Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PsZy2AbC0UKukbz-OzuqzN_mgRQ.roa
File: PsZy2AbC0UKukbz-OzuqzN_mgRQ.roa (raw, json)
Hash identifier: pC8odD3LidC9n+lz7CU3+lvK6UuuWBSqVRMY6VkcZIc=
Subject key identifier: 3E:C6:72:D8:06:C2:D1:42:AE:91:BC:FE:3B:3B:AA:CC:DF:E6:81:14
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DE21FC310ACF78FC453636195B02BDF87
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PsZy2AbC0UKukbz-OzuqzN_mgRQ.roa
Signing time: Sun 25 Feb 2024 21:15:48 +0000
ROA not before: Sun 25 Feb 2024 21:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 185.240.122.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 14:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e2:1f:c3:10:ac:f7:8f:c4:53:63:61:95:b0:2b:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 25 21:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec672d806c2d142ae91bcfe3b3baaccdfe68114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:cc:16:2c:4d:00:49:ad:b2:3b:b4:78:a7:
df:9c:d1:5b:eb:4e:a3:61:ac:26:2f:44:4f:5b:96:
7d:a5:11:44:d2:95:f7:b6:2b:71:a2:c4:a6:c1:98:
d2:b4:0e:bb:1c:52:bc:14:66:5b:1e:fd:ac:3c:e5:
89:59:5b:a2:81:04:6a:42:eb:ce:17:cc:8d:0b:a2:
7e:3f:5a:c4:87:eb:fb:85:13:fe:82:49:f3:ac:5a:
27:e8:56:c5:2d:8c:12:99:0f:61:76:51:e2:03:b3:
af:52:80:e7:25:9d:a1:19:42:a5:1f:5a:05:7c:9b:
fe:ed:53:94:0a:e5:ba:ed:b3:ac:13:d2:26:b8:04:
d3:0b:c0:7f:29:35:27:0f:e4:b9:c0:27:27:a9:d3:
9d:5f:56:9e:4b:7d:f8:3e:33:cc:47:5d:82:78:af:
79:f6:41:dd:67:e1:9b:b5:83:5c:7c:8c:2d:99:09:
2c:4d:89:56:13:02:d5:0a:70:58:b0:d3:c3:d0:10:
0a:47:0c:cb:00:cd:1c:c4:13:d7:1e:fb:e5:68:9d:
77:83:4a:e3:3c:55:26:cd:01:2a:3c:82:a6:3e:07:
79:fc:26:8a:98:b8:06:c0:56:ce:32:c2:0a:a5:dc:
95:15:18:6b:76:76:81:57:06:4f:25:b1:8b:a3:89:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:72:D8:06:C2:D1:42:AE:91:BC:FE:3B:3B:AA:CC:DF:E6:81:14
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PsZy2AbC0UKukbz-OzuqzN_mgRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
193.8.114.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f3:e5:fc:5d:b2:5b:c6:ae:83:4e:5d:88:20:79:ef:43:ac:
22:be:42:85:f3:9d:b8:0c:8a:16:c3:de:44:b5:d9:f1:79:1b:
70:8b:12:94:69:19:30:c8:e1:66:2c:fb:e2:ba:19:1e:93:0f:
01:11:ff:f6:bb:bd:bb:c0:7b:92:d8:da:08:6b:b1:30:fd:31:
e1:ab:92:5c:b6:31:59:bb:9b:b3:b4:59:29:35:15:75:7d:d2:
2e:11:ed:3c:61:5e:55:03:69:1b:40:0a:ed:31:1d:0d:08:14:
3b:65:f8:b3:66:c9:b5:1a:e6:df:42:35:8d:b0:32:e4:da:de:
99:77:e1:18:fa:34:ff:a5:9c:0f:49:cb:ca:6a:a4:3d:18:4f:
cb:13:d9:fb:b4:b4:26:cc:df:6c:fe:ad:fb:fe:96:c0:1f:fb:
6b:9f:25:68:22:84:dd:38:13:d6:92:81:d6:28:09:75:8c:48:
d4:dd:8d:f1:4b:29:9f:1d:d7:13:0c:64:e0:e1:62:10:20:a3:
3c:10:23:cd:f1:91:cd:7d:fa:ea:14:cc:be:b5:aa:45:1a:6e:
2e:b5:01:2a:9e:f9:5a:33:76:21:bc:e1:10:48:f2:79:4a:60:
07:68:e9:31:51:06:1b:1a:23:9e:63:fc:01:0a:6e:21:59:9a:
c5:9b:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 18:10:28 2024 by rpki-client on console-ams.rpki-client.org