Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HktbMPnU9exd1Ff5CdkgpKSRhu8.roa
File: HktbMPnU9exd1Ff5CdkgpKSRhu8.roa (raw, json)
Hash identifier: 9gBpQZzR1gQ9ptwjKeFCmf83OAxaB7JvPR4tpup03u8=
Subject key identifier: 1E:4B:5B:30:F9:D4:F5:EC:5D:D4:57:F9:09:D9:20:A4:A4:91:86:EF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A6C0D22800834C9E388E887F516D17124
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HktbMPnU9exd1Ff5CdkgpKSRhu8.roa
Signing time: Wed 06 Sep 2023 19:51:54 +0000
ROA not before: Wed 06 Sep 2023 19:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 185.221.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:0d:22:80:08:34:c9:e3:88:e8:87:f5:16:d1:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 6 19:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e4b5b30f9d4f5ec5dd457f909d920a4a49186ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:f3:19:22:30:9e:0b:69:9a:f0:21:b3:79:
fc:9b:21:d1:4f:71:27:44:42:d1:60:db:39:d3:a6:
f7:64:63:28:c2:4f:d1:7b:f9:e2:6b:e0:29:c6:a9:
08:0e:12:7d:60:1a:38:5a:98:66:51:bc:f9:ef:0a:
e5:d9:46:e4:8d:85:ad:e1:f2:bd:0f:49:96:bc:1a:
33:8b:18:38:c1:52:5e:d8:c4:19:09:0d:89:b3:85:
e3:16:a8:4d:30:da:cd:7e:9c:cd:7a:68:24:66:34:
51:7c:92:0e:9e:b2:ff:be:25:4f:5a:3d:7f:cb:0f:
e8:85:5d:d8:64:b7:4f:1f:3b:db:23:96:97:c9:7d:
f8:bd:b3:2e:d9:f4:a3:0e:28:f3:9b:f1:89:dc:ac:
27:b5:b3:34:af:94:12:f1:69:f6:60:3a:1b:d9:9b:
cd:49:5f:22:bd:7a:26:b0:c7:4d:54:cd:f4:ef:d8:
49:c3:2a:a8:30:83:71:82:02:e7:27:58:74:f7:0c:
da:a4:c4:cb:70:7e:81:de:d1:37:b5:be:7a:c5:7b:
7c:00:cf:f7:65:84:3f:61:24:22:80:c2:83:6d:b8:
c2:29:34:e9:b8:97:d2:55:1c:14:5f:ca:f9:9e:ca:
ee:09:f6:00:0f:3d:5d:f2:71:3a:7b:52:6b:92:16:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4B:5B:30:F9:D4:F5:EC:5D:D4:57:F9:09:D9:20:A4:A4:91:86:EF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HktbMPnU9exd1Ff5CdkgpKSRhu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8d:6b:1f:c7:b5:76:45:88:ed:a9:c7:bc:9a:ce:2d:30:37:
ec:4b:c4:4e:a7:55:7e:65:08:16:94:ba:3c:6d:51:3a:3c:73:
4c:cd:63:62:90:af:6f:21:58:c4:af:1f:81:95:36:3c:70:d5:
d7:a3:6a:48:4a:2f:3f:71:6b:6d:0f:c7:3a:ff:60:90:72:3f:
bb:df:45:d5:10:80:ce:7c:f9:0c:31:c7:26:ee:d5:11:e3:78:
33:46:e9:e5:f6:51:e6:c5:86:80:11:d5:59:86:93:fb:b8:63:
60:9c:b0:ce:64:70:53:3f:d5:b8:9b:b3:84:2f:d0:9d:89:a7:
62:da:6e:b8:60:3e:c7:01:5c:13:9d:58:df:08:6b:a8:6f:a2:
36:fa:82:50:43:33:11:0c:21:d4:75:0c:1e:73:5c:15:bd:b5:
1e:fd:26:77:98:57:05:36:5c:05:bc:36:84:0f:ea:69:4a:96:
d0:8b:5e:11:a0:d1:4b:4c:94:19:bd:f0:b8:7e:50:78:1d:c3:
4b:73:16:48:0f:1d:f8:2b:26:e7:87:60:24:81:db:ac:73:69:
70:13:da:03:d9:17:65:76:64:b4:0b:fb:cf:72:23:98:03:eb:
36:ba:8c:2c:d6:97:03:35:bf:2e:18:b7:85:94:ea:a4:d8:5d:
4a:f1:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org