Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lv8vxEyQvu82SxRYIAUhGXBIAe8.roa
File: Lv8vxEyQvu82SxRYIAUhGXBIAe8.roa (raw, json)
Hash identifier: Xw8Zxrxw2vjgYCD0kfVCHRCZBX/ooIgCr2gSztq+M0c=
Subject key identifier: 2E:FF:2F:C4:4C:90:BE:EF:36:4B:14:58:20:05:21:19:70:48:01:EF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189AD1E8C1C7613C04824B48B774FCE85D4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lv8vxEyQvu82SxRYIAUhGXBIAe8.roa
Signing time: Mon 31 Jul 2023 18:03:27 +0000
ROA not before: Mon 31 Jul 2023 18:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.218.103.0/24 maxlen: 24
185.214.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:1e:8c:1c:76:13:c0:48:24:b4:8b:77:4f:ce:85:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 31 18:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eff2fc44c90beef364b145820052119704801ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f5:90:b7:12:93:57:6b:99:4e:0f:35:25:72:
86:7e:98:7f:72:fd:74:b5:b5:f4:b3:9e:0b:48:e8:
9a:e6:f9:e3:4a:27:10:93:e7:5d:61:60:e7:49:7a:
0e:35:cf:cf:57:47:52:11:cc:60:e1:c0:40:69:9c:
16:92:1d:bc:be:b6:ad:d9:1a:fe:a4:2a:0a:b5:d5:
5c:ed:bc:49:6a:f3:02:fb:8f:51:c3:f0:ce:aa:e4:
4e:1c:1b:0c:87:84:35:05:f3:0c:0c:10:0b:27:b7:
7e:3f:ee:ec:52:35:99:53:c6:6d:93:e0:11:57:a6:
36:31:ef:7d:9c:fd:d8:36:dd:cf:08:70:60:9b:b7:
b9:42:bd:6e:eb:10:79:9c:a5:d0:f9:24:a3:41:a3:
4d:3d:11:ed:39:07:3c:e8:bd:b1:23:e7:33:23:18:
df:38:5a:1f:99:a7:fe:58:8a:0f:5a:29:57:01:da:
c8:65:f5:47:34:56:5b:9e:07:64:83:8a:08:8b:ac:
af:89:f6:f5:6e:ec:cb:88:6b:b2:5f:65:73:6d:96:
89:46:df:35:af:bc:24:b3:8a:a0:b6:53:30:ab:c6:
9f:46:6e:58:1d:8e:a0:f3:c9:30:48:e7:71:0a:89:
70:94:e7:35:c3:a8:43:47:55:9a:02:fd:ec:49:9c:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:2F:C4:4C:90:BE:EF:36:4B:14:58:20:05:21:19:70:48:01:EF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lv8vxEyQvu82SxRYIAUhGXBIAe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.100.0/24
185.218.103.0/24
Signature Algorithm: sha256WithRSAEncryption
80:00:22:02:6c:43:c4:29:23:48:45:ee:cb:31:86:c0:be:46:
da:d9:e2:fe:4b:ea:61:44:b6:34:b4:2d:09:69:35:28:b5:ad:
dd:e3:31:fb:f5:38:ff:b4:97:f9:36:54:f9:68:91:73:3a:63:
64:75:d7:02:5c:8a:e0:77:3e:8b:57:b0:4d:82:77:1c:7e:22:
d1:86:e7:83:ab:de:c6:f7:81:e6:75:71:6b:25:69:3c:27:c6:
19:5c:92:60:80:62:93:0b:fc:8a:fa:b8:5a:2c:f7:c9:1f:c2:
a3:b0:8f:f0:58:7c:93:e5:63:52:8f:d6:87:e6:f4:42:51:00:
10:2b:ff:6a:e1:54:1e:5b:94:d8:14:24:ab:96:1d:57:f2:9a:
eb:36:7d:07:5c:dd:ee:22:2d:18:5b:12:1c:09:4b:86:bd:32:
de:19:01:fe:f4:72:4a:08:4f:60:d3:04:68:d7:19:a0:44:06:
75:e8:ce:08:09:ca:58:dc:b0:a2:c4:78:d6:1d:82:bd:32:a9:
1a:d1:14:b0:78:f9:82:2a:1c:23:bf:f2:7d:a1:bf:0f:8b:90:
d0:58:3a:3e:82:c5:46:6f:e2:bc:22:28:00:09:ef:9c:03:58:
82:00:37:13:86:c5:0b:40:f2:b8:8a:ed:61:a4:64:20:db:aa:
fa:07:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org