Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DLc1D7tS_-i7FoX7OWVqyp5GplI.roa
File: DLc1D7tS_-i7FoX7OWVqyp5GplI.roa (raw, json)
Hash identifier: B/xqtWRyzKlNYs4jJprAMqAEA9g8D5xXmVlJPZ/FRGs=
Subject key identifier: 0C:B7:35:0F:BB:52:FF:E8:BB:16:85:FB:39:65:6A:CA:9E:46:A6:52
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63DF398F46E50B47DC66E3DB89C38
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DLc1D7tS_-i7FoX7OWVqyp5GplI.roa
Signing time: Mon 02 Jan 2023 09:00:46 +0000
ROA not before: Mon 02 Jan 2023 09:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205361
IP address blocks: 185.225.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 09:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:3d:f3:98:f4:6e:50:b4:7d:c6:6e:3d:b8:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb7350fbb52ffe8bb1685fb39656aca9e46a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:a1:e8:73:ab:f6:bc:d1:95:5c:3b:bf:65:
b9:a9:93:27:6b:cb:11:de:1d:a7:9c:00:75:0a:6a:
d9:ae:1c:27:a5:8a:43:39:ff:0a:6d:09:0c:37:4d:
56:41:a0:d5:4a:20:91:8b:24:9f:b3:50:45:04:fd:
c2:73:35:71:95:da:39:64:fc:11:07:6b:8e:17:df:
ae:15:55:a0:76:47:51:d5:d3:a6:67:f8:dd:19:ae:
0e:b9:27:3b:c5:99:c4:08:71:54:82:0f:bd:b6:53:
3c:92:60:3c:77:15:81:0e:52:ba:43:fa:66:e9:35:
9e:3d:c0:69:82:7f:c6:44:c1:e3:ab:8c:8b:0b:0c:
7a:f7:fc:81:80:ca:90:2c:c7:d6:7d:3f:03:5c:01:
39:21:70:87:26:dd:61:54:45:34:12:bf:90:05:ee:
55:81:eb:b1:bb:84:37:b7:4d:01:06:61:64:f2:4b:
af:57:df:f3:0c:40:c7:bb:89:9c:2f:af:8a:02:17:
c9:e8:60:58:e2:49:27:c6:df:08:65:36:5e:29:58:
5a:17:1d:e8:92:97:3f:73:63:61:f5:73:02:dd:6c:
45:fa:d0:68:b9:c2:b6:81:de:38:cb:5e:c0:e4:2f:
0a:93:ca:06:80:a6:2d:8c:87:9f:a1:75:61:ae:3c:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B7:35:0F:BB:52:FF:E8:BB:16:85:FB:39:65:6A:CA:9E:46:A6:52
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DLc1D7tS_-i7FoX7OWVqyp5GplI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
62:cc:22:fe:43:cf:71:8c:e6:74:25:30:29:0f:b9:87:fe:75:
06:6e:c3:7f:b0:39:4f:2f:b3:b7:3d:2c:6f:da:83:e0:ea:3e:
8d:7c:d1:53:04:68:4d:02:17:0c:83:72:4a:2d:b3:41:8c:2e:
e2:ca:ae:4d:82:a3:bc:96:30:0f:ed:36:a6:d3:f6:4f:bf:72:
2c:75:b3:74:c8:7d:3a:d0:a9:0c:d4:1f:61:78:e3:80:10:60:
1f:1b:0c:4a:dc:94:08:32:b1:54:3e:7c:76:9d:28:0e:95:fd:
33:ba:54:d8:f0:b7:f2:0f:99:6b:c2:2b:6b:45:fd:f7:69:6a:
9c:d7:34:82:27:10:bf:d7:cd:85:c3:9d:3d:8a:30:ab:21:d0:
95:7d:c7:44:aa:a3:7c:90:1f:2a:ea:d2:6a:bc:4d:96:cf:2c:
63:8e:e4:f0:7b:20:35:ae:97:e2:85:82:9c:34:b8:ba:39:e7:
dc:e3:42:66:51:d9:0b:bc:ce:d8:e8:38:3d:26:23:32:81:71:
c0:ff:91:4d:8f:a6:5f:4b:bc:df:3b:34:39:ed:91:8a:14:8b:
0a:c3:d7:d7:51:8b:1f:ea:ac:e7:af:63:4c:df:16:d6:3a:07:
95:78:7f:38:85:9e:1d:0a:2f:fc:03:17:a8:ee:be:0a:f1:7a:
c7:20:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org