Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K553AfnYIXpsYhNGmkeVu8cnnCo.roa
File: K553AfnYIXpsYhNGmkeVu8cnnCo.roa (raw, json)
Hash identifier: kcOl+iz5ay9BqnI8POxbVaghTVIJcwjkoqeHwfT8HvE=
Subject key identifier: 2B:9E:77:01:F9:D8:21:7A:6C:62:13:46:9A:47:95:BB:C7:27:9C:2A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80277D00503B28C051B7D3FE33A6BC9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K553AfnYIXpsYhNGmkeVu8cnnCo.roa
Signing time: Tue 02 Jan 2024 02:30:54 +0000
ROA not before: Tue 02 Jan 2024 02:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33387
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 10:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:77:d0:05:03:b2:8c:05:1b:7d:3f:e3:3a:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b9e7701f9d8217a6c6213469a4795bbc7279c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:6d:a5:b3:9b:bd:b7:70:b1:ef:d4:be:a9:
f3:76:58:4c:85:d8:d0:e3:d9:d9:e0:df:9b:eb:c0:
7e:5b:05:29:c0:5f:a7:c7:a2:6b:6e:30:21:8d:46:
f4:e0:4f:a6:0d:5c:e5:b3:59:f8:ce:9f:f2:23:ad:
fd:6b:6c:10:49:f5:c0:32:de:af:92:bd:63:ae:08:
5c:76:e5:29:14:24:64:31:8f:78:69:b5:85:bb:23:
95:f3:b1:5b:c5:a0:24:10:1e:91:f7:3c:cc:6e:bc:
cf:10:91:0d:03:59:df:2b:65:fc:c2:44:4c:ab:9d:
49:39:ae:38:37:41:0b:1b:e6:f3:22:58:50:e1:46:
78:e9:4c:56:25:4e:5a:18:ff:2d:71:b3:6e:79:9b:
72:3d:fe:a1:22:66:63:d6:29:c3:13:c0:43:29:3c:
c4:3b:b4:6b:ec:48:49:93:31:cb:e6:02:90:b9:b0:
95:b6:a8:ee:0c:b8:98:90:4f:75:a4:07:b1:16:57:
43:69:97:87:ca:4d:1e:6b:2d:ba:37:af:a9:44:60:
da:d7:98:e5:f8:5b:69:35:d6:24:28:28:98:8a:e1:
8a:8b:f3:cf:f5:e1:92:52:13:de:ec:90:d0:a9:be:
34:89:7a:08:ea:83:70:9d:13:63:c8:e2:14:e8:a0:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:77:01:F9:D8:21:7A:6C:62:13:46:9A:47:95:BB:C7:27:9C:2A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K553AfnYIXpsYhNGmkeVu8cnnCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1d:6a:b9:02:58:d5:24:0e:21:ea:26:58:7f:d7:08:18:24:
b9:cc:47:8b:90:5c:43:54:bb:ed:99:4f:e8:98:2c:0d:9c:72:
39:ac:7b:99:8a:57:b9:4e:f4:9e:2c:fa:07:b4:b3:c4:06:8f:
27:48:81:a9:3f:33:23:d7:f4:9e:e0:6c:cc:0f:77:11:17:9d:
7a:89:a4:ee:4c:46:e4:ea:dc:4a:c7:53:6c:bc:dd:d4:89:83:
7a:87:20:80:96:b0:37:44:f3:c5:15:5f:10:6d:88:f6:9a:80:
49:3b:f7:bc:d8:ac:77:0d:0d:4e:be:ad:0e:11:41:b6:db:5b:
f8:ec:5b:8d:7e:68:62:76:36:16:9f:14:34:77:de:b9:d2:30:
62:e8:df:53:92:66:04:15:00:72:d6:12:26:d6:6f:6e:c9:ee:
74:e1:a0:7d:5e:17:25:ab:c4:3b:34:4e:ca:01:bd:5f:ab:cb:
a1:1a:54:fa:f2:04:44:87:f3:16:5a:2d:57:8a:4e:80:c5:8f:
54:d0:69:08:4d:da:bc:7d:2c:c0:5d:dc:39:a6:1e:f2:78:32:
cb:8e:e4:09:e2:ca:8c:97:30:ff:0c:cb:62:d5:60:e6:8f:d6:
8c:65:da:0d:ed:dc:0b:4a:4c:f0:f0:20:44:cf:89:94:15:e5:
84:20:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org