Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7XHz0AZz_jzdz5dOacO6jDZ3hjQ.roa
File: 7XHz0AZz_jzdz5dOacO6jDZ3hjQ.roa (raw, json)
Hash identifier: Jb54ihIwe6x0YymOEAodpJcpAuytt2oRXmN7ybvafCs=
Subject key identifier: ED:71:F3:D0:06:73:FE:3C:DD:CF:97:4E:69:C3:BA:8C:36:77:86:34
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B651E83782D3B0F8984BBAD6E4B9F9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7XHz0AZz_jzdz5dOacO6jDZ3hjQ.roa
Signing time: Mon 02 Jan 2023 09:00:51 +0000
ROA not before: Mon 02 Jan 2023 09:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 185.234.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 14:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:51:e8:37:82:d3:b0:f8:98:4b:ba:d6:e4:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed71f3d00673fe3cddcf974e69c3ba8c36778634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:51:78:84:26:5a:17:96:dc:f7:8c:17:8a:
ab:9c:4f:24:6f:e9:39:33:45:57:9a:e0:7c:a0:db:
65:38:6b:77:dd:d6:5b:6c:df:69:4b:11:71:5b:ca:
87:7d:08:26:dd:eb:ad:9c:18:d9:25:67:d2:2a:96:
23:44:69:1f:10:b4:a3:76:85:d0:5b:7e:75:18:15:
5a:90:a6:f4:45:75:0d:98:df:83:63:40:55:cc:e8:
a7:e4:71:68:31:25:11:ad:eb:63:6d:f4:80:13:ca:
a6:d5:dd:21:3c:b7:fd:95:56:4c:7a:00:18:de:81:
46:9d:86:c3:d6:05:c2:ce:70:07:77:57:1f:49:52:
ad:60:47:24:10:8b:98:98:5e:ff:ff:a5:8b:fc:79:
65:fe:90:80:8d:76:27:50:c9:e8:00:a7:49:ed:84:
fe:a7:b6:a9:96:e6:19:f0:60:de:95:89:b8:2c:c9:
82:9b:ba:1e:23:36:4f:b5:f4:c1:5b:e3:7d:d0:e1:
95:1f:28:03:3a:a2:36:a6:d6:ec:9d:2b:28:3b:7d:
bc:9f:75:ba:a2:34:81:b0:28:c5:fd:00:df:9b:9d:
6f:e5:d0:cd:f0:4c:19:f7:57:90:e8:3f:f6:ef:f5:
86:40:15:d3:43:06:f2:5f:78:3d:e9:17:33:18:3d:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:F3:D0:06:73:FE:3C:DD:CF:97:4E:69:C3:BA:8C:36:77:86:34
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7XHz0AZz_jzdz5dOacO6jDZ3hjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8a:d2:96:2d:58:46:dc:e0:33:a5:ae:6c:d8:ba:ae:ea:04:
d0:ec:8b:37:7a:87:6d:14:f3:8a:af:9d:34:f2:1a:ee:4b:08:
21:7f:ee:fa:e3:f1:63:d3:d3:6f:d6:4c:b9:dd:5d:8d:b6:ee:
fa:c2:60:4a:e1:81:11:a9:50:17:af:31:4f:12:2f:f2:b0:fb:
9b:ec:99:de:a1:16:de:c2:05:9d:db:34:c7:71:98:2a:d9:41:
92:6b:8a:82:5b:92:56:05:2c:12:b8:8a:aa:33:28:d0:2e:cc:
6a:7b:1f:8a:d7:12:e2:f8:b5:e0:22:6b:e6:ad:69:fc:23:e7:
cd:8e:0e:da:2c:b0:e5:50:a0:2f:c9:03:55:f9:49:11:6f:e8:
0f:0d:01:d6:ba:82:d9:9e:af:58:95:50:71:f7:df:22:5e:f5:
b2:6a:b9:2d:67:26:0c:b4:18:c8:3f:8c:eb:31:b4:0a:16:12:
f6:bd:5c:ee:c6:80:70:7a:09:89:4b:c3:4d:40:47:83:88:d8:
b2:8b:8e:f4:bb:20:aa:b8:66:71:cf:22:67:c0:45:41:02:ed:
b2:72:f3:83:ef:13:cc:6c:4e:a7:58:5d:15:32:8a:ae:e4:95:
13:18:f8:ef:96:2d:6a:be:70:62:bf:d1:97:41:bd:74:10:ff:
03:02:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org