Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/G8Nzz2OFDZDH1HMeSQpeMDmPtkI.roa
File: G8Nzz2OFDZDH1HMeSQpeMDmPtkI.roa (raw, json)
Hash identifier: wc3qGISGs41qAunDcQJDm6j/wM3SiJZn4o/hgEw6M7A=
Subject key identifier: 1B:C3:73:CF:63:85:0D:90:C7:D4:73:1E:49:0A:5E:30:39:8F:B6:42
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189161E18A97A546CD44D3768102E3BD7CB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/G8Nzz2OFDZDH1HMeSQpeMDmPtkI.roa
Signing time: Sun 02 Jul 2023 10:20:18 +0000
ROA not before: Sun 02 Jul 2023 10:20:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 185.210.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:16:1e:18:a9:7a:54:6c:d4:4d:37:68:10:2e:3b:d7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 2 10:20:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc373cf63850d90c7d4731e490a5e30398fb642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:51:e4:11:e0:52:69:12:ea:2c:d1:02:77:
69:11:ac:2d:8f:b7:b0:35:55:87:ee:87:5e:31:a4:
77:67:f7:4a:59:d7:bd:cf:cd:35:e0:0d:a2:b1:db:
01:3d:8a:80:d9:8a:27:69:c8:be:dc:6e:1f:54:ff:
05:d9:bf:01:f9:80:62:37:c3:e6:a6:15:a1:a9:ad:
ec:83:cb:c4:69:54:7a:df:bc:92:9a:02:22:97:6f:
f8:33:50:f5:82:d9:44:54:3a:a4:57:f4:74:4c:9b:
7b:b5:9d:5e:e0:41:70:f7:d4:1b:cf:29:b3:b9:e2:
e9:ff:b8:43:67:ac:fb:37:4a:9f:aa:d3:9a:93:54:
85:b2:71:56:3a:e2:00:68:47:59:e5:a6:ce:04:9e:
b0:e2:11:15:12:b5:82:16:c3:b8:93:78:26:60:d0:
94:cb:cd:3e:59:21:fc:6c:3b:5d:a1:9e:ca:37:83:
f6:38:7b:bf:cd:52:d6:ff:03:9d:cb:97:30:8f:8f:
93:dd:b9:bf:07:6c:bc:ef:79:72:79:5e:dd:73:b8:
96:86:e1:26:05:56:86:e4:a0:10:ca:d9:1e:5d:de:
73:fc:17:78:17:48:7d:ae:7a:f9:4d:06:c2:db:8b:
64:9c:be:d3:ac:03:cb:55:08:33:df:87:dd:9b:fa:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:73:CF:63:85:0D:90:C7:D4:73:1E:49:0A:5E:30:39:8F:B6:42
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/G8Nzz2OFDZDH1HMeSQpeMDmPtkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ff:bb:7a:ac:3b:21:4f:16:26:8e:c4:8b:db:6f:13:90:84:
14:4d:90:d8:33:86:dc:6c:72:df:ef:4b:84:22:2d:17:98:b1:
0b:a0:80:06:7e:43:47:15:eb:dd:6e:aa:31:73:4d:99:f6:7b:
77:83:f1:11:68:d5:0f:62:4e:85:ab:49:ed:cb:c1:29:23:df:
0a:a0:7a:74:2b:1b:78:c5:86:a5:ad:6c:85:83:6b:66:1e:67:
20:fa:74:d0:7b:ab:04:98:8d:01:ea:e3:8c:9e:2d:37:a0:17:
88:f4:4c:c3:75:2c:0b:b7:02:c8:50:88:16:a6:ab:5f:44:f4:
e1:fb:b7:5e:6d:9f:f2:3b:b0:6d:a2:d0:bf:8f:6b:b2:a1:8c:
a0:a7:a4:69:a2:0d:7d:6d:18:ee:12:9a:62:ef:24:d4:91:97:
d7:d7:35:ea:d4:d9:74:ba:f7:ca:0a:36:95:2c:6e:ae:3a:22:
08:08:f1:80:1f:c6:a6:78:4e:53:6e:ae:9d:7b:1e:61:be:9e:
65:54:8b:88:c6:97:e1:06:d4:d1:cb:8f:8e:ec:f5:fa:f7:61:
2c:c1:89:1f:4e:18:1c:09:01:73:14:07:0b:13:d3:f5:56:f3:
00:76:37:72:0a:f2:75:de:48:ca:02:29:c2:9f:61:94:bb:0d:
1b:6f:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org