Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BctWYU0Z2GnI7rk1dK6ucXveX7E.roa
File: BctWYU0Z2GnI7rk1dK6ucXveX7E.roa (raw, json)
Hash identifier: yqGiQHflVAC2jVKdj5P/chzy2pgnordo4amorKaRpjo=
Subject key identifier: 05:CB:56:61:4D:19:D8:69:C8:EE:B9:35:74:AE:AE:71:7B:DE:5F:B1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01857C545F35323AF91ABD93F033263F9CE3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BctWYU0Z2GnI7rk1dK6ucXveX7E.roa
Signing time: Wed 04 Jan 2023 10:29:42 +0000
ROA not before: Wed 04 Jan 2023 10:29:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 185.194.29.0/24 maxlen: 24
185.126.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 13:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:54:5f:35:32:3a:f9:1a:bd:93:f0:33:26:3f:9c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 4 10:29:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05cb56614d19d869c8eeb93574aeae717bde5fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:b8:ba:be:07:a8:db:3c:c8:77:c8:58:dd:
e1:5b:ce:34:df:2e:5d:21:b1:0d:6e:79:38:81:58:
59:18:a1:d7:56:da:f2:4b:43:03:19:b8:e3:43:ae:
ee:61:af:9f:7c:46:28:38:e1:c3:63:fc:46:f8:c1:
aa:98:28:d6:55:4e:53:8a:ed:4a:ed:56:7e:5a:cf:
8d:48:47:c3:19:a9:07:f7:ea:b1:ef:b4:f6:35:3b:
71:29:14:8e:f9:c2:78:e3:2c:9c:41:91:2a:cf:1d:
4c:96:76:ec:76:88:d0:5b:4d:a6:91:55:fa:88:6f:
66:12:29:fc:d7:b5:ae:8b:cf:fb:63:ca:85:8f:d8:
ea:87:74:a4:92:31:3b:52:22:f1:ca:de:f7:67:2f:
98:8b:d6:4a:c6:a7:21:98:49:c5:8e:6f:8f:3b:e1:
3d:67:9d:3e:41:ff:fa:86:f6:11:2f:5a:67:6d:46:
9a:0b:ba:be:92:82:69:38:dd:e4:b2:b5:49:79:6b:
25:0e:57:b9:d0:7a:42:4e:7c:ac:57:b6:07:01:c8:
5b:c7:33:b4:da:95:9a:a3:12:1f:1e:d7:92:32:e9:
a7:34:ec:bd:6b:e3:47:fc:bd:58:60:be:1e:92:ae:
ea:f8:7d:79:1b:31:1c:80:8d:1e:61:9c:fb:b9:4d:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:56:61:4D:19:D8:69:C8:EE:B9:35:74:AE:AE:71:7B:DE:5F:B1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BctWYU0Z2GnI7rk1dK6ucXveX7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.81.0/24
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
85:34:34:f1:a1:21:4b:bf:73:a2:aa:91:2f:ff:05:77:15:09:
b5:30:f8:5a:18:ac:96:4f:a1:9c:15:9a:ee:83:5d:87:b7:80:
ca:12:42:e1:47:2e:a1:f0:90:06:5b:7d:cc:4e:d1:a3:4c:8b:
78:5c:8f:95:88:d5:7c:81:87:c8:15:b7:ea:14:98:ec:e8:ba:
3d:aa:e0:f8:7e:41:a8:1d:c7:27:5a:5f:6f:89:9b:e1:02:9d:
f9:af:07:23:22:30:fa:c2:39:5e:79:23:66:4d:12:6d:4b:82:
5a:ee:b4:af:bc:3e:86:e3:fd:22:3c:d8:b9:3e:fb:5f:63:b5:
d0:b0:59:0f:74:98:0a:bd:85:75:1f:9c:a0:0f:a9:b4:b3:f5:
72:e8:e4:e6:e6:aa:84:3b:45:da:2b:4a:32:59:61:64:6a:41:
b5:3d:94:13:5e:76:5d:49:99:d2:de:40:ce:99:c5:30:ca:fc:
2b:c7:26:74:02:8e:60:d7:18:84:2d:36:d1:e2:ff:30:3b:7f:
61:c8:6b:09:47:4a:40:0a:4e:4f:99:9b:99:94:64:3e:0e:5d:
96:a4:20:59:94:d2:26:af:20:5c:53:06:f0:1d:c9:6d:01:4b:
3a:69:33:18:5e:ea:80:e1:69:e5:04:e3:09:1f:db:0d:5f:4d:
a4:b8:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org