Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RxFr43GEhbGRQiTft1CQr38zrWc.roa
File: RxFr43GEhbGRQiTft1CQr38zrWc.roa (raw, json)
Hash identifier: gYBP6I6qGlW7+FHf697SUlDPNclyDga4xnKbaUJeqz4=
Subject key identifier: 47:11:6B:E3:71:84:85:B1:91:42:24:DF:B7:50:90:AF:7F:33:AD:67
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B1E1D43D6F59C5432026D54AE2C8AC210
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RxFr43GEhbGRQiTft1CQr38zrWc.roa
Signing time: Wed 11 Oct 2023 09:41:56 +0000
ROA not before: Wed 11 Oct 2023 09:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.210.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Dec 2023 11:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:1d:43:d6:f5:9c:54:32:02:6d:54:ae:2c:8a:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 09:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47116be3718485b1914224dfb75090af7f33ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:d5:71:09:7a:05:91:6f:64:1b:fc:4a:a5:
f1:c2:af:d3:9b:79:c6:d9:b2:e4:01:9a:88:64:6c:
41:7c:7f:39:c7:90:17:21:21:6b:d1:6a:3c:0b:73:
fa:9b:b2:33:d0:49:4d:c3:f9:3f:20:36:a2:5f:98:
4e:54:a2:83:d7:08:c9:c4:1a:cc:ad:8d:62:75:85:
60:c2:7f:3c:74:0c:4f:8a:8d:62:5f:ee:e9:18:fc:
2f:97:91:99:d1:cb:03:ef:8f:e3:2b:70:31:3e:76:
5a:f1:2a:4b:ca:06:94:0d:46:40:72:d8:c7:6d:b0:
50:91:9d:f6:04:a4:fa:d4:cc:d7:dd:cb:49:dd:06:
6c:34:85:a9:b6:c5:27:d0:54:08:a6:70:18:42:07:
78:11:4f:69:25:d3:75:ab:94:82:8c:0d:89:70:f6:
66:ee:a7:52:eb:5c:1b:0b:af:7b:ff:10:33:22:1d:
16:6d:f3:4a:c8:fb:8d:c1:79:c8:ca:ca:1a:5a:a8:
2a:02:c0:4b:03:f5:2f:b3:35:5c:75:07:da:13:75:
61:fa:55:aa:e9:11:e8:7f:24:c7:7e:8a:36:bd:c3:
13:7a:d5:e0:ab:0b:1f:7a:74:2d:bb:2d:ce:56:7e:
3b:5e:59:ab:01:00:5e:d7:fa:9c:6d:0f:a9:7c:73:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:6B:E3:71:84:85:B1:91:42:24:DF:B7:50:90:AF:7F:33:AD:67
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RxFr43GEhbGRQiTft1CQr38zrWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.235.0/24
Signature Algorithm: sha256WithRSAEncryption
26:24:96:a4:20:96:76:a3:01:ed:1f:94:f2:ea:0d:b8:c7:1b:
51:08:bf:7b:61:a3:67:c8:2a:ab:b1:c0:78:56:37:6b:8c:aa:
78:2c:ad:23:5c:ae:d6:29:0a:2a:f5:db:a5:47:b7:a8:69:89:
dc:cc:fd:a5:c0:8d:fd:5f:93:fa:f2:9e:bd:72:a2:bc:53:d8:
33:4f:e9:71:57:dd:ca:ce:4b:c7:fd:eb:66:94:46:e1:4b:c5:
b4:9b:9b:03:3f:7c:f5:84:9d:95:c1:1d:17:12:1c:d4:93:33:
0d:91:85:45:18:b6:af:57:25:48:43:b0:c2:90:d7:32:95:59:
6b:15:9d:29:49:ce:09:22:83:ea:cb:9f:73:70:9c:2c:66:e3:
7c:5b:35:0b:d0:1e:9b:24:69:6f:69:18:0e:28:6f:07:52:e3:
ad:37:b3:b9:81:95:57:91:ed:10:8c:65:ee:a4:5d:c7:96:60:
bb:ae:0f:e2:b9:e0:97:f7:af:0c:d3:f2:42:0f:81:b1:56:c3:
2f:46:2f:12:94:44:c5:41:c7:d1:f8:02:7b:4b:1b:4b:c1:14:
f7:da:6d:e9:e6:69:8c:1a:97:12:8f:ac:f3:c9:d7:02:9a:7c:
4a:a2:c9:12:28:2f:c2:55:9c:10:2b:fe:ea:89:5f:50:4b:e7:
34:f3:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org