Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C9KrsOHMvBsQUvOy7ltBGxDAGDA.roa
File: C9KrsOHMvBsQUvOy7ltBGxDAGDA.roa (raw, json)
Hash identifier: dL5Jv9T5eI/suZqbP/YPfuyL+Cp70KYHHgeHAONt+tE=
Subject key identifier: 0B:D2:AB:B0:E1:CC:BC:1B:10:52:F3:B2:EE:5B:41:1B:10:C0:18:30
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E2D318B4043ED9441AD6ADD6B809AB4F7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C9KrsOHMvBsQUvOy7ltBGxDAGDA.roa
Signing time: Mon 11 Mar 2024 11:06:45 +0000
ROA not before: Mon 11 Mar 2024 11:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210531
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:31:8b:40:43:ed:94:41:ad:6a:dd:6b:80:9a:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 11 11:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bd2abb0e1ccbc1b1052f3b2ee5b411b10c01830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:5e:aa:3d:85:00:56:6b:d7:6e:41:4d:c9:
0d:7b:6c:8f:15:a2:19:35:e2:c0:af:0f:f0:cc:29:
54:9f:59:f1:00:92:0d:f9:11:34:f5:42:45:f6:61:
e9:66:70:bb:96:a0:f2:c5:24:f3:84:7d:49:b8:c6:
b0:4c:a1:ba:26:85:41:35:b6:67:ee:33:49:91:f3:
8c:d8:ee:11:18:f4:6b:71:a6:96:d0:c7:ee:d0:7a:
dc:12:3f:76:c9:bc:6c:ce:45:3d:f9:9f:87:eb:11:
05:03:c4:bd:41:e9:54:82:cb:20:8a:48:5f:56:c1:
3e:03:70:20:11:af:05:fc:34:7f:a4:c3:2e:1d:ac:
b9:c6:53:ad:00:d2:3f:4e:4e:24:5e:e6:58:e3:76:
88:b4:72:33:33:bd:5b:58:2c:a3:bd:95:83:58:c2:
e8:8a:2e:15:5c:72:6a:bb:7a:ab:b4:6a:4c:12:4d:
3a:ee:0c:0b:c2:b8:24:64:94:1d:92:33:9c:66:51:
7b:ee:9b:30:09:af:2f:f5:f6:cc:fc:a6:d8:4e:27:
7c:8d:7a:c3:6a:b5:18:61:21:b9:60:d8:b8:19:f8:
bc:fe:be:96:76:5a:9c:38:d3:6c:39:5d:3a:e8:99:
0c:eb:26:a5:33:41:1e:a5:f7:8b:dd:90:3e:35:0b:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:AB:B0:E1:CC:BC:1B:10:52:F3:B2:EE:5B:41:1B:10:C0:18:30
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C9KrsOHMvBsQUvOy7ltBGxDAGDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:04:d8:3f:a6:84:be:8f:df:09:e3:9c:f7:b1:8c:0b:6a:34:
2d:2a:17:d9:32:b6:3e:dd:4b:0e:90:f0:3c:2a:0e:6b:fb:52:
d4:0e:34:29:a7:7d:f1:ec:01:83:e8:66:22:fd:9a:9d:ed:b5:
08:35:1f:82:fe:8d:f2:c3:65:f2:fc:9b:1f:43:bd:b4:ab:33:
22:ac:ce:8a:a9:fe:47:5b:37:d8:ed:9a:91:35:9f:f3:69:4f:
94:e7:15:72:26:0a:eb:24:e1:11:8f:47:d1:86:c6:bf:d7:3d:
94:30:ee:6a:e7:ed:63:68:cd:27:0c:71:56:ab:1f:14:5b:e6:
04:29:6d:2b:80:4a:4f:19:ff:ad:db:26:b9:f3:f8:13:86:5a:
1c:3a:a7:46:91:a9:1c:20:80:95:38:d4:bb:4b:5a:80:ed:d1:
d3:be:73:e7:71:37:80:82:29:64:d9:d4:f5:ed:9f:4b:39:c1:
a7:46:31:96:da:8c:84:6f:ba:03:bb:85:00:c7:fc:3f:0c:38:
f0:e1:c2:b7:0c:84:7a:f4:a0:01:72:83:f2:38:52:ad:1a:10:
57:c6:01:1e:e9:3e:69:da:45:c5:63:80:a7:44:e7:b6:a8:8a:
ad:67:c8:fa:43:39:86:b9:ec:bb:c0:c0:43:f4:e4:10:48:b5:
ad:74:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org