Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L63cn5_oKWcwyKm7grcgVKq9IFg.roa
File: L63cn5_oKWcwyKm7grcgVKq9IFg.roa (raw, json)
Hash identifier: XJb9lrEkqCPxf5cosTI6/0xYhBiiInmxf/FRSz+gmxs=
Subject key identifier: 2F:AD:DC:9F:9F:E8:29:67:30:C8:A9:BB:82:B7:20:54:AA:BD:20:58
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C6D423B4387CDC6F161D9B4120D643ADE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L63cn5_oKWcwyKm7grcgVKq9IFg.roa
Signing time: Fri 15 Dec 2023 11:35:06 +0000
ROA not before: Fri 15 Dec 2023 11:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 185.234.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:42:3b:43:87:cd:c6:f1:61:d9:b4:12:0d:64:3a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 15 11:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2faddc9f9fe8296730c8a9bb82b72054aabd2058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:c6:6a:14:1b:66:59:31:1f:c0:ae:9c:d1:
97:66:b5:3e:2e:42:da:f6:d1:7a:99:a9:2d:c3:c5:
65:09:63:3c:28:1d:68:db:4d:40:f1:3f:5b:a6:1c:
47:ad:01:2c:ad:eb:a4:65:27:e3:05:b4:ea:3a:5c:
01:86:19:b3:ab:fb:5b:7b:c2:a1:96:db:bd:1e:c0:
a4:3b:46:b0:cf:2d:17:f9:79:db:f9:7b:e6:f4:d8:
55:38:ef:16:91:5f:75:b0:e0:f7:92:89:a3:90:4a:
4d:70:0d:64:0b:e7:bb:bb:50:11:8d:3f:d2:a1:12:
21:8a:0e:23:6f:6d:74:55:0e:5b:e2:ca:44:b5:c0:
33:be:27:e3:86:68:08:57:d9:fe:06:b5:73:63:51:
f4:cc:14:e7:a4:61:80:02:51:28:78:6b:2f:06:02:
60:5f:33:2b:cb:e5:74:1e:86:09:35:fa:0f:ed:e8:
24:c0:fe:c4:69:4d:52:4f:cb:42:a0:96:25:36:62:
a0:86:9c:df:a6:ab:1d:e1:3c:59:77:0e:01:73:a9:
76:2a:0a:9b:51:1d:c9:fe:e6:83:92:1c:e5:80:3a:
26:77:f3:7b:66:11:6a:26:d0:37:be:c9:c1:d1:99:
f2:15:f4:1e:d2:ec:4e:b9:4c:20:46:08:79:5c:3e:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:DC:9F:9F:E8:29:67:30:C8:A9:BB:82:B7:20:54:AA:BD:20:58
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L63cn5_oKWcwyKm7grcgVKq9IFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ee:d8:e2:58:ff:1b:69:08:65:82:03:dc:bf:5d:46:41:a8:
de:2f:2c:e4:c4:59:c9:aa:6a:95:dd:88:3a:45:f9:38:b0:24:
d5:51:6f:22:5d:d7:4a:ad:94:cf:aa:38:8b:8e:8d:a4:66:f8:
8b:51:a5:d5:2a:ee:2d:50:27:86:f6:f2:f4:33:30:58:12:3e:
dc:e7:fd:70:9b:6c:74:c8:ce:84:78:4d:33:7c:bd:6a:aa:64:
ea:69:a4:ab:99:33:cf:54:07:35:2a:2b:33:7a:26:ca:f2:57:
61:3c:5c:cf:8c:6e:06:c8:ab:0a:da:95:c5:b4:cb:9f:0f:e9:
d9:3c:74:fa:11:21:35:65:e4:cb:54:3f:19:57:d7:d8:40:99:
01:62:ad:78:17:d3:d3:d3:2c:34:e2:f0:7e:2e:23:52:fd:4c:
0b:9a:f9:a5:d5:0a:66:7e:c4:43:7f:3f:50:59:e4:77:28:8e:
e5:20:68:ac:17:ce:51:b8:95:c3:ed:2c:b9:e6:d1:f7:73:41:
8f:37:82:22:98:52:d3:d5:f0:df:1e:a9:70:de:09:71:18:cf:
c7:11:a4:99:52:83:43:13:4f:a1:f1:82:f1:0a:90:81:ac:ad:
26:ae:85:97:9c:3c:8a:7c:63:64:7f:d0:ba:ef:b4:5f:c7:1e:
41:98:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org