Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q2mzXhSpJ7aGuXf3TuQgKEOjzKc.roa
File: Q2mzXhSpJ7aGuXf3TuQgKEOjzKc.roa (raw, json)
Hash identifier: DTdBe0aGljjGAS18R5x8zPFKck/aFQA1Sq4q/selD5c=
Subject key identifier: 43:69:B3:5E:14:A9:27:B6:86:B9:77:F7:4E:E4:20:28:43:A3:CC:A7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018906B3405F2E29B03E7096819D7BCCC09A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q2mzXhSpJ7aGuXf3TuQgKEOjzKc.roa
Signing time: Thu 29 Jun 2023 10:29:17 +0000
ROA not before: Thu 29 Jun 2023 10:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.230.52.0/24 maxlen: 24
185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 10:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:b3:40:5f:2e:29:b0:3e:70:96:81:9d:7b:cc:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 29 10:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4369b35e14a927b686b977f74ee4202843a3cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:87:cf:d2:5b:ff:99:d2:43:0c:2f:75:b2:
72:e5:1a:f4:b4:38:26:01:3d:13:62:d9:7c:89:c5:
13:e2:93:00:48:06:30:13:36:ca:e4:94:92:49:40:
f5:62:e2:57:e7:49:fd:9f:72:33:92:cb:39:12:8a:
10:06:94:f9:80:bd:50:3a:16:21:ef:f5:09:0b:d8:
ec:56:64:f0:4a:55:e4:79:dd:79:b4:0b:8e:f7:18:
5b:28:7f:72:48:48:1e:3e:9b:d8:f1:0d:66:0b:c3:
93:c1:78:9e:ce:81:73:5e:46:77:69:db:08:0c:a6:
00:ae:f9:a0:5b:2f:ee:1c:eb:94:d4:14:b8:78:98:
6d:91:96:99:d7:1c:af:5c:f1:94:fa:8d:88:8e:36:
31:b3:0e:c2:75:c2:6d:a6:e7:dd:b0:60:e2:d7:28:
f7:58:bf:2e:5a:18:94:23:7e:c4:f8:53:d8:95:d7:
22:22:50:7f:04:02:42:ca:23:b6:90:01:33:ec:44:
83:10:72:06:d9:df:a0:29:b5:7b:5f:a2:d4:7b:1b:
90:e6:87:1a:70:6b:11:d6:cf:cd:01:8d:15:c5:35:
3f:2e:ff:68:c2:2c:71:ce:3c:03:27:b0:a4:d3:55:
e3:44:be:4d:e0:3d:d4:45:e7:82:9a:ff:d9:aa:0a:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:B3:5E:14:A9:27:B6:86:B9:77:F7:4E:E4:20:28:43:A3:CC:A7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q2mzXhSpJ7aGuXf3TuQgKEOjzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
185.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a6:4f:b6:4a:c1:64:fc:0e:ee:d1:f2:a1:ba:17:79:73:92:
eb:b9:b7:4c:79:b1:c9:71:0d:e1:e1:2f:7e:69:31:14:61:8c:
ea:0c:1d:15:0c:9f:bc:a7:3a:d2:87:a6:42:29:df:07:c2:d8:
3c:fd:74:dc:d7:8e:2f:8e:f2:aa:35:74:4f:c0:42:a2:65:ea:
6b:a8:b0:00:15:cd:eb:20:21:12:47:13:2a:8e:04:d2:09:bd:
43:d9:6e:42:37:02:f8:e9:b7:85:38:25:60:a1:6a:67:5a:26:
ed:52:a4:65:65:e3:c7:45:87:44:56:7a:ca:68:3a:50:b9:86:
7c:1d:d9:01:8b:87:91:73:d6:1a:ea:87:5f:8b:03:a1:ba:9d:
ea:54:b3:0d:6b:4b:b1:e1:fa:7b:ea:c8:20:ff:08:1a:84:f2:
ed:61:25:26:63:34:0b:1d:d6:df:54:c4:7c:56:ea:49:85:2b:
ff:f0:47:33:bf:2e:ad:be:45:11:2c:e3:c5:35:57:b9:da:93:
15:ce:49:64:c7:39:13:22:67:68:01:a2:9a:e0:e2:61:f3:ac:
c5:84:11:fa:86:a1:12:40:02:c7:ee:01:69:c0:80:a3:02:15:
7b:54:f8:4c:a8:be:ee:06:53:30:46:94:1e:76:e7:da:ec:d5:
6f:69:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org