Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8uxz80XQ9QobRQubUXE_mevaroM.roa
File: 8uxz80XQ9QobRQubUXE_mevaroM.roa (raw, json)
Hash identifier: r24e1wLHbhLFPKAbEsK1HOjozp5IsFumOKV/MLXosT8=
Subject key identifier: F2:EC:73:F3:45:D0:F5:0A:1B:45:0B:9B:51:71:3F:99:EB:DA:AE:83
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189F485FB2A01CE05F698D81EE98009E45B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8uxz80XQ9QobRQubUXE_mevaroM.roa
Signing time: Mon 14 Aug 2023 14:49:28 +0000
ROA not before: Mon 14 Aug 2023 14:49:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 185.209.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:85:fb:2a:01:ce:05:f6:98:d8:1e:e9:80:09:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 14 14:49:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2ec73f345d0f50a1b450b9b51713f99ebdaae83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:e2:4d:ef:36:79:f4:4c:1d:67:0a:6b:b0:
51:c7:27:3f:b8:1a:6e:38:18:c7:e6:cb:c9:b2:8a:
24:e3:5a:19:94:aa:4b:77:c7:46:c0:b1:10:c8:b2:
53:cd:ad:b0:09:b3:a0:51:5a:12:25:56:3e:b8:d6:
91:34:5e:12:ad:a9:9e:ae:1c:90:d5:2a:d8:96:74:
30:2f:9c:9b:54:ce:08:ec:d7:6e:20:fe:68:c7:f7:
57:8f:52:99:b0:2d:33:fd:30:62:93:cb:33:00:21:
c2:70:0e:6a:3c:91:dc:e8:86:b5:8e:24:07:c5:d8:
74:8e:78:45:aa:b9:f4:8b:68:99:d3:96:4c:b4:5e:
65:76:d0:28:ea:56:63:8f:c9:78:e4:ae:a1:67:cc:
cd:d2:27:d9:e2:f3:d6:45:13:ff:b0:a5:1e:cd:86:
10:bb:a3:91:4d:b7:10:04:ef:9a:d0:d4:06:7a:7e:
c1:90:8d:d3:65:da:11:fd:44:d0:da:c5:ea:21:9b:
49:84:b1:46:7e:d1:9f:93:ba:db:dc:87:a2:f9:c6:
d8:1c:85:1a:ee:ae:e5:c3:8d:d2:b8:75:2b:84:f9:
0c:21:cb:5b:d5:f3:11:e4:c4:d9:cd:95:df:0d:d5:
73:db:03:9c:0b:40:ca:29:9d:2d:9c:cd:7f:ee:4e:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:73:F3:45:D0:F5:0A:1B:45:0B:9B:51:71:3F:99:EB:DA:AE:83
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8uxz80XQ9QobRQubUXE_mevaroM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a9:19:4a:6f:e1:a4:03:d0:02:8b:4c:bb:09:8d:3e:ad:56:
1b:cf:bf:0a:d7:02:15:f5:8f:0b:4d:09:b8:ed:dd:5b:81:82:
fc:a9:d5:54:cc:31:97:c9:42:cc:a7:49:5b:b0:b2:9f:e9:b7:
b3:d6:b0:54:be:10:6a:4c:ac:74:76:22:1e:f4:70:33:25:00:
f4:55:4b:5b:4c:5a:29:78:b8:ae:68:6f:27:d0:c6:71:55:2c:
3a:ad:52:e2:87:e6:cd:3f:2a:1f:07:5a:4d:76:5a:21:c1:c2:
e8:d0:1e:23:f4:65:05:f4:a7:1c:7f:7a:78:fc:e6:19:78:a5:
a6:c9:a2:83:43:1c:5d:23:bd:ba:9f:4c:35:e0:3b:65:59:c6:
d8:d9:66:9e:2e:8c:f1:93:dc:18:23:d1:35:9d:80:af:2a:14:
15:3f:7c:f2:82:39:34:65:37:c6:9b:85:9e:c4:a5:5c:40:a6:
5e:13:eb:44:f9:12:be:fa:8b:77:89:7f:53:d2:7a:c6:77:2e:
56:14:09:34:78:9b:e4:95:79:ff:f7:b6:13:74:fe:1b:35:73:
d5:bb:50:a7:79:be:ba:36:f0:3d:2d:ab:9d:6e:cf:23:60:0b:
b5:ce:78:4d:94:b2:c7:21:a9:01:78:4f:e8:f9:15:74:0c:1a:
b1:d2:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org