Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/674wA610onQb9xISDi8RUy6rB88.roa
File: 674wA610onQb9xISDi8RUy6rB88.roa (raw, json)
Hash identifier: tYSFOv5Q0WmuSrk4MAEk/uPmCS5A7+biBZOc+Z6VXN0=
Subject key identifier: EB:BE:30:03:AD:74:A2:74:1B:F7:12:12:0E:2F:11:53:2E:AB:07:CF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B629D490B9ADEB1050725583C070A1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/674wA610onQb9xISDi8RUy6rB88.roa
Signing time: Mon 02 Jan 2023 09:00:41 +0000
ROA not before: Mon 02 Jan 2023 09:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 984
IP address blocks: 185.246.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Sep 2023 09:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:29:d4:90:b9:ad:eb:10:50:72:55:83:c0:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebbe3003ad74a2741bf712120e2f11532eab07cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:d5:40:f1:15:74:99:c5:50:b4:5f:7d:3b:
08:b3:09:e5:76:c3:58:0f:f9:e9:21:3a:83:24:44:
4c:60:6a:a9:6f:c6:a0:f8:d9:43:f0:ac:95:ae:7b:
17:ed:c7:c0:bb:a8:c7:2c:7c:f0:6f:bd:78:34:a1:
70:fd:f4:b9:e0:39:b3:cc:5f:f6:5d:10:de:3d:7a:
6c:ee:16:c9:94:bd:93:d6:1c:7d:02:91:00:fc:a6:
19:45:25:cd:37:d7:6b:cd:90:73:58:7c:c2:90:fd:
4e:e6:20:2a:9c:b6:54:c8:e5:40:0d:eb:d6:e9:86:
7a:b6:c8:47:e6:68:d0:53:8c:f8:72:b9:35:eb:a1:
7d:a0:4c:ab:e9:fb:94:4a:c4:e0:cd:9e:36:46:bd:
03:ca:89:74:70:2a:60:b5:e6:c6:27:9a:b4:0f:d1:
1a:97:12:bd:4b:9f:1f:63:d5:26:f1:d3:b7:53:27:
3c:e0:fa:0c:58:0c:2e:85:b3:5f:46:41:ec:fa:02:
8c:6e:cb:bd:a5:48:39:27:99:19:f9:98:eb:c7:b8:
c4:5f:8e:59:b8:a7:f0:af:52:d1:e6:6c:e8:4a:07:
11:f7:4b:3c:49:12:79:cf:f4:10:48:92:cf:0d:59:
9c:c1:e9:11:0f:fb:10:16:21:f4:8f:ae:1d:e6:e0:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:30:03:AD:74:A2:74:1B:F7:12:12:0E:2F:11:53:2E:AB:07:CF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/674wA610onQb9xISDi8RUy6rB88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:23:d7:ee:d3:9e:80:f7:35:78:d4:22:d2:e4:7e:91:52:e7:
2a:b9:44:73:91:19:5d:68:de:86:6a:2d:52:45:99:d9:dc:36:
1e:3d:3a:e4:6f:51:45:44:b4:2f:2d:f7:26:56:04:61:a3:ea:
14:3f:a5:d3:0f:37:c2:b2:c3:fd:00:1c:75:47:d7:f3:c8:6e:
7d:90:77:a8:50:02:d8:f9:dd:7a:3c:15:8e:81:5b:06:ba:ff:
1c:89:13:ce:25:a4:75:95:77:b4:85:60:b7:be:61:a5:72:6c:
60:98:4a:77:4a:f9:0f:19:f8:4b:df:6c:d2:8f:ab:a3:ce:23:
7c:ab:12:7b:31:06:8b:c8:66:4b:f9:7c:b2:f8:cf:29:67:49:
da:d1:f9:6d:cd:3b:92:3b:8f:32:12:7e:53:16:2d:8c:44:56:
05:84:6c:45:05:e4:1f:8e:d1:3e:de:6d:86:53:b8:44:ac:3c:
92:d9:23:4b:ad:01:3b:78:8a:52:90:8f:45:64:21:a1:79:88:
c3:6d:66:e0:81:8f:53:32:c0:c4:97:77:4d:f9:96:c6:6a:cc:
d9:1f:30:c6:47:5a:f3:34:fb:94:b5:92:9d:ea:4e:6f:e1:02:
2f:cf:b4:85:18:e8:1f:89:6c:3a:90:b7:95:f7:b4:9b:00:85:
10:de:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org