Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Iyzr1F84U_e8HZOaQSTlQFKpX_4.roa
File: Iyzr1F84U_e8HZOaQSTlQFKpX_4.roa (raw, json)
Hash identifier: qqMBiTVFY7i+hRgDZCrnlPFmDJPVisHRN3qStnMFgVs=
Subject key identifier: 23:2C:EB:D4:5F:38:53:F7:BC:1D:93:9A:41:24:E5:40:52:A9:5F:FE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C0CA57ECAC7C75ECA10F924A4AF1EE352
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Iyzr1F84U_e8HZOaQSTlQFKpX_4.roa
Signing time: Sun 26 Nov 2023 17:20:21 +0000
ROA not before: Sun 26 Nov 2023 17:20:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 185.227.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:a5:7e:ca:c7:c7:5e:ca:10:f9:24:a4:af:1e:e3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 26 17:20:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=232cebd45f3853f7bc1d939a4124e54052a95ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:a9:a8:3e:d5:57:67:9f:2c:1c:29:cf:e5:
a4:90:ad:22:5a:ee:71:cf:d3:13:b9:16:92:38:2e:
41:e8:8a:a0:8b:1e:5c:41:aa:b5:86:3b:13:c6:d2:
82:e3:e4:07:5d:e6:33:7f:f8:f4:28:59:1a:60:cc:
d8:f2:c7:b3:f2:47:27:e5:55:bc:d5:13:e5:fc:8c:
dc:a8:62:03:b6:48:b5:1a:3e:69:b0:51:e4:23:10:
12:52:38:6e:13:04:0a:c9:f4:c6:7e:78:8b:ab:19:
b8:9e:6a:d9:91:85:00:02:08:a2:8f:27:7b:2f:e8:
5d:93:d1:f7:a1:fa:60:73:60:e0:2c:5d:65:8f:24:
2f:05:b7:3b:d3:b0:66:9c:f8:56:ce:bd:9f:15:6e:
a1:d8:7a:98:f6:2a:8d:00:ea:92:1a:0e:c1:5a:21:
f7:30:ed:47:81:88:a7:4c:20:21:ef:34:97:53:f7:
f0:bf:98:38:2a:3b:cb:f0:24:5e:6b:ed:37:d6:d9:
53:d9:20:b4:2b:75:ed:ba:71:3b:c2:89:a5:03:4c:
e1:98:bf:47:3d:c7:1a:d0:92:e6:36:05:8a:29:f7:
f9:4e:12:c7:78:02:08:6a:2b:c9:4d:8b:10:27:1b:
6e:73:83:8f:a1:fa:33:33:c4:6b:5e:38:8f:ac:1b:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2C:EB:D4:5F:38:53:F7:BC:1D:93:9A:41:24:E5:40:52:A9:5F:FE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Iyzr1F84U_e8HZOaQSTlQFKpX_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.147.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c7:a4:8d:9e:ce:93:a2:98:b1:1b:be:93:cb:08:f4:5f:66:
e5:4f:f0:dd:53:80:4d:0e:31:ce:a7:45:c5:a8:7e:6d:a0:02:
79:25:35:74:f9:8f:94:c2:90:d7:2f:d9:44:5e:c1:c2:76:34:
b5:29:fe:44:b2:c0:b3:6b:8b:d1:02:3f:78:fd:70:0c:fe:dc:
bd:7e:52:1b:7d:d7:c6:cc:59:9a:92:02:26:38:a0:ee:6f:e3:
ef:08:b2:72:7c:30:51:41:1a:4c:35:18:9c:06:80:7c:4f:a6:
a9:ac:d2:f5:40:98:12:e3:63:0f:b0:25:a5:c8:a8:f7:7a:6d:
29:4d:94:a7:72:56:ca:f5:72:2a:7b:d8:dc:1a:89:a8:33:84:
5d:5b:bd:c8:89:b3:53:ab:e2:de:22:ba:00:91:f5:97:ca:d1:
a2:68:3c:1e:04:4b:4d:cc:a0:eb:f7:fe:a3:2f:d4:70:ad:8e:
3d:4c:bd:ed:6f:1f:ab:67:8d:8c:89:75:25:46:62:32:fe:64:
90:f7:e5:f6:a4:38:03:fe:82:4b:a0:0a:b2:8c:26:7f:bd:38:
80:e5:e1:7b:11:5e:cd:d0:f3:ca:4b:1c:d7:16:75:b0:c5:9d:
8b:40:ba:c3:e3:2a:68:59:78:f5:c4:df:76:0f:c9:76:74:68:
88:f4:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org