Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8bbQR48aq3cO-ilv3Kkgi29q-8o.roa
File: 8bbQR48aq3cO-ilv3Kkgi29q-8o.roa (raw, json)
Hash identifier: FMWXNOGU4hy7vNdRLxYF1pQQXR5WBH3lV6Ozsoag1Cc=
Subject key identifier: F1:B6:D0:47:8F:1A:AB:77:0E:FA:29:6F:DC:A9:20:8B:6F:6A:FB:CA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62F28D42BA6FBE0927B994FE848B2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8bbQR48aq3cO-ilv3Kkgi29q-8o.roa
Signing time: Mon 02 Jan 2023 09:00:43 +0000
ROA not before: Mon 02 Jan 2023 09:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29538
IP address blocks: 185.234.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2f:28:d4:2b:a6:fb:e0:92:7b:99:4f:e8:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1b6d0478f1aab770efa296fdca9208b6f6afbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:72:56:43:f1:79:d4:ef:08:c1:7b:7c:e5:
70:71:3d:96:79:60:39:68:44:16:cd:c3:b9:79:31:
28:4c:e3:74:12:e6:66:cc:0a:74:96:7a:b0:2b:cc:
f9:f4:49:45:aa:ea:9a:ed:18:7a:af:9f:1b:93:f8:
ce:fd:e7:df:e2:6b:64:ab:cf:39:cc:7f:f2:19:18:
3e:48:7b:64:e3:05:a8:d4:41:d6:a2:d7:7f:2b:be:
2a:b2:d0:87:54:5c:46:b0:4f:4b:e2:4e:59:da:18:
4b:b3:8e:51:6c:d9:17:5d:b8:1c:bd:64:81:64:92:
db:4f:ea:76:f9:f9:7a:14:01:31:62:a1:01:b0:55:
32:0f:ac:e5:f9:b0:cd:67:a3:98:d2:11:98:5d:9a:
48:14:82:f1:fa:ee:0f:7d:23:37:f2:dc:8f:9f:5e:
11:69:a3:80:ee:74:c9:f4:bb:23:c6:4e:0a:47:e2:
6e:10:d6:99:ae:64:b6:5b:32:e4:bb:30:fa:8b:74:
c8:6a:20:b0:c9:dc:68:c1:6a:36:5a:8f:42:7e:41:
f4:26:da:d5:eb:dc:74:07:25:db:54:96:ab:3a:11:
63:e6:72:6e:89:f7:ad:23:7d:d9:1d:9e:a3:77:be:
af:e9:3e:4d:31:f5:36:3e:1a:e6:26:86:ba:19:6b:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:D0:47:8F:1A:AB:77:0E:FA:29:6F:DC:A9:20:8B:6F:6A:FB:CA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8bbQR48aq3cO-ilv3Kkgi29q-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
74:48:61:40:e1:03:5e:bc:bf:bf:ce:52:74:65:41:02:52:d0:
de:cc:20:ad:e4:c1:be:8c:38:d1:53:3d:f2:57:11:8b:cb:39:
ea:4b:58:e9:2f:e3:14:f8:8c:ca:eb:df:1d:e1:01:12:08:9e:
7b:69:dd:dc:13:8b:1d:eb:19:26:b3:32:1a:cf:42:67:58:62:
43:9b:38:9b:11:c1:8e:a3:bb:83:b0:63:72:8f:22:4b:ce:6f:
74:0a:64:20:4f:cb:d7:ac:7f:08:f4:e0:ef:3c:de:be:72:85:
c0:f7:a8:7a:09:1d:6f:b1:3a:a4:2c:5a:81:3c:eb:b4:eb:fd:
f4:33:23:3f:1a:64:c2:5f:1c:4f:b5:ab:db:f4:f2:e1:5e:5b:
57:5f:7d:1a:ed:b3:af:f8:da:3c:86:83:4a:af:f8:71:8c:4a:
60:13:fb:da:38:14:69:d1:62:d7:6c:c4:b8:fe:40:16:74:4b:
19:72:29:74:e9:84:6a:42:04:9b:5a:1b:af:cb:37:88:a8:ef:
c2:85:0a:2b:06:23:f7:13:22:89:2e:0a:c3:6e:e8:0f:38:93:
92:2a:fd:01:25:be:ce:33:11:94:d7:3e:21:36:05:3e:17:5c:
0e:b5:a8:cd:f5:e2:a5:a5:dc:2b:3f:7c:08:d2:ed:c9:d2:e3:
ec:bd:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org