Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LDfhPzRg_GscXTWIwsF-oI9jWek.roa
File: LDfhPzRg_GscXTWIwsF-oI9jWek.roa (raw, json)
Hash identifier: +BeskPXXg8qEkknkcFKIvYnWC00Mm49esX8HddhKTjA=
Subject key identifier: 2C:37:E1:3F:34:60:FC:6B:1C:5D:35:88:C2:C1:7E:A0:8F:63:59:E9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B64C8D9F3DDFD294AD907B05C14A50
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LDfhPzRg_GscXTWIwsF-oI9jWek.roa
Signing time: Mon 02 Jan 2023 09:00:50 +0000
ROA not before: Mon 02 Jan 2023 09:00:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212849
IP address blocks: 185.254.156.0/22 maxlen: 24
185.230.48.0/22 maxlen: 24
92.60.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 16:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:4c:8d:9f:3d:df:d2:94:ad:90:7b:05:c1:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c37e13f3460fc6b1c5d3588c2c17ea08f6359e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:b2:2b:85:45:79:37:6d:8f:51:fa:a0:4d:
97:b1:94:6e:5b:73:df:30:b0:b0:65:75:94:2d:e6:
0b:cf:f4:30:68:d7:41:1f:49:86:56:f6:f9:86:dd:
bb:26:ae:70:06:d3:e5:a6:f1:59:ec:13:2d:fb:9a:
d1:f5:b3:06:f8:9a:d5:01:9e:12:16:1c:1b:a2:5f:
e7:aa:0e:23:16:26:be:ed:03:e9:dc:4c:23:02:47:
74:bf:5a:7f:41:47:78:3f:02:cd:d8:7d:f7:5a:e7:
cf:75:9a:89:ea:0d:7f:af:cb:27:31:e6:f8:58:33:
07:ae:5a:1d:e7:0e:0e:53:22:5a:68:d1:2e:f8:0d:
5a:3c:72:c6:d1:f2:6f:a2:42:ba:70:2d:29:1e:ac:
84:d9:59:8c:ba:0c:2d:5c:29:8f:24:26:ad:ed:6b:
0a:03:8d:00:d4:4b:2c:f5:76:09:e5:47:81:f1:00:
60:07:65:40:24:59:51:51:59:b9:8f:e2:76:ce:d8:
b0:f1:e3:94:d8:df:b7:cc:d8:c4:47:a9:04:25:77:
f4:ef:d8:fb:dd:cc:9a:cc:68:3f:39:f3:1a:4d:5e:
d6:4a:76:de:4d:80:8c:04:0c:82:23:d1:bb:42:90:
3f:fa:68:54:f4:d1:53:c9:a0:ad:d2:11:79:8d:1f:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:37:E1:3F:34:60:FC:6B:1C:5D:35:88:C2:C1:7E:A0:8F:63:59:E9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LDfhPzRg_GscXTWIwsF-oI9jWek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.35.0/24
185.230.48.0/22
185.254.156.0/22
Signature Algorithm: sha256WithRSAEncryption
79:04:55:8f:62:26:8e:96:4a:03:ab:38:3c:d1:47:d2:fb:80:
79:2f:91:b9:04:6c:99:7c:01:5f:01:ed:56:3b:f7:4a:7b:8a:
e5:c0:e2:2a:fb:12:cc:fd:6b:a9:e6:82:72:c0:59:0b:bb:1d:
63:f6:54:cb:a5:b2:71:2e:90:5c:f9:ce:91:c0:c2:45:fe:f6:
76:eb:c7:22:a3:a3:f0:fc:60:99:f4:53:56:43:4c:c1:12:50:
0d:95:b7:f6:d5:e6:71:fa:7b:31:73:a6:58:64:20:76:f5:77:
89:ad:78:3e:06:d3:ab:41:0a:19:0a:0e:11:fa:3d:f4:2d:71:
62:6b:4f:7b:d4:6b:b5:02:c1:f4:19:d2:2a:05:8f:da:8c:fb:
2e:86:cb:db:3e:ef:a3:0f:df:77:6a:52:b0:d7:61:7f:30:b3:
49:4f:c2:1c:39:5a:3e:50:60:25:ac:c3:20:51:50:e5:e9:28:
05:9c:a7:55:74:d3:e4:70:5f:0a:49:a4:95:7f:92:74:2a:32:
d6:1e:84:53:1e:8d:3b:7a:a0:1b:3b:93:f4:4f:bc:58:08:c2:
6c:28:43:0c:4d:02:e5:2f:47:78:84:33:13:b9:e8:7e:c0:10:
7d:65:0a:e0:77:5e:c2:72:c4:cf:c8:48:f6:6e:02:ad:8d:3e:
72:dc:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org