Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6rDtk1QZmU1XT2Hbld7TW3CiNcE.roa
File: 6rDtk1QZmU1XT2Hbld7TW3CiNcE.roa (raw, json)
Hash identifier: mR8xyneDxS58LinzFnXylvdzPZ5k3w28TEQBYvmKsvw=
Subject key identifier: EA:B0:ED:93:54:19:99:4D:57:4F:61:DB:95:DE:D3:5B:70:A2:35:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80298228292E5DAFAC1235A1540C509
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6rDtk1QZmU1XT2Hbld7TW3CiNcE.roa
Signing time: Tue 02 Jan 2024 02:31:02 +0000
ROA not before: Tue 02 Jan 2024 02:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 185.209.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:98:22:82:92:e5:da:fa:c1:23:5a:15:40:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eab0ed935419994d574f61db95ded35b70a235c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:c0:20:ed:5a:0c:02:e9:48:77:0f:b8:c8:
c9:45:dd:db:0b:d3:f7:6b:e6:bc:62:7e:69:89:7b:
c7:d4:d3:7f:e6:de:6b:c8:ae:aa:5c:17:04:d5:36:
26:64:d2:02:49:97:85:e0:6e:8d:bf:03:2d:43:36:
1c:a7:ce:1e:ec:f5:b2:f6:c5:79:15:53:43:ad:d5:
69:34:46:27:31:05:dd:68:36:7f:68:0d:7c:93:b0:
83:17:a9:64:59:a7:52:47:ef:6d:8b:c7:94:63:05:
51:53:83:57:57:b1:6d:27:f3:60:45:db:95:ad:06:
51:5d:9a:22:79:8c:3f:9f:9f:c4:18:95:69:ad:9a:
e0:ca:dc:8e:37:3a:ec:c0:3d:25:f7:4e:8e:9e:3e:
66:43:5c:ad:ef:3c:e5:c1:04:bb:7a:c0:35:c8:90:
0f:32:10:53:76:d8:90:80:26:cb:29:71:8a:dc:f2:
07:b0:67:c4:07:34:a7:71:fd:4e:12:60:9b:3a:2d:
cf:06:69:5e:a0:ef:45:15:98:b0:22:25:a3:79:e4:
e4:ab:1a:8d:52:e9:a2:99:9e:17:45:8c:03:99:9f:
47:4f:c1:cf:97:6f:14:5c:8f:7f:30:aa:61:23:99:
3e:a8:66:00:07:70:c7:2d:73:31:45:87:ba:92:61:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:ED:93:54:19:99:4D:57:4F:61:DB:95:DE:D3:5B:70:A2:35:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6rDtk1QZmU1XT2Hbld7TW3CiNcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:79:f6:27:38:d8:9b:5d:4d:96:5e:e1:8c:b2:10:cc:47:ef:
8f:fa:d3:b1:c3:8f:f4:65:90:a6:a8:45:58:2e:1c:c1:18:a7:
b6:98:df:ec:53:15:94:a2:52:41:21:74:9c:63:a9:a3:e1:60:
33:58:7b:77:64:9b:01:b5:55:01:de:2d:4a:f4:4f:4a:57:a2:
fe:e8:5d:f6:7f:12:ed:df:30:4a:b6:6e:60:a9:24:d0:b8:68:
21:e7:b4:42:e7:fd:c5:6d:af:8b:db:cf:a4:9c:61:1e:01:84:
6b:96:3b:8f:8c:35:90:a3:55:72:94:d3:cb:81:83:92:b9:1d:
f3:15:e4:42:d8:e6:b6:f1:79:60:ef:68:da:eb:73:d5:cd:56:
19:59:82:17:b6:a8:95:1d:94:f0:be:07:1d:a8:63:57:dd:8a:
ef:e1:ec:b0:bc:0d:2e:13:4f:1b:88:0f:e9:fb:07:0e:dc:5f:
4e:b6:28:5f:2e:d5:01:ad:31:02:a6:12:8a:ad:24:f8:ca:38:
4a:be:ad:58:69:74:f7:4c:2d:0b:39:cf:5c:22:0d:a4:58:42:
d3:61:f6:ec:43:d4:0c:0d:fa:c5:38:5f:d5:ce:54:21:6b:83:
52:cb:90:88:9f:db:9d:61:e5:1b:4c:3f:28:85:d2:ae:60:6c:
6a:c6:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org