Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IwR4QKRQ6vEW-ylnuxd7-hwqXnM.roa
File: IwR4QKRQ6vEW-ylnuxd7-hwqXnM.roa (raw, json)
Hash identifier: qS3lPvroIWwLeOb7MeCWU7SFa+vN8/S1ELHof9kwKOQ=
Subject key identifier: 23:04:78:40:A4:50:EA:F1:16:FB:29:67:BB:17:7B:FA:1C:2A:5E:73
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CEE1FF5EFC42B88ED6642A203DFAD96C3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IwR4QKRQ6vEW-ylnuxd7-hwqXnM.roa
Signing time: Tue 09 Jan 2024 12:08:41 +0000
ROA not before: Tue 09 Jan 2024 12:08:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 185.230.65.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 08:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:1f:f5:ef:c4:2b:88:ed:66:42:a2:03:df:ad:96:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 12:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23047840a450eaf116fb2967bb177bfa1c2a5e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:23:ab:5f:19:f3:5e:df:ce:b5:57:b2:73:
59:17:c6:92:d1:5f:31:28:3e:4c:ec:80:f3:a5:b2:
58:0b:fe:be:24:ef:d5:f6:5c:ff:f6:de:0f:a2:3e:
36:c8:c4:dc:f9:0d:c9:ca:7f:e0:64:f4:a2:fb:c7:
18:11:8f:a0:a3:68:24:0c:11:3f:57:b6:9d:f5:ed:
11:a5:7e:3b:4d:3f:76:12:8b:1a:eb:9c:9e:f1:1b:
d9:3b:23:c6:47:78:b3:c2:9c:50:93:45:3a:d9:60:
1d:34:fc:82:73:5d:fc:5e:68:de:90:09:49:5f:49:
4c:fb:e8:88:58:d2:ab:bc:ca:40:2f:9a:ca:e3:ce:
8f:d4:6b:36:88:ba:93:50:c7:c4:50:49:27:8f:35:
de:80:3b:3b:97:21:27:8f:a3:a9:07:dc:26:db:c5:
37:20:d7:60:f1:70:73:ca:ab:15:0e:37:bb:da:b8:
7d:1f:e5:6a:fc:80:56:8f:d4:2d:93:28:ac:80:83:
f4:6d:87:a7:75:7b:b4:7c:e4:8d:ac:06:6c:bd:58:
64:a9:41:3a:97:71:2c:7f:4e:9a:af:19:b5:6c:88:
66:fc:be:25:84:fc:80:3d:58:0b:ca:9b:6c:81:2e:
2a:7f:1d:66:76:71:06:b8:6d:a4:2d:a1:bf:2e:2c:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:78:40:A4:50:EA:F1:16:FB:29:67:BB:17:7B:FA:1C:2A:5E:73
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IwR4QKRQ6vEW-ylnuxd7-hwqXnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.65.0/24
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
84:de:66:db:3c:07:de:65:e2:b6:60:81:97:97:c1:23:62:aa:
da:65:f7:46:60:41:a7:08:a1:0b:40:a1:cb:36:90:c7:52:6f:
54:d3:f6:f0:a2:02:21:a9:45:10:30:3f:ed:23:7c:3a:01:a4:
93:c4:a2:f8:5f:3e:08:73:04:39:4c:e6:f5:08:5b:5c:4d:78:
ed:37:d2:95:7f:89:1f:fb:4e:cd:52:8d:68:88:79:63:7d:84:
98:dd:63:2c:6e:53:53:b8:95:aa:60:52:1c:54:85:07:1d:20:
ad:2f:69:73:4c:e9:4a:72:14:65:71:01:d1:65:86:17:85:e0:
47:00:3e:01:da:fd:8c:ab:ad:05:80:75:9c:32:9c:3a:2f:51:
c6:a6:5d:4b:9a:df:1c:14:c4:af:6e:58:71:b8:a4:74:12:bc:
cd:4f:c0:89:35:56:be:3c:ab:a4:dc:ab:a7:9a:6d:b1:82:d3:
37:7b:58:31:34:c5:ae:9a:71:4d:1c:46:1d:34:af:c1:39:26:
ec:da:c2:72:cf:58:e7:79:b0:ac:bc:15:c3:b7:34:68:02:36:
76:aa:27:7f:e6:47:c0:8e:c8:71:ca:48:c0:82:ea:54:ab:47:
b6:1d:86:7a:c5:eb:a3:57:ef:86:21:90:8d:38:fc:6d:0a:66:
13:f0:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org