Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LLh3hjFeZvl8OBTW9twua0-z458.roa
File: LLh3hjFeZvl8OBTW9twua0-z458.roa (raw, json)
Hash identifier: zdIY0iWasgR+NFxV3wCwn+2w+HDWNfOBW2hn9iQvz3g=
Subject key identifier: 2C:B8:77:86:31:5E:66:F9:7C:38:14:D6:F6:DC:2E:6B:4F:B3:E3:9F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B647774474E706048F5BD03B11CF9B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LLh3hjFeZvl8OBTW9twua0-z458.roa
Signing time: Mon 02 Jan 2023 09:00:49 +0000
ROA not before: Mon 02 Jan 2023 09:00:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210574
IP address blocks: 185.223.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:47:77:44:74:e7:06:04:8f:5b:d0:3b:11:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cb87786315e66f97c3814d6f6dc2e6b4fb3e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:91:01:14:e8:43:73:7b:78:19:d7:6e:b6:
6f:7e:90:1e:9f:fa:9a:ef:cd:4a:be:e8:dd:1d:48:
d2:52:37:e2:6b:86:90:a7:93:6f:9c:0a:5a:a1:51:
6a:93:4c:f4:91:01:94:59:1c:13:db:47:fe:f4:e1:
3d:5b:51:40:2a:b1:13:4d:48:b2:21:0e:df:fb:49:
59:5a:5e:dd:82:7b:8a:ac:81:f3:aa:50:14:c3:14:
03:b4:a3:96:0d:89:71:9f:dd:b0:27:cd:30:57:77:
10:19:97:5c:9a:de:77:d0:4e:d9:17:f6:db:87:0e:
0d:cf:ac:34:75:7a:50:c3:26:f9:1e:31:10:22:62:
59:c5:67:e8:32:bc:a7:e1:7d:1b:44:48:2c:44:18:
bc:78:28:a5:95:3e:d8:79:79:d9:44:98:05:ed:b6:
f5:95:6b:16:89:aa:28:70:1b:55:ad:42:82:e7:5a:
e8:fe:52:9a:9d:94:ac:15:6b:98:ee:74:5b:ca:34:
2f:6b:3c:07:ba:6a:85:1d:a8:e2:1c:db:f8:e9:db:
a8:19:f6:0f:12:7a:dd:02:4e:14:d6:15:e3:83:a6:
11:6b:56:21:43:d9:62:ab:92:20:06:e3:ae:32:7c:
71:a3:bf:b1:5e:1a:a0:1a:28:c8:1c:fb:e9:4e:9c:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:77:86:31:5E:66:F9:7C:38:14:D6:F6:DC:2E:6B:4F:B3:E3:9F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LLh3hjFeZvl8OBTW9twua0-z458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4c:fd:85:1e:c4:b7:59:6c:03:2c:b6:db:5a:05:e2:1f:33:
d2:92:46:13:b5:71:3b:cb:3c:b0:35:09:3b:f5:a7:d5:2d:27:
51:47:24:bc:46:29:62:0e:45:e2:89:ec:0c:8f:77:25:74:cc:
84:1f:53:2a:91:6f:d4:7d:9b:3e:1b:87:8c:a4:c8:ab:4e:1f:
5d:2f:b6:72:a5:33:3c:99:a4:68:3b:78:8d:ff:b2:83:0d:62:
c1:9e:94:4d:99:75:b9:39:84:e1:bd:86:38:e4:f7:28:c6:91:
d2:96:1b:09:38:22:67:53:0b:03:2b:4b:2c:3d:53:1a:e7:04:
37:6e:d3:6c:a5:4d:2a:26:20:ee:d6:ec:28:ff:ab:c4:96:71:
b4:08:23:21:3f:8b:c5:33:55:a9:92:a3:2a:5d:59:e6:dd:ae:
1b:08:fc:b2:d7:6f:f3:98:e3:38:87:8b:c2:7c:14:72:ae:9b:
f7:d2:98:61:e3:4a:01:77:ad:f0:18:83:c3:2b:d3:e3:d6:69:
7c:aa:ea:30:17:7f:9a:dd:e5:f2:85:2d:f6:4b:20:45:44:44:
d3:7e:c9:9c:d3:c4:80:85:7d:c2:45:58:90:d7:8d:99:15:91:
ce:79:23:87:5d:6f:4a:34:0a:bd:c7:d5:3f:b7:86:c6:b7:5c:
c4:33:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org