Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JvCkrIEqHhu3raGsfdiVUcNSwlY.roa
File: JvCkrIEqHhu3raGsfdiVUcNSwlY.roa (raw, json)
Hash identifier: ABqBZG7xZ+y3L+7XcZAONm5C8OGvkG5Hnr/bqx8dNDU=
Subject key identifier: 26:F0:A4:AC:81:2A:1E:1B:B7:AD:A1:AC:7D:D8:95:51:C3:52:C2:56
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018ABC67DB080ED799F47588C93E3CF6116C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JvCkrIEqHhu3raGsfdiVUcNSwlY.roa
Signing time: Fri 22 Sep 2023 10:20:37 +0000
ROA not before: Fri 22 Sep 2023 10:20:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.194.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 22:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:67:db:08:0e:d7:99:f4:75:88:c9:3e:3c:f6:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 22 10:20:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f0a4ac812a1e1bb7ada1ac7dd89551c352c256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:d6:c9:1f:dc:66:79:ec:58:cf:dc:ab:5d:
6b:f4:51:4e:c6:d4:08:e4:c2:f0:19:eb:c1:71:74:
a1:ee:d3:78:fb:7f:89:98:e9:63:a2:53:63:1b:a6:
99:18:1d:0c:f2:6b:ff:74:0e:97:67:75:39:5e:c1:
23:74:17:48:47:a2:81:62:1d:17:9c:da:50:05:01:
e4:58:ca:58:d7:52:08:a8:35:d5:a2:0b:15:e2:9a:
c9:5b:a4:9a:33:57:96:1b:bb:e4:42:48:59:63:61:
a6:36:57:6f:90:23:56:15:48:07:f3:e5:55:99:0d:
fb:07:ea:a7:38:44:2c:10:cf:14:00:2d:e9:9e:47:
7d:7b:89:3e:ad:5b:e2:5c:2e:f7:76:eb:b6:0e:ae:
f1:13:a5:ff:90:87:ca:88:23:90:75:bc:61:20:5e:
e4:71:15:14:d4:82:18:29:e0:46:cb:11:df:56:77:
73:22:82:8d:15:e0:78:ae:9d:0c:4a:0b:ba:cb:63:
9b:09:85:76:33:3f:ad:ae:0c:f6:f9:58:99:44:73:
c1:60:2f:d2:a3:49:ac:2e:79:35:c7:13:f1:ee:e0:
7c:31:bf:72:cb:00:4a:80:0c:26:3a:b7:d5:5f:f4:
ed:34:84:41:6d:70:7c:0e:a8:f1:aa:7a:2c:65:90:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F0:A4:AC:81:2A:1E:1B:B7:AD:A1:AC:7D:D8:95:51:C3:52:C2:56
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JvCkrIEqHhu3raGsfdiVUcNSwlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.176.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7d:25:d3:29:79:40:16:e0:71:6c:37:bc:f8:05:c3:75:d5:
53:1a:de:76:2e:b4:e2:fe:d9:e9:a4:b9:3c:d7:e2:4c:9c:0a:
74:02:75:b5:ec:db:9e:24:96:8f:5e:8b:f0:04:e8:17:82:07:
e5:13:94:e3:5a:70:29:1c:00:6e:49:17:50:77:69:40:24:c4:
bb:c8:33:35:2a:20:91:f8:d5:14:62:fc:13:6b:80:09:4c:e0:
2b:f1:91:61:79:57:d7:d1:08:cb:97:34:a2:62:f3:74:27:b3:
95:fa:cb:77:06:a0:67:ae:3f:c0:10:c0:8c:cf:86:f7:bd:96:
75:a4:29:f0:f4:f5:86:93:8d:84:0b:f2:d8:f5:4a:a9:94:93:
eb:f3:0d:1c:65:49:68:d2:59:d8:bd:f4:52:19:f0:fb:bb:ba:
7a:fc:1c:aa:d9:52:1c:de:3b:3f:ed:aa:b7:84:e7:f7:c1:34:
26:fd:1a:86:55:91:7d:ca:3a:5b:fc:52:30:b4:10:e7:04:0c:
a2:be:24:5a:7a:9e:38:c5:cb:27:6d:60:39:f1:81:74:de:91:
ea:a9:8f:24:ae:33:e3:d6:4e:17:6f:a4:5a:3e:02:a3:14:a4:
99:38:9b:8a:7c:1a:10:c7:19:cb:85:41:4c:64:97:30:d5:0c:
86:40:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org