Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FlwMBsih0hjUi0BYSyyDSeWsIXk.roa
File: FlwMBsih0hjUi0BYSyyDSeWsIXk.roa (raw, json)
Hash identifier: pop/Vj+Zw2/H7I/61l/mFHdwZQ6J4Tysbd+9RbMK4dY=
Subject key identifier: 16:5C:0C:06:C8:A1:D2:18:D4:8B:40:58:4B:2C:83:49:E5:AC:21:79
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189442CC59E81C461AC81F0EEADA5A80D55
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FlwMBsih0hjUi0BYSyyDSeWsIXk.roa
Signing time: Tue 11 Jul 2023 08:58:52 +0000
ROA not before: Tue 11 Jul 2023 08:58:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 185.214.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jul 2023 08:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:2c:c5:9e:81:c4:61:ac:81:f0:ee:ad:a5:a8:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 11 08:58:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=165c0c06c8a1d218d48b40584b2c8349e5ac2179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:db:af:1e:d5:d8:55:2e:d8:8b:b7:64:66:
94:a0:1a:b7:8e:bb:98:7a:45:20:3f:3e:65:db:9d:
52:46:6e:e2:a6:1a:a2:5a:9d:c1:18:24:d2:ee:c6:
47:66:cd:27:50:ea:32:00:50:3b:bd:1e:7e:af:0f:
9a:db:2b:cc:4f:96:ec:e8:af:13:c0:ad:b4:18:51:
04:45:c3:17:8f:72:50:bd:84:1b:f6:61:2f:ef:5c:
b7:19:60:7e:4d:4f:61:cd:68:40:02:7d:00:d9:89:
c9:c2:0c:9a:29:28:a9:53:2d:3e:53:1b:de:79:57:
a6:d7:b6:42:f7:30:f7:21:49:6f:9c:13:f7:95:48:
ad:cf:e3:16:02:45:68:9c:1b:f7:63:27:05:e4:5f:
ff:2f:a0:0a:0a:e7:f7:5a:5c:59:27:e9:f6:46:ca:
87:d3:3a:01:d5:b5:1c:63:98:d5:e2:bb:79:6c:e3:
b4:55:2b:b7:ca:1f:b2:87:e2:c2:06:d6:51:13:77:
2b:b4:75:82:9d:fc:af:5d:26:46:68:d8:7b:ee:e1:
42:8a:b1:ca:b2:8c:bb:d9:fc:1f:7b:70:f3:87:8c:
20:6d:90:49:ff:b8:66:86:d6:f0:9a:b9:7d:e7:00:
5f:df:59:bd:c7:73:af:ec:08:5f:1a:bd:55:8e:c9:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:0C:06:C8:A1:D2:18:D4:8B:40:58:4B:2C:83:49:E5:AC:21:79
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FlwMBsih0hjUi0BYSyyDSeWsIXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b7:ab:89:e1:45:97:e3:a8:de:71:e0:2c:08:ac:18:11:71:
75:8a:86:6e:f2:8f:d4:cc:f5:d9:2c:f3:5d:4a:49:99:d1:ac:
20:a8:8c:06:fe:7c:32:cb:04:76:4a:95:49:43:de:fb:43:d7:
22:07:92:13:82:a6:75:93:2f:83:42:a3:8a:51:69:af:8e:3d:
c1:ef:90:9b:9d:08:3f:94:c7:67:fb:49:21:c8:9e:bd:39:b2:
86:69:39:6d:51:46:e6:ae:d1:71:c6:0c:aa:55:96:ad:ef:ce:
34:59:57:09:22:85:c3:f1:ac:1f:69:7d:06:30:c0:4a:75:ac:
c4:43:39:42:06:f5:7e:68:ed:4e:de:84:f9:45:6b:2d:c0:2b:
23:26:81:25:ff:76:da:e3:44:32:66:88:bd:c4:b1:86:7a:0f:
3c:f4:e1:f8:ce:65:a2:fa:82:de:c4:38:1b:e2:8b:b4:7b:a6:
bf:3b:a9:76:95:d5:37:da:15:f8:1e:85:5f:d8:c5:56:50:88:
99:16:0b:df:91:0a:90:52:d2:3d:fa:c7:3d:e6:1b:00:2a:14:
ef:ba:b2:94:db:95:37:75:29:3b:0f:48:c9:da:01:f7:26:17:
02:7f:4c:eb:6d:5c:5d:9c:dc:af:b9:3e:3f:f3:cd:12:20:b2:
2b:7c:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org