Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8oBiw4t2gnFoNLwYpapEC5P21NQ.roa
File: 8oBiw4t2gnFoNLwYpapEC5P21NQ.roa (raw, json)
Hash identifier: vflUBaxpftNDOTftbf60w841g6cwTMZoWuCDt0NGrvY=
Subject key identifier: F2:80:62:C3:8B:76:82:71:68:34:BC:18:A5:AA:44:0B:93:F6:D4:D4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A4644BFE68E6B331E670356433B4E18AA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8oBiw4t2gnFoNLwYpapEC5P21NQ.roa
Signing time: Wed 30 Aug 2023 11:47:05 +0000
ROA not before: Wed 30 Aug 2023 11:47:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.218.23.0/24 maxlen: 24
185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:44:bf:e6:8e:6b:33:1e:67:03:56:43:3b:4e:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 30 11:47:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28062c38b7682716834bc18a5aa440b93f6d4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:a1:28:aa:63:a5:e9:8e:cb:f7:de:89:ff:
14:3c:6e:21:ef:b9:3b:f6:c2:7f:89:2f:ba:3b:ad:
45:7d:81:ca:be:c0:b2:61:16:10:90:7d:eb:44:07:
af:fe:36:88:2b:e5:df:80:da:bb:fb:0f:8f:5f:06:
6a:60:3e:42:c7:5f:b0:f3:86:1f:c0:64:8c:38:cd:
8b:ce:94:cc:58:34:92:c4:ab:8d:d6:63:9a:0e:07:
c4:8a:cc:45:9c:28:f4:14:e4:04:ef:b6:1d:c8:23:
4b:0f:a9:50:e9:bf:e9:86:ab:f7:09:bb:e9:ad:15:
83:3c:2d:da:e2:70:fc:04:97:2f:77:29:e2:23:eb:
32:c9:1b:3e:ab:a0:15:4c:0a:f5:7e:e6:41:8c:9a:
bf:fa:c5:b9:0a:36:25:8a:df:55:a8:2b:f6:cc:3d:
19:96:48:8c:0b:ed:8a:27:d3:b8:30:7a:d0:49:60:
f1:9d:2f:5c:ca:d9:27:14:79:d0:c1:3b:71:b4:c0:
cc:af:ca:41:99:96:db:6e:5e:86:b8:8c:22:39:9d:
9c:c4:7b:d5:a3:4a:4e:f4:4d:83:18:df:76:e4:8f:
f3:61:ae:dd:af:1f:3a:19:3c:3f:f7:e7:be:61:90:
23:94:50:75:c8:38:f7:4e:06:fa:d4:66:dc:d7:35:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:62:C3:8B:76:82:71:68:34:BC:18:A5:AA:44:0B:93:F6:D4:D4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8oBiw4t2gnFoNLwYpapEC5P21NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.23.0/24
185.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6e:e5:82:22:ac:7c:0e:88:aa:d9:30:b8:d3:f7:68:3e:c1:
8b:a2:ad:58:d6:d4:13:cd:b0:26:28:b9:04:32:5c:6f:b0:a8:
14:07:d9:c5:ba:a5:89:52:9d:44:96:a3:a5:ea:68:36:7d:e4:
66:d7:b9:c7:17:93:88:20:00:f2:88:43:a3:74:5a:3d:fc:14:
13:22:79:34:6b:7e:b4:ab:06:19:e0:47:0a:27:09:ba:fc:82:
19:bb:eb:9f:31:53:ca:c3:ad:03:7e:f3:09:37:7c:f8:8f:36:
e8:c5:31:90:cb:a8:df:3d:24:0f:c9:c6:24:9d:ac:10:0e:d2:
70:bb:5b:d1:20:8d:d2:8f:6f:bf:59:15:31:eb:e6:33:88:9c:
de:bc:db:9f:4c:14:97:80:4f:7b:ba:94:1c:77:2c:69:38:83:
a0:84:a7:c8:73:98:9e:48:18:ee:19:96:3d:b5:3e:a9:c2:58:
1d:08:19:ce:9d:e6:27:a7:99:16:40:7f:f6:f2:a8:55:8e:3a:
67:7a:ba:3e:d3:cc:2e:7d:f0:27:08:05:e6:ed:13:80:cf:98:
f9:13:9d:06:c7:d3:84:4b:74:2e:9b:80:ec:b4:11:fc:0d:d1:
51:35:1d:ae:4a:4f:82:f5:0c:e8:73:c6:c3:34:58:31:a5:fb:
b5:d9:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org