Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RTTY1DlA7Q5P4ZPtIzV3rTcBEYQ.roa
File: RTTY1DlA7Q5P4ZPtIzV3rTcBEYQ.roa (raw, json)
Hash identifier: 1fAp7gY71Lri5QOZ9rZyJi8Qz16TGXk/gbttUYnmbnY=
Subject key identifier: 45:34:D8:D4:39:40:ED:0E:4F:E1:93:ED:23:35:77:AD:37:01:11:84
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188D7F345EE97EF22B5F605A53CEE748265
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RTTY1DlA7Q5P4ZPtIzV3rTcBEYQ.roa
Signing time: Tue 20 Jun 2023 08:37:04 +0000
ROA not before: Tue 20 Jun 2023 08:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 185.240.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:f3:45:ee:97:ef:22:b5:f6:05:a5:3c:ee:74:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 20 08:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4534d8d43940ed0e4fe193ed233577ad37011184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:f3:32:a5:2f:53:e5:ea:14:02:95:26:8c:
28:a6:de:b5:4a:13:6e:55:b4:34:02:1c:6c:e7:ec:
e3:4b:6e:c1:52:d5:9c:52:84:1e:dd:e8:4a:f5:94:
2f:fd:3b:72:96:3c:ef:dc:6e:57:97:38:0b:a1:9e:
81:ec:2c:b1:4b:fd:db:92:f5:67:aa:cf:a5:35:e9:
8f:0f:c4:f3:19:c6:cf:91:77:e3:4d:89:d4:c2:a5:
71:e5:51:38:82:ee:1b:c7:22:39:bd:e2:41:0a:9f:
b2:ee:4e:ed:af:ce:91:3b:43:fb:5e:86:84:7f:ed:
27:c2:7c:f4:a3:68:3d:9e:4d:22:69:e6:97:af:07:
d8:fb:c4:8b:e6:df:2f:67:47:dc:4e:31:7a:09:56:
d8:2e:b2:b2:be:90:7d:74:5a:b7:b6:24:af:69:2c:
f0:45:41:19:14:57:c7:ea:34:22:08:bb:d5:43:ae:
43:b6:f2:9d:38:a2:a2:a2:ae:e8:89:d8:9c:72:8c:
3b:10:6c:1f:a5:68:11:88:72:fc:51:16:77:f1:be:
96:16:1f:c6:49:0c:b2:25:e7:27:77:53:63:e7:46:
1b:56:7e:51:6a:d7:95:9b:31:7d:09:d1:3a:b8:8e:
85:7c:be:9f:67:62:79:d9:82:9a:c0:7d:b2:c0:9e:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:34:D8:D4:39:40:ED:0E:4F:E1:93:ED:23:35:77:AD:37:01:11:84
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RTTY1DlA7Q5P4ZPtIzV3rTcBEYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.123.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d1:7c:78:09:23:fa:de:ee:9a:bb:9c:8c:63:8e:58:04:cf:
8b:c2:8e:d9:9b:96:b1:b5:d8:02:16:d1:8e:9f:2d:a5:44:c2:
d0:f3:2b:08:44:62:5f:44:e7:89:0b:3f:04:bf:36:cf:51:1a:
ac:f4:3b:29:32:34:6f:8d:71:98:f6:3a:4e:45:e6:77:7c:90:
29:93:3b:3d:a6:82:e9:4f:23:a6:e1:3a:8d:ef:40:d1:7f:23:
38:e1:5b:b3:14:c0:2c:02:8f:d4:3b:6b:3a:cb:7d:54:1f:45:
12:7c:65:fe:e1:25:25:56:d3:c0:16:05:9f:cd:fb:2b:7e:17:
d4:0b:c9:85:84:b1:e6:2f:41:74:45:ce:47:45:45:28:ce:f1:
d3:a2:5c:26:ca:a1:b4:74:8e:05:d8:1c:0d:4b:61:c7:56:ee:
e4:b4:c2:ed:fd:2b:ed:af:ff:94:77:d7:57:b5:db:bf:c8:72:
2a:6c:cf:e7:64:22:27:7f:f1:2c:5a:4e:29:28:e6:12:48:1f:
53:af:fb:62:20:b4:22:ae:4c:9c:84:66:bf:46:3c:8c:81:ec:
1a:1f:1e:8b:fb:94:e8:7d:d3:f3:1f:91:f1:24:7c:bc:15:5c:
01:b6:47:bf:c8:f0:9e:c0:8c:8d:dc:8b:42:94:d3:13:a3:77:
4c:e7:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org