Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6MnrDJGnG9qrduQrLhkxORvNd4I.roa
File: 6MnrDJGnG9qrduQrLhkxORvNd4I.roa (raw, json)
Hash identifier: RmVI/XW9Y4XsDuF/nBcGblJa2Zz3u7xbogXCvr18Vb8=
Subject key identifier: E8:C9:EB:0C:91:A7:1B:DA:AB:76:E4:2B:2E:19:31:39:1B:CD:77:82
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188AF2C805C21A48AA0349354741C92F6DF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6MnrDJGnG9qrduQrLhkxORvNd4I.roa
Signing time: Mon 12 Jun 2023 10:35:09 +0000
ROA not before: Mon 12 Jun 2023 10:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.240.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 17:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:2c:80:5c:21:a4:8a:a0:34:93:54:74:1c:92:f6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 12 10:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c9eb0c91a71bdaab76e42b2e1931391bcd7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:c2:62:74:5e:6e:9c:26:41:f1:bc:30:58:
03:54:04:e9:fc:d9:23:b7:9b:2f:d5:8c:0e:9c:22:
b5:60:5b:35:7e:2d:6a:83:e0:ef:e8:a3:9c:42:2d:
05:2a:05:3b:a8:a0:c0:cb:06:82:5d:a4:54:50:4d:
26:f3:b1:d2:54:29:18:90:5b:12:af:14:51:3c:05:
13:fa:fb:da:37:0f:46:7b:56:81:21:ed:5d:5f:99:
dd:4e:bb:18:c1:0c:5f:25:83:0d:d9:10:80:ca:04:
50:b5:98:bf:fc:f7:89:75:06:61:3d:7a:ff:b7:e8:
83:7d:73:42:bb:95:83:66:46:7b:55:f1:ae:8a:bf:
3e:07:65:7e:fb:7f:26:f9:77:ba:20:19:c8:57:31:
7a:6d:aa:87:ee:5d:04:e2:ce:11:07:07:8c:f4:60:
8d:f6:f2:39:54:f6:d2:77:45:de:61:65:03:69:01:
51:dd:f3:90:e9:c4:9a:67:d9:2a:61:2d:bb:c0:23:
f5:35:87:20:85:14:ad:39:34:eb:5f:d7:a4:18:e0:
3c:a3:4d:44:e3:11:c7:dd:94:0c:4b:df:9c:b0:ab:
25:e5:42:d4:98:13:73:01:82:dd:da:77:5f:11:d4:
90:69:62:70:0b:e5:d0:00:b7:da:11:75:20:11:f1:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:EB:0C:91:A7:1B:DA:AB:76:E4:2B:2E:19:31:39:1B:CD:77:82
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6MnrDJGnG9qrduQrLhkxORvNd4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1a:df:c8:01:88:79:e3:48:d8:2b:de:f1:58:1d:de:cc:14:
cf:54:e0:e6:dd:84:6a:ea:5b:e9:e5:7e:da:95:63:6b:68:a6:
95:3c:d5:93:49:f6:87:71:21:d4:ca:69:1f:a7:cc:c9:18:52:
97:88:3c:5e:cf:26:83:dc:00:b0:b0:ef:00:d3:03:34:8f:89:
e3:ce:5e:a5:e3:97:8f:c1:e3:6b:97:c3:2c:8b:8e:d6:b7:25:
47:45:35:9b:77:fc:37:15:17:e6:1a:9d:0c:20:81:76:43:b7:
3a:2d:9b:f5:8b:56:80:dd:ac:23:1d:96:87:84:60:ad:c3:68:
e6:fd:e9:38:ce:77:44:7a:9b:68:4d:d3:4a:fc:a2:7a:72:e8:
c4:f3:72:56:3f:14:1c:e6:29:da:7e:ac:27:b0:73:c4:90:8f:
7d:67:d9:b2:cc:6a:de:27:22:35:b7:92:f0:1c:43:17:b7:dd:
e9:cc:c1:04:8e:e5:f8:37:cc:60:34:f0:14:ea:fb:5c:72:d5:
15:3b:e4:34:12:da:4c:90:76:fc:dd:c4:d3:ab:ab:db:e8:c9:
5e:9a:65:0f:33:79:77:61:42:51:79:2f:0d:bd:70:4f:c4:af:
ab:43:20:d6:df:fd:dc:ce:a9:be:94:4a:46:e0:3e:61:01:4f:
3c:98:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org