Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R2vBZ6NNDD0ETCxlJM5D9Z447HE.roa
File: R2vBZ6NNDD0ETCxlJM5D9Z447HE.roa (raw, json)
Hash identifier: u7lB6hKFiXYjdpDuQGl7r/N2AmfbxeUPsgCsUFsms60=
Subject key identifier: 47:6B:C1:67:A3:4D:0C:3D:04:4C:2C:65:24:CE:43:F5:9E:38:EC:71
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802718A3806A10FAF30011C79E3C9A6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R2vBZ6NNDD0ETCxlJM5D9Z447HE.roa
Signing time: Tue 02 Jan 2024 02:30:52 +0000
ROA not before: Tue 02 Jan 2024 02:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.222.29.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.194.177.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 09:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:71:8a:38:06:a1:0f:af:30:01:1c:79:e3:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=476bc167a34d0c3d044c2c6524ce43f59e38ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:84:28:a8:45:da:4e:0d:14:3b:c5:b7:03:
20:6c:f6:c1:56:ce:ab:a2:46:e6:50:7e:b2:92:00:
9d:85:a5:34:9e:a8:d6:e3:b2:16:63:2f:92:35:d8:
7d:1c:ce:ce:59:a9:93:65:b7:a1:e2:c9:6f:6b:f8:
86:5c:85:76:f2:77:6f:34:cf:22:fd:7f:54:fa:98:
27:42:10:5d:7c:21:a6:8c:b4:71:cf:80:0e:fb:ac:
b1:d7:61:cb:26:0c:25:8b:eb:1d:7a:88:57:74:c5:
64:30:be:ad:2f:a1:79:25:f1:74:ce:c1:73:02:5a:
d6:28:4a:ca:46:5d:7f:a0:79:47:72:8d:f5:71:dc:
20:e3:19:ca:c6:9b:f6:e6:e9:c0:d4:5f:a3:ee:a1:
68:f8:05:9f:bf:d1:7d:5c:32:3a:66:0f:32:13:56:
75:4a:52:8e:9d:e7:fd:9c:d7:c1:71:1d:a4:b1:19:
24:f4:98:60:4e:5a:09:c9:57:05:4a:af:08:07:59:
02:83:9f:80:2c:a7:71:17:b6:9f:93:3d:9a:6d:56:
a2:c4:d9:6d:8f:46:cd:e9:3c:b9:56:a5:2d:70:ac:
f2:a5:d9:df:9d:20:39:12:38:c3:2f:05:c3:d3:36:
ae:c6:67:ff:16:1b:39:0d:1c:86:87:63:76:35:29:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6B:C1:67:A3:4D:0C:3D:04:4C:2C:65:24:CE:43:F5:9E:38:EC:71
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R2vBZ6NNDD0ETCxlJM5D9Z447HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.73.0/24
185.218.101.0/24
185.222.29.0/24
185.246.112.0/24
193.58.146.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0c:73:50:01:82:10:d8:f7:52:c1:97:b3:2d:44:29:e0:57:
28:bc:6e:3a:52:2a:1c:84:3d:88:bf:0e:83:9e:aa:d3:e4:dc:
4a:bd:26:a0:e4:7d:72:f1:9a:2e:e8:19:8e:a8:8a:fe:39:33:
c6:50:83:e0:0c:5e:71:fe:6a:1d:86:c6:e3:97:c8:55:b1:56:
ff:65:1b:9c:f7:c9:97:df:0e:1d:2b:e4:2e:8b:7f:05:46:50:
f4:74:ac:8e:49:fa:28:48:b1:52:9e:16:01:cb:01:90:40:24:
c1:6c:fa:47:3f:9f:08:61:70:c5:64:aa:b4:56:cb:53:b7:45:
77:39:2c:77:b4:91:54:f6:1d:2a:8d:46:ce:17:f3:bb:d4:ab:
74:67:07:db:70:df:0f:7e:5f:f0:5a:f2:c4:d9:6e:fa:87:67:
f9:80:43:31:8a:1e:cf:12:10:e8:fc:28:25:d2:ed:7c:f0:38:
0e:8a:a0:14:75:ae:bc:2d:72:dc:0e:68:c7:33:e0:a8:33:47:
1e:ad:44:f6:39:db:cd:f0:19:8b:57:4a:4a:a9:47:0c:35:68:
2b:ff:e4:45:5d:6f:9c:24:0c:dc:80:c8:1a:e0:e2:45:1a:f1:
a1:1d:ce:63:79:a7:11:96:b8:0f:a4:58:48:45:e5:81:5a:66:
b9:67:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org