Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B_2oV9mjJK6zdaKN9_55unjUYfQ.roa
File: B_2oV9mjJK6zdaKN9_55unjUYfQ.roa (raw, json)
Hash identifier: OFKHOPUXdUoIPShbW4+BvbFv5vDcgqs4ft6juRBWYOs=
Subject key identifier: 07:FD:A8:57:D9:A3:24:AE:B3:75:A2:8D:F7:FE:79:BA:78:D4:61:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188AF2C7F9F82F90BCC6063BE17C1851B71
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B_2oV9mjJK6zdaKN9_55unjUYfQ.roa
Signing time: Mon 12 Jun 2023 10:35:09 +0000
ROA not before: Mon 12 Jun 2023 10:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.240.122.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 10:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:2c:7f:9f:82:f9:0b:cc:60:63:be:17:c1:85:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 12 10:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07fda857d9a324aeb375a28df7fe79ba78d461f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:cb:73:68:f8:16:db:94:d0:bb:4b:8f:26:
61:24:7a:82:a8:e3:8f:50:11:7c:80:c4:cd:ae:26:
05:d0:8e:5e:7d:ec:30:bc:d8:52:6a:20:bc:5e:b5:
41:41:f3:b1:fe:6a:ec:ee:f4:60:50:fe:d0:4a:33:
b1:ed:a5:53:fe:fa:18:69:96:8d:33:f3:2d:75:d5:
c1:34:7f:82:b0:51:09:74:ea:d5:ac:ce:a0:65:2e:
8c:4f:a1:3f:d1:33:85:52:1b:c2:f6:31:e6:87:d3:
16:1a:bd:5d:69:63:4d:17:6f:92:45:8b:6e:ec:34:
61:49:dc:75:cd:b4:52:0e:bf:94:91:58:5f:8c:c8:
64:62:3b:68:6c:30:1b:3d:04:cc:02:a9:65:90:5c:
8f:0b:6a:a0:2b:df:22:f1:3d:cc:5b:14:b1:7f:d2:
25:19:f2:d8:6e:cc:c7:39:5c:67:3d:32:bd:bd:5c:
25:7e:81:6e:2f:bd:cb:a6:82:2a:4a:7b:0d:f6:35:
06:ee:f2:73:73:93:55:7d:c3:cb:2d:0c:12:71:bf:
95:69:8e:36:43:23:c1:27:09:3b:c4:3a:9d:2e:b7:
cd:98:86:2e:df:47:59:18:13:64:22:38:3c:0b:13:
f4:9f:2d:4b:ee:50:aa:62:04:69:97:81:e0:1c:a0:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:A8:57:D9:A3:24:AE:B3:75:A2:8D:F7:FE:79:BA:78:D4:61:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/B_2oV9mjJK6zdaKN9_55unjUYfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e8:29:a7:85:30:55:55:2b:30:95:57:0f:7c:67:4e:c1:ff:
e2:82:36:38:b9:37:a7:c0:15:d0:2f:91:31:ee:7e:4c:ec:f3:
fc:83:f9:e7:04:0b:ce:1c:4a:bb:1f:a4:3c:52:d0:1f:16:c7:
24:a7:33:19:ad:40:72:81:71:9e:c7:7a:af:03:c4:f5:ee:b3:
dc:ee:23:74:7d:00:6a:1e:d3:17:5e:90:9c:23:b7:2e:02:f5:
45:c0:f5:28:69:db:c6:38:2a:99:2b:20:78:14:ea:ae:27:74:
2c:d9:cf:3f:b1:b2:73:a2:90:79:51:9b:12:3d:92:a0:20:af:
4c:8b:a1:87:d7:c0:ee:5f:52:e2:dc:4d:38:f0:a1:40:04:4e:
68:09:8c:24:d7:66:cf:cd:65:f9:ff:91:ba:c3:46:f3:26:c8:
16:13:dd:4a:b3:34:28:ed:f9:0f:e7:7e:5b:ec:4f:4a:b5:71:
c1:3e:c0:ba:cf:27:a4:0a:7f:98:60:1d:3a:4d:7d:29:2b:62:
f4:9a:55:e8:e5:14:13:f8:9e:4f:53:46:5e:47:86:3c:3f:e2:
00:e6:bf:ba:a3:e2:81:bf:a7:05:f5:97:2c:e2:c9:28:0d:9d:
af:18:5e:7e:57:97:08:8d:4c:ea:33:57:ec:8f:87:2f:61:91:
3b:d2:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org