Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EGcplGOgH9vq4A4ioYfsxaabf2w.roa
File: EGcplGOgH9vq4A4ioYfsxaabf2w.roa (raw, json)
Hash identifier: ptTwVgkRToP3L2+ZmOp5seuaiC1UCcvScqnhq5wMBos=
Subject key identifier: 10:67:29:94:63:A0:1F:DB:EA:E0:0E:22:A1:87:EC:C5:A6:9B:7F:6C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A476522AA978178CA330815808CC02581
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EGcplGOgH9vq4A4ioYfsxaabf2w.roa
Signing time: Wed 30 Aug 2023 17:02:04 +0000
ROA not before: Wed 30 Aug 2023 17:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 185.209.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:65:22:aa:97:81:78:ca:33:08:15:80:8c:c0:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 30 17:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1067299463a01fdbeae00e22a187ecc5a69b7f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:ca:ab:8e:09:af:e7:2d:d7:c3:49:84:ea:
86:ee:84:d1:06:9e:ef:e4:db:c2:3a:e1:44:e3:48:
af:b2:43:25:56:6c:9e:ef:99:db:a5:3e:2e:39:2e:
3d:4b:69:c9:53:9f:a5:5e:37:05:10:ad:8b:55:fd:
99:8b:27:49:05:bc:a7:fd:ec:c0:01:95:be:be:d1:
db:97:f5:e5:66:19:57:4e:fd:d8:14:2b:fd:19:93:
8f:2f:d4:a4:7e:60:97:24:24:16:dc:6c:d8:fd:90:
b1:c0:aa:34:00:ad:a7:97:89:68:88:40:70:a9:d3:
a1:bb:a1:88:90:dc:c0:ac:e9:db:a5:4f:86:14:72:
1b:74:22:a1:54:ff:fd:6c:00:09:35:86:dc:93:48:
84:76:8a:1a:da:4f:88:fd:af:2c:d8:23:b8:90:82:
2a:78:9f:89:ae:36:5e:1f:8f:0b:d0:c2:bb:bf:d3:
3e:ef:76:73:a2:37:3c:8d:c3:f7:34:32:5b:69:48:
2f:39:8d:45:18:d6:08:e7:1f:f3:0a:14:54:f3:20:
fa:81:40:55:e9:9b:15:ae:d8:ef:77:e2:2f:6f:15:
2b:f7:aa:e9:b6:b4:b8:2f:bf:14:30:6e:23:7f:8b:
b8:92:6b:80:93:5e:c7:16:da:69:23:e5:a1:42:3e:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:29:94:63:A0:1F:DB:EA:E0:0E:22:A1:87:EC:C5:A6:9B:7F:6C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EGcplGOgH9vq4A4ioYfsxaabf2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f0:3b:ba:f5:82:7d:8d:6b:bd:f2:d1:d8:c7:06:f0:06:05:
59:87:6d:2a:63:99:80:51:02:cf:ba:31:92:81:ea:cc:14:4d:
ed:f8:3d:19:7c:9f:6a:5e:bf:ab:36:5b:bd:10:82:63:f4:c1:
2f:10:27:41:48:2c:a7:df:f7:34:ed:91:f3:39:a9:34:2c:d5:
0a:f7:a1:ba:87:ef:ce:ee:75:e1:c4:a2:67:0d:fa:09:c7:9e:
a9:7c:32:56:2d:2d:56:87:f2:84:6a:9c:4a:75:b7:bd:cc:88:
58:fb:9a:55:7b:7f:a8:4b:c4:31:42:5f:30:34:f2:82:ce:9d:
28:e8:76:e5:7d:c1:37:e3:8a:6f:9f:11:3a:a0:a0:a8:47:cc:
a0:1b:6a:eb:73:44:55:d5:47:c8:ed:cb:7f:f5:27:5e:2d:f4:
5f:97:50:35:30:74:09:73:8f:28:1c:4f:b3:5a:38:7b:27:4e:
02:bd:a7:89:ef:e6:84:85:66:fd:73:b0:01:93:cf:9f:0a:93:
0d:97:17:54:05:b8:2c:8d:b0:88:d3:b1:4c:ee:b8:e7:59:61:
c7:62:2e:25:5e:96:6f:f1:6e:00:1a:6c:6d:6d:4e:c8:b5:c3:
0b:21:fe:45:c3:d0:9b:37:0f:0a:b5:23:19:d8:cd:e8:cb:33:
77:ac:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org