Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/M_tlonVdGxiv9VPk9ZFK22MHqk0.roa
File: M_tlonVdGxiv9VPk9ZFK22MHqk0.roa (raw, json)
Hash identifier: t9NxEYKnWuyE22VmQmKZC3bzBjbhK7IM5VxsYcTUUr8=
Subject key identifier: 33:FB:65:A2:75:5D:1B:18:AF:F5:53:E4:F5:91:4A:DB:63:07:AA:4D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62E597C5366C4D456CDA5F6502C64
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/M_tlonVdGxiv9VPk9ZFK22MHqk0.roa
Signing time: Mon 02 Jan 2023 09:00:42 +0000
ROA not before: Mon 02 Jan 2023 09:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 185.36.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2e:59:7c:53:66:c4:d4:56:cd:a5:f6:50:2c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33fb65a2755d1b18aff553e4f5914adb6307aa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:51:3e:05:41:a3:6d:e1:69:dc:14:e9:9f:6c:
4d:98:8e:46:d2:6f:90:d5:26:35:db:63:8b:06:a2:
c6:cd:12:85:7e:42:eb:f1:b6:5b:e0:e1:09:db:5d:
d4:c6:d4:3d:8b:b3:04:41:45:b5:39:ad:b0:33:f3:
7a:c7:0a:01:11:72:11:65:ec:6b:45:8f:13:15:40:
15:4d:f7:05:ae:4d:a9:11:80:60:91:90:4c:fa:e1:
2a:ba:83:ac:a8:12:ff:1c:35:9b:f2:16:26:31:8e:
af:28:b2:17:ca:81:9d:de:fa:e2:9e:00:00:46:04:
24:da:0a:d9:27:55:e6:f2:d3:e5:a0:29:4e:e5:2d:
5c:fc:04:99:c7:0a:92:4c:df:4a:6e:f9:44:d5:6c:
1a:24:a2:25:9c:70:a9:5d:20:c3:dd:49:f1:b4:a1:
b9:b6:ba:c0:1c:72:5f:52:16:28:b9:46:12:ce:45:
cb:02:90:99:94:f2:cb:e4:7c:88:f6:23:2c:32:aa:
94:1b:0d:86:67:ca:0f:1b:96:fa:99:15:e0:e9:09:
6d:86:da:ef:59:e7:64:85:4b:ec:2b:02:a9:26:3f:
0e:11:40:f1:8c:20:5b:31:36:aa:d9:8f:87:09:4d:
1d:00:49:a3:9d:94:22:39:c5:c9:b9:be:db:36:b0:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:65:A2:75:5D:1B:18:AF:F5:53:E4:F5:91:4A:DB:63:07:AA:4D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/M_tlonVdGxiv9VPk9ZFK22MHqk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:40:ee:8e:90:63:dd:0b:81:16:b7:21:c3:44:5e:17:81:db:
8a:2d:7c:45:df:36:f6:38:55:1f:c1:6d:67:08:12:97:1d:f7:
61:52:fa:24:3f:bd:32:aa:2d:c4:db:e6:0f:d6:19:c6:98:16:
30:df:87:2c:1d:43:56:af:f8:9d:f9:5a:f7:bc:68:f2:0c:01:
f0:4a:cf:4d:da:84:74:b4:ad:d7:ca:31:45:5d:fd:d2:2e:3b:
c9:fb:e8:b7:d0:b1:9e:6f:51:cf:7d:e8:2c:46:ae:11:a2:c3:
ee:3a:11:19:a0:a0:4e:fd:17:e0:64:eb:10:e4:c4:92:ac:35:
81:3e:e0:94:f6:f7:b6:d0:31:95:eb:89:94:b2:4d:87:6d:ff:
f8:93:b1:28:98:42:c4:3f:3e:38:aa:ac:9c:ef:55:3c:12:25:
08:4f:2d:11:07:60:ff:6c:b1:dc:de:1b:d7:72:a6:7f:94:b7:
b1:74:83:56:47:69:22:5d:71:d2:29:a1:00:da:71:96:d9:3d:
91:dc:d6:aa:b4:22:e4:de:22:3b:79:20:cf:91:4c:83:29:60:
0e:11:45:1a:6e:10:b0:fc:b7:44:48:a7:9a:d1:cd:a4:33:c6:
66:9c:d5:47:9c:20:20:d8:ca:4b:af:40:a0:ce:77:d7:9b:73:
08:cb:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org