Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AT7mtz1fuR09CcehL22WNjNri8M.roa
File: AT7mtz1fuR09CcehL22WNjNri8M.roa (raw, json)
Hash identifier: w+XEQLQNiiTgjRQghKzhGmJxpbH5/Mw4OHgmZj1FNxY=
Subject key identifier: 01:3E:E6:B7:3D:5F:B9:1D:3D:09:C7:A1:2F:6D:96:36:33:6B:8B:C3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B2E24A7BEB62CA09FB842C0E841A51C29
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AT7mtz1fuR09CcehL22WNjNri8M.roa
Signing time: Sat 14 Oct 2023 12:23:56 +0000
ROA not before: Sat 14 Oct 2023 12:23:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 185.223.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 16:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:24:a7:be:b6:2c:a0:9f:b8:42:c0:e8:41:a5:1c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 14 12:23:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=013ee6b73d5fb91d3d09c7a12f6d9636336b8bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:d8:04:80:33:bf:54:36:71:e6:fd:5b:cf:
27:7c:d7:a6:e6:d0:29:1b:1c:5f:2c:f8:12:22:07:
fa:2e:95:7d:68:b8:bc:ba:2b:be:dc:3c:08:6a:47:
d3:77:e2:7e:a2:6d:f6:6c:68:1e:93:7f:43:e8:f6:
95:0f:d6:0c:fb:80:58:0c:a8:95:25:f3:57:bc:a2:
70:4a:49:1e:d3:90:f3:27:dc:48:94:a2:96:5a:28:
1c:36:dc:b9:a3:58:12:c7:6e:2d:a0:58:bd:64:31:
6b:bb:ce:00:3a:15:1b:13:c0:fd:4a:4f:10:af:27:
51:b1:51:e6:e1:28:18:36:fe:97:da:cd:a6:54:e9:
f8:3c:35:c3:92:ea:f4:2e:98:ed:f7:d0:a4:fa:fa:
10:0d:6c:7d:04:82:81:eb:57:8f:98:26:fe:3a:de:
aa:8e:00:c5:93:ce:35:00:a7:ed:7b:94:3c:e9:7d:
a8:da:7c:4f:a5:98:02:b7:07:10:33:5d:0e:5d:5b:
42:87:e5:13:4b:86:30:c3:a8:ba:f5:a5:d6:36:a9:
c9:da:88:33:1a:25:42:30:03:55:99:69:94:2a:46:
2e:8a:2c:69:6a:ce:e4:e7:f1:2f:3b:03:10:65:40:
f1:7a:68:11:45:ae:72:0a:03:d7:15:16:36:df:f5:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:E6:B7:3D:5F:B9:1D:3D:09:C7:A1:2F:6D:96:36:33:6B:8B:C3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AT7mtz1fuR09CcehL22WNjNri8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a2:5b:74:81:31:f1:a9:a8:84:c1:a2:87:35:5b:85:25:39:
fe:ab:1f:e3:c1:95:14:15:a6:3c:bd:b6:88:8c:74:c1:9d:2c:
1f:38:bb:1d:0d:0b:37:98:61:95:2e:11:2c:7a:86:54:d1:fb:
c4:2c:be:84:2e:6b:df:66:7d:59:f3:73:5e:a7:76:13:8b:60:
e3:a1:6d:ab:b0:6f:30:97:3a:73:7c:c7:9c:4b:d4:92:38:a5:
09:da:bf:b4:e4:ea:3f:c5:6f:30:a3:8a:4d:d4:06:fe:87:68:
ad:a5:c2:60:16:63:9b:1c:9e:dd:d1:45:d9:34:3b:d1:33:f8:
6a:9c:86:25:6d:6c:88:20:8b:9b:cd:23:8b:9f:e5:41:60:b0:
4f:d0:9a:5f:6e:73:f4:4f:60:61:ff:44:20:fd:27:9a:1a:ce:
bd:1d:06:6d:42:6b:01:0b:39:a5:bc:eb:e6:14:9a:43:04:48:
d8:c7:ad:3b:b4:a9:5e:d8:80:23:29:31:18:30:94:1f:4e:29:
ba:c3:14:ba:6c:67:6a:7a:62:d4:48:f1:7d:63:df:b4:6e:9a:
9f:25:61:36:9e:23:00:c6:34:d3:a5:28:53:fb:e1:e0:ef:85:
b9:33:29:97:a6:30:7c:db:bc:14:39:6d:f9:af:8a:85:a2:44:
9f:d5:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org