Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/P6Vh-DruZ3o17gsrAMlD7wdJ0hU.roa
File: P6Vh-DruZ3o17gsrAMlD7wdJ0hU.roa (raw, json)
Hash identifier: 5eXUrr8jP4inZ6hT95Tu598bOLRtyAEkpuekUP9Cz28=
Subject key identifier: 3F:A5:61:F8:3A:EE:67:7A:35:EE:0B:2B:00:C9:43:EF:07:49:D2:15
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B8A6500575A249679F82A2CB19C4EB04A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/P6Vh-DruZ3o17gsrAMlD7wdJ0hU.roa
Signing time: Wed 01 Nov 2023 10:19:16 +0000
ROA not before: Wed 01 Nov 2023 10:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.220.248.0/24 maxlen: 24
185.214.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 22:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:65:00:57:5a:24:96:79:f8:2a:2c:b1:9c:4e:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 1 10:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa561f83aee677a35ee0b2b00c943ef0749d215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:98:f7:d5:ef:90:13:a8:84:61:ce:af:76:
58:73:f8:8d:ae:94:9c:03:31:57:e7:41:d4:49:79:
6a:23:17:65:aa:28:e4:dd:7d:3f:5b:a7:4f:74:85:
00:a8:45:74:a9:63:52:60:43:c8:8c:33:3f:0d:2c:
7c:f7:32:60:7b:e9:37:92:04:30:46:9b:83:ea:27:
b2:2a:06:44:ab:d5:53:68:6e:35:84:1d:c3:70:1a:
b7:44:61:45:22:8c:b1:d2:96:c2:3e:6c:45:5a:0b:
ea:76:ea:a9:f0:34:9b:61:4d:a3:87:df:fb:25:1e:
51:86:ca:39:52:4f:ba:ff:5f:33:55:32:ff:6a:65:
80:f6:36:70:13:81:e1:49:ee:03:f7:16:2f:3e:1c:
29:96:95:d6:8f:a2:6e:bc:64:63:b1:26:a4:75:cb:
b2:66:20:ab:76:f1:53:a2:f9:6b:48:64:9a:7b:ee:
98:39:f4:3c:67:34:4e:91:e2:f9:66:c4:f1:b7:0e:
34:f6:b0:65:1d:c6:1b:b1:c9:7c:3a:52:bf:46:19:
fc:72:5e:6b:63:62:32:ad:19:6c:bf:8d:88:60:6d:
26:3e:f5:7e:ec:71:d5:de:be:23:3a:f6:c5:a9:3e:
a5:aa:c8:ed:c2:9c:d3:71:93:6e:80:84:c4:79:3a:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A5:61:F8:3A:EE:67:7A:35:EE:0B:2B:00:C9:43:EF:07:49:D2:15
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/P6Vh-DruZ3o17gsrAMlD7wdJ0hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.100.0/24
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9f:7f:ac:92:98:b2:9f:ac:bf:75:ae:63:69:0d:8a:a5:2f:
da:19:4e:20:bd:67:11:97:4c:7d:f3:2d:17:b1:d9:21:2e:4d:
3a:a2:39:55:33:5f:40:eb:0e:91:9c:b9:0d:55:21:40:36:b7:
ec:f2:bc:71:c9:b0:33:b6:24:de:70:13:da:15:fb:4e:1a:bb:
74:73:4b:02:2f:95:25:d0:f6:73:d4:96:f1:9f:6d:01:2c:d3:
b4:da:d5:e3:41:9f:35:20:95:a5:cf:2f:16:42:ef:1a:6f:fe:
7b:1d:77:4e:74:5f:fe:53:da:7a:93:ba:bd:a2:2c:06:a5:6d:
0d:a0:6e:5a:9f:9a:6a:1a:de:18:32:15:02:93:88:e9:b4:62:
c2:b1:3e:b8:e8:07:4d:f4:84:64:1c:72:6c:13:cc:9d:08:b6:
fb:1d:df:bc:47:14:13:9f:0e:4b:e3:54:9e:39:9d:d0:c5:25:
e8:89:10:22:4b:0e:49:35:0b:4b:b0:b8:75:16:b4:1e:82:bb:
a8:c7:1a:5b:89:35:1f:de:07:93:d5:00:9e:83:8f:0a:a4:29:
ce:73:d1:99:00:b2:39:2a:c3:b6:85:a9:4f:e5:77:a7:f4:db:
ea:7a:a8:9c:c6:fc:28:03:fc:9a:0d:aa:50:f7:29:69:d0:5b:
ef:a6:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org