Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IjAoelyXKBchrR4_y27ldr8qA9o.roa
File: IjAoelyXKBchrR4_y27ldr8qA9o.roa (raw, json)
Hash identifier: 0Uk3MHahbaD+9K+PDqnU1a5hmLT8V9+K+KP/IMoHKKQ=
Subject key identifier: 22:30:28:7A:5C:97:28:17:21:AD:1E:3F:CB:6E:E5:76:BF:2A:03:DA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B5C21BA3DA591582CEB79D4EFE26421CC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IjAoelyXKBchrR4_y27ldr8qA9o.roa
Signing time: Mon 23 Oct 2023 10:43:15 +0000
ROA not before: Mon 23 Oct 2023 10:43:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 185.108.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:21:ba:3d:a5:91:58:2c:eb:79:d4:ef:e2:64:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 23 10:43:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2230287a5c97281721ad1e3fcb6ee576bf2a03da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:8d:3d:ae:23:a6:ae:f8:c3:17:93:2f:e1:
6d:10:5a:91:4a:bf:24:81:0d:ac:35:d6:ae:8b:d8:
24:1c:70:04:9c:24:50:9c:cd:91:57:7c:fa:d7:36:
0f:26:6d:51:6b:a8:64:b8:93:be:ed:f6:6e:05:48:
bd:3f:9a:6c:9f:58:b6:7c:16:af:9e:d0:b1:82:10:
38:9b:37:4e:c2:b5:93:07:bb:23:b9:5a:71:a5:ff:
08:48:a0:cb:a1:aa:a5:1a:23:ab:52:93:77:23:36:
b9:61:f9:cb:f7:58:09:18:dc:d3:3f:78:fe:c6:c2:
2d:06:b1:af:a0:b2:59:7d:09:c4:9b:0e:e1:5e:e8:
d3:b8:07:1d:35:96:e7:3f:d7:cd:0f:f4:bb:3f:f8:
2d:93:ae:2e:09:e6:d4:f1:26:64:ac:a1:52:cd:e5:
b5:73:b5:52:e9:98:fa:57:35:b6:79:be:b8:38:fb:
66:c6:78:c7:9f:de:f2:34:1d:63:64:3b:02:9d:3b:
1f:1f:27:51:44:2f:87:6f:01:16:da:6d:71:75:83:
9a:11:e9:c2:9e:4e:f8:0b:02:9e:18:48:6b:74:71:
69:c8:24:d6:16:29:61:b9:3d:43:08:3a:1a:3a:e7:
36:f8:d1:d8:a5:cd:f1:fe:9e:0c:81:36:ea:67:d3:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:28:7A:5C:97:28:17:21:AD:1E:3F:CB:6E:E5:76:BF:2A:03:DA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IjAoelyXKBchrR4_y27ldr8qA9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.207.0/24
Signature Algorithm: sha256WithRSAEncryption
46:56:cf:dc:ee:f7:c1:08:b7:4d:15:db:fc:29:69:64:32:f0:
d9:18:af:66:15:eb:b4:a1:e2:7e:ee:e7:d7:28:de:6a:b5:bf:
e0:ba:86:99:e5:a4:83:58:ec:4e:6f:51:07:14:c9:bb:9b:5a:
51:43:97:dd:6e:c3:ac:04:34:7a:1e:fb:57:96:d7:bb:67:1d:
22:d3:46:87:7a:fa:c4:19:8e:43:77:7a:94:92:0a:07:a2:76:
b6:cb:44:88:7a:11:2f:1b:31:82:79:c5:d7:b6:9b:a4:4e:76:
18:8a:74:a3:37:f0:ee:e6:e6:cc:67:86:f9:b2:ee:09:99:3e:
2e:0d:c0:82:39:ab:94:aa:09:d1:96:db:2d:a4:b1:77:0e:96:
e4:5a:ed:19:9e:fa:e8:7f:2b:94:63:2c:7d:24:18:f7:ec:59:
18:3f:3a:8a:5e:a0:4e:43:3f:95:f5:a8:6e:0f:cd:9e:77:a0:
49:94:d6:c9:c1:8b:f3:c9:31:3f:4a:1b:76:cd:e0:48:31:d6:
de:6c:e0:30:0a:53:e6:e9:15:a0:92:11:d7:22:85:d9:44:f3:
d9:35:5d:15:72:93:54:5e:cd:87:af:e8:85:8e:18:83:b0:52:
ea:98:30:73:80:5f:17:c1:aa:e3:9a:25:e5:4e:af:e6:73:ce:
47:83:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org