Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FtQNohfnCIaI5DQVmBNzGYvaKj4.roa
File: FtQNohfnCIaI5DQVmBNzGYvaKj4.roa (raw, json)
Hash identifier: KJ1nztacTGgsADZuUPWunkEoucALoB4Qr69FnigtpIU=
Subject key identifier: 16:D4:0D:A2:17:E7:08:86:88:E4:34:15:98:13:73:19:8B:DA:2A:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188FC23B22098B74434EC9678C518410F1B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FtQNohfnCIaI5DQVmBNzGYvaKj4.roa
Signing time: Tue 27 Jun 2023 09:16:17 +0000
ROA not before: Tue 27 Jun 2023 09:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 14:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:23:b2:20:98:b7:44:34:ec:96:78:c5:18:41:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 27 09:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16d40da217e7088688e43415981373198bda2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:ad:63:8a:c0:cd:47:40:3b:ad:d0:ed:2e:
9d:93:7f:76:b8:db:e3:9b:fb:f6:e9:28:d3:45:25:
05:a7:ff:93:8f:75:41:2a:3c:7e:4f:a3:1c:d7:d0:
62:2d:a3:84:70:82:9c:8b:44:72:5b:14:fb:6c:00:
21:c9:50:f5:1c:06:96:9a:46:26:5c:70:b9:7e:9f:
51:2e:a2:a8:86:3d:14:70:b1:38:7a:3a:80:9d:17:
7e:0d:4e:be:e2:69:97:28:c5:91:83:05:85:83:75:
a1:ba:bb:de:6c:1f:c7:33:05:d7:bb:18:92:7d:4d:
24:62:b7:39:3d:b4:46:cd:ff:0f:e6:d1:bd:98:11:
74:0c:84:a9:95:74:e6:c5:eb:0d:2b:52:f7:cb:d3:
5d:05:2e:e0:d9:5b:fa:e2:55:d8:5c:5e:20:bc:d5:
ad:94:aa:bd:56:f1:91:3a:59:a4:0d:46:47:81:a4:
94:10:d3:38:8b:ca:81:f2:0f:5e:bd:97:84:ff:0e:
4b:fe:e9:62:ce:db:56:c6:eb:51:46:af:ee:4c:5b:
87:9e:f0:14:88:02:e7:3b:2a:c5:ba:80:37:65:03:
fe:13:73:43:43:b5:dd:d0:84:68:23:bb:8e:15:56:
12:46:1e:32:46:6a:e6:ff:7e:96:dc:5d:ed:bf:70:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D4:0D:A2:17:E7:08:86:88:E4:34:15:98:13:73:19:8B:DA:2A:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FtQNohfnCIaI5DQVmBNzGYvaKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
36:20:58:40:1e:bb:5c:b7:ec:75:1e:52:07:dc:06:b5:c8:be:
77:5c:31:bb:96:32:62:21:d8:bf:13:35:ae:b3:87:f9:00:94:
c7:51:df:20:b9:a3:a9:40:04:09:a1:e1:17:a6:91:94:5a:30:
83:6b:52:c2:8e:a4:37:9c:ee:76:67:e4:21:c7:f7:a6:6b:d4:
d6:ff:d9:83:c3:4d:a4:f9:23:8c:bb:7f:4f:db:a3:ea:c6:4a:
23:f7:26:9f:a4:7c:7a:22:bf:fe:35:b7:4d:d1:20:d0:58:a1:
5a:59:a2:09:71:e3:eb:4e:33:1d:56:12:ff:11:30:de:d4:d7:
cd:f6:67:dd:e9:d9:83:9e:7e:e7:53:21:df:8f:cd:4a:0d:e3:
0f:f2:61:cf:0e:0e:0d:38:c6:05:6d:85:71:11:5c:d6:81:f8:
b5:ad:ad:b1:17:dc:56:c6:bd:56:1b:a0:16:3f:2a:07:4c:18:
a7:c7:64:c9:19:ac:2f:f3:f4:8c:67:31:b3:5d:54:b2:61:60:
40:73:22:bc:87:13:8d:df:cd:87:47:31:a2:16:cb:68:6c:74:
b1:5c:2e:93:e6:b8:19:e4:3a:10:1a:a2:b9:04:86:cb:09:3b:
ec:cf:0c:71:d5:85:e9:ec:ae:cb:7d:08:14:bd:37:8d:8b:fc:
65:57:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org