Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rr6GsteUuWr0R9u5Gf7hez25Twg.roa
File: Rr6GsteUuWr0R9u5Gf7hez25Twg.roa (raw, json)
Hash identifier: x9ith9jZwW9mQ05dro3Oc0LQ+9cBTNieKt9mB4uA1aA=
Subject key identifier: 46:BE:86:B2:D7:94:B9:6A:F4:47:DB:B9:19:FE:E1:7B:3D:B9:4F:08
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AE7A6C1C2AA8B76CAFE4EE129DD031F16
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rr6GsteUuWr0R9u5Gf7hez25Twg.roa
Signing time: Sat 30 Sep 2023 19:53:00 +0000
ROA not before: Sat 30 Sep 2023 19:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.218.103.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 15:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:a6:c1:c2:aa:8b:76:ca:fe:4e:e1:29:dd:03:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 30 19:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46be86b2d794b96af447dbb919fee17b3db94f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:26:7e:0f:ad:da:8f:e7:d8:8a:d8:83:fb:
20:15:73:19:83:9a:f6:38:c5:42:8f:69:39:40:d1:
94:d0:8a:92:fd:0c:8a:94:ac:ce:9e:4b:52:86:f2:
74:32:97:a5:92:18:35:6e:67:e3:8b:fa:f5:96:90:
64:7a:4e:cb:ae:8a:93:ff:2c:bb:02:29:97:b8:64:
37:5d:e8:2f:bf:5b:f9:a8:74:d8:f6:a5:50:83:2d:
4f:77:98:31:cc:0c:20:38:73:4d:8c:e9:09:d5:78:
cd:df:a2:d6:91:e8:af:26:41:c8:7e:4d:95:06:bb:
d4:06:0a:cc:3e:4d:6e:2e:21:88:81:30:ff:60:1a:
1f:51:fe:23:69:35:83:d3:a0:2b:06:f1:a4:f7:0d:
eb:bb:a3:48:29:a9:19:75:3d:84:95:9d:45:02:5e:
65:72:0d:46:92:08:0b:15:b3:73:af:cb:8c:8b:99:
20:a5:fb:26:92:06:81:53:1a:ee:e3:b8:db:46:f0:
0b:00:8e:d7:92:cb:db:95:0b:a4:45:72:b8:b1:ca:
10:f9:d4:da:cc:e8:47:09:93:39:6d:bb:a0:bd:7b:
0b:2a:54:d0:d7:e3:1a:f6:33:42:e0:bb:b2:14:de:
d7:0a:87:f4:cc:3c:f9:c2:14:8f:59:cf:0e:aa:4d:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:86:B2:D7:94:B9:6A:F4:47:DB:B9:19:FE:E1:7B:3D:B9:4F:08
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rr6GsteUuWr0R9u5Gf7hez25Twg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.103.0/24
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
80:97:11:19:06:ad:20:92:72:2c:d2:36:d8:6b:56:28:76:38:
eb:e6:a8:d2:c6:e5:1f:12:7f:a6:14:df:0e:5e:60:99:fd:b7:
fb:0b:10:81:96:0a:d9:9b:bf:09:e7:50:72:17:e0:3f:79:06:
4f:af:d1:0d:df:28:b1:2d:a7:30:3b:a8:e0:e8:43:b4:02:34:
82:d5:38:50:cd:44:d7:b6:21:2b:d3:98:d6:5a:ac:d9:a3:82:
e8:02:0b:0e:0f:a9:a4:9d:19:73:00:ae:a5:cf:63:ac:06:83:
a1:03:d0:1f:65:d9:53:6d:da:84:98:29:ac:45:06:33:81:f7:
27:ea:6a:e8:a0:17:6c:7e:a4:7f:5c:55:6e:8c:c9:18:7e:5c:
e5:f8:16:2a:d6:56:a7:c2:ab:08:a0:cb:5d:63:10:05:d7:ad:
be:fe:ea:bb:8c:5f:a4:ca:77:ee:06:c6:a4:8c:c9:95:fd:9b:
07:52:6a:79:f2:03:fc:0b:29:b1:23:7d:a7:4b:1d:9c:86:e0:
be:f9:dd:a5:ba:23:0a:e2:24:55:60:7a:61:f1:f2:e6:ea:45:
b1:5f:b6:f6:f4:c4:5b:f5:23:5b:fb:e2:6b:54:95:76:a1:86:
3d:0a:e0:72:1b:c5:31:bb:12:d4:6f:b1:f6:04:4f:5e:2c:b7:
08:03:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org