Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LO9nuTRRdpAH_7iLN6tsTkCj3iY.roa
File: LO9nuTRRdpAH_7iLN6tsTkCj3iY.roa (raw, json)
Hash identifier: KiQ//m5Q7AQY97BioO75oAIvxjtGI+/kVShIsLKT37s=
Subject key identifier: 2C:EF:67:B9:34:51:76:90:07:FF:B8:8B:37:AB:6C:4E:40:A3:DE:26
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E2E88DD09940B9FE692528F4620EC50CB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LO9nuTRRdpAH_7iLN6tsTkCj3iY.roa
Signing time: Mon 11 Mar 2024 17:21:45 +0000
ROA not before: Mon 11 Mar 2024 17:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 185.214.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 21:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:88:dd:09:94:0b:9f:e6:92:52:8f:46:20:ec:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 11 17:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cef67b93451769007ffb88b37ab6c4e40a3de26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:a1:ab:60:2d:07:f0:f3:bd:2f:06:ec:76:
36:83:77:54:32:ed:0a:95:2b:1d:35:1f:c8:a7:76:
ef:ff:d5:6a:92:b1:b5:a4:c4:a5:6c:22:d4:a3:99:
00:1e:13:ab:0a:75:83:7c:38:9e:d3:43:e4:ae:52:
1c:c6:65:75:45:8e:d2:c0:1b:a4:ae:db:e3:3c:fb:
f0:4b:4e:27:87:b5:29:ed:e9:ae:9f:fa:10:b9:cd:
5d:8d:f9:09:4a:29:00:10:df:e3:65:e8:fd:29:e8:
f9:57:12:c0:83:0c:78:eb:90:e5:e0:b1:c4:90:c4:
91:ad:66:a2:1b:1c:a7:5a:fd:85:13:87:00:d5:76:
9a:19:55:f1:51:ec:c6:a2:af:b9:8e:91:7c:45:d4:
73:0c:ae:6e:07:70:ac:33:c8:2f:07:77:35:39:40:
9d:85:b4:00:c4:a7:79:97:4c:e6:eb:9c:e7:eb:3a:
f1:8d:52:3f:68:3a:ac:f9:f2:f5:6b:15:62:36:3f:
31:74:b6:2e:58:97:9e:6c:23:8c:f0:c2:7f:fb:c8:
4b:6a:e3:79:b9:51:5c:fb:a0:60:11:3b:10:80:8e:
11:22:6d:81:bd:ab:00:18:1b:cb:ee:bf:2f:35:b4:
57:5a:d7:23:f3:e3:12:0b:12:83:e1:d2:8d:e8:44:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:67:B9:34:51:76:90:07:FF:B8:8B:37:AB:6C:4E:40:A3:DE:26
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LO9nuTRRdpAH_7iLN6tsTkCj3iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:46:1b:80:33:07:d0:8e:90:79:40:5a:15:6b:1a:f0:ee:76:
6c:aa:60:b2:aa:df:15:1e:aa:91:3a:4f:08:c7:3c:2e:50:f3:
63:b8:65:44:07:f3:94:0e:57:a2:ac:07:12:93:84:20:dc:0c:
5b:4b:0c:2d:c5:c7:31:eb:b6:64:b4:3d:16:96:28:db:41:b1:
6a:41:ab:b0:75:66:bf:af:d4:28:da:24:01:1a:40:d8:e7:90:
ea:1a:82:84:86:00:dd:db:c9:3b:f8:b1:43:e8:b6:34:0a:a5:
07:2b:8b:fa:4b:d4:b3:c4:df:bc:bd:23:09:81:b6:8e:04:35:
2e:8f:66:f1:7c:9b:9d:73:59:9d:d3:7d:1f:83:f9:54:32:4d:
f2:3b:4b:48:df:a9:d0:a6:a0:b5:a2:0a:61:3d:b5:10:b7:dc:
ec:a0:e8:6a:ff:30:6c:be:54:6b:a9:56:f6:a9:58:bc:1a:a5:
70:8c:3c:1e:56:c7:01:c6:40:41:9d:3f:39:91:e6:2b:91:ae:
5c:57:3d:b7:27:7e:bd:aa:9d:22:3c:0b:3e:fa:a2:6c:4c:e6:
7d:7d:16:66:92:49:99:24:94:a3:df:51:b6:78:bc:4f:45:f4:
ca:a6:e2:02:41:02:e3:e2:27:ed:75:e6:11:aa:a5:6e:75:9b:
11:43:a6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org