5d:
29:9b:ed:dc:91:e9:99:62:a5:16:eb:96:0c:d8:67:7c:40:c9:
34:c9:c9:a7:ec:5e:61:21:70:f8:62:a3:65:c5:60:9c:fc:9f:
8d:28:d6:a1:be:6b:ed:71:b9:38:9d:37:66:2d:22:5f:2b:ab:
64:04:1a:a9:7c:38:0d:6c:8e:1d:ac:3b:eb:8a:c4:1d:1c:04:
68:be:3e:9c:37:16:57:34:14:4b:d6:6f:7e:35:2b:ec:f0:59:
98:24:77:ec:2d:db:4f:0f:d9:8a:ed:5f:30:6d:84:c4:48:ae:
4b:22:ae:64:55:9f:f2:db:10:7b:b2:f3:b0:09:4c:16:19:d0:
ba:8b:bc:ee:2a:24:57:3c:8d:4d:10:c9:66:48:e0:da:ad:5f:
94:3d:a8:99:bc:cb:0b:10:12:6e:bc:15:4c:df:44:49:e9:d1:
70:41:f9:30:48:a4:ed:1a:05:98:9d:b9:27:3a:51:d7:f5:a3:
5d:cc:97:7c:0f:54:2f:e6:25:76:1f:a0:2a:24:b1:01:5e:54:
41:2e:6a:2c:7f:8b:9c:0e:16:61:d7:26:93:a5:fb:0a:c8:72:
b4:e6:8e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org