Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B75nXOW_NvpYSrainSLk6fqWfI0.roa
File: B75nXOW_NvpYSrainSLk6fqWfI0.roa (raw, json)
Hash identifier: 5Se7vFrQCphb4HH6G97bzxpnOk9viOaChXHewkQGA8Y=
Subject key identifier: 07:BE:67:5C:E5:BF:36:FA:58:4A:B6:A2:9D:22:E4:E9:FA:96:7C:8D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018906BC6A9B08F5A698C3B44BA6D5719CAE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B75nXOW_NvpYSrainSLk6fqWfI0.roa
Signing time: Thu 29 Jun 2023 10:39:18 +0000
ROA not before: Thu 29 Jun 2023 10:39:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.240.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 12:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:bc:6a:9b:08:f5:a6:98:c3:b4:4b:a6:d5:71:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 29 10:39:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07be675ce5bf36fa584ab6a29d22e4e9fa967c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:28:c3:d3:c0:b3:44:a3:26:2b:bf:e4:f1:
d4:a8:f3:54:de:d0:54:86:73:88:e5:42:f4:a9:a3:
e2:36:2b:97:31:e3:ec:92:af:54:87:f0:72:37:70:
e2:44:1d:e8:58:24:eb:53:0c:00:a8:44:82:59:0c:
f8:d6:0e:dd:92:e3:31:a4:62:af:94:c3:31:a5:2d:
2c:9d:5a:7b:0d:66:bb:a1:aa:a9:15:eb:9e:8c:e0:
c7:5c:47:8f:a6:ee:d7:ba:d9:40:64:f3:12:9c:13:
91:c1:5b:3b:b0:e9:ff:23:2c:df:1f:90:ee:c6:bb:
e4:44:22:88:e0:58:27:69:77:53:8d:08:4b:c4:c4:
08:0e:7d:4d:e1:9c:81:8a:d0:80:d6:1f:d0:6d:8e:
9f:7f:80:f9:d8:e3:22:b5:59:41:f3:89:9e:9a:7e:
71:28:01:0b:31:52:05:29:fb:a3:cb:2b:cd:d5:0e:
4d:19:e8:d6:49:da:1e:7d:9f:a5:b9:e7:63:a9:0c:
a2:05:1e:20:0c:df:09:40:68:5f:3a:a8:31:95:b2:
4f:22:e1:b3:2a:0f:42:48:b2:0b:57:f3:a5:71:09:
1b:56:72:77:7b:9e:84:44:08:17:fe:15:1b:a1:23:
67:dc:be:2f:67:3a:59:b6:00:06:63:d9:a4:de:3e:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:67:5C:E5:BF:36:FA:58:4A:B6:A2:9D:22:E4:E9:FA:96:7C:8D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B75nXOW_NvpYSrainSLk6fqWfI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5f:c6:23:72:ea:3e:0c:41:59:d1:57:73:23:71:5b:98:c0:
c9:2a:ec:1c:64:67:f1:ff:10:d1:55:1d:f2:45:6e:3f:91:3a:
1c:83:e0:05:8d:76:88:ff:48:e4:5c:a8:ab:d6:4c:41:20:d6:
8c:a5:01:fc:60:20:f0:8a:e2:e9:95:3c:84:24:9e:c8:8c:4e:
62:22:06:9a:80:3a:6e:8e:5a:03:13:b3:22:14:02:85:8e:1a:
47:c6:43:0d:10:0e:56:56:cf:22:6c:21:c2:99:6c:e8:eb:26:
dd:7f:11:61:0d:97:1a:d3:c6:d6:90:19:d9:72:4e:24:a1:c3:
e4:6b:d2:9f:70:13:9c:91:75:7c:95:05:54:4a:a6:37:67:7a:
a8:57:fa:16:71:05:3d:43:f1:20:98:f1:56:08:cc:9b:70:6a:
42:d0:e2:f6:cc:e1:a3:60:c5:81:5c:0c:9e:76:5e:4a:14:e1:
da:4a:2b:d7:33:15:bb:b1:4b:80:c8:0a:5e:5c:38:dd:68:25:
85:d4:9c:f3:db:38:48:80:6d:7c:28:7c:b3:1a:7c:04:50:72:
53:c1:13:29:2c:f2:41:f6:18:1f:d3:52:47:8c:be:32:1d:52:
f9:61:eb:dc:0a:11:0a:b3:99:8e:01:84:4d:1a:fd:f2:10:cd:
01:d5:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org