Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TrHVY4kwwiw4WhXx4FnYEOPQ-uc.roa
File: TrHVY4kwwiw4WhXx4FnYEOPQ-uc.roa (raw, json)
Hash identifier: CKDxa7eoCaEkSbnn9LfFjP2Clvmb7glCCMbe5+2zLgc=
Subject key identifier: 4E:B1:D5:63:89:30:C2:2C:38:5A:15:F1:E0:59:D8:10:E3:D0:FA:E7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B6DDEBE2B3CA1E137FBF2EE67B86A43E6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TrHVY4kwwiw4WhXx4FnYEOPQ-uc.roa
Signing time: Thu 26 Oct 2023 21:23:16 +0000
ROA not before: Thu 26 Oct 2023 21:23:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49600
IP address blocks: 193.37.65.0/24 maxlen: 24
194.35.41.0/24 maxlen: 24
194.35.42.0/24 maxlen: 24
185.230.55.0/24 maxlen: 24
185.230.54.0/23 maxlen: 23
92.60.35.0/24 maxlen: 24
193.37.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:de:be:2b:3c:a1:e1:37:fb:f2:ee:67:b8:6a:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 26 21:23:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb1d5638930c22c385a15f1e059d810e3d0fae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:4b:2c:af:9f:66:bf:62:83:76:46:db:65:
d4:09:5a:d6:b9:ad:4f:a0:a5:69:23:5d:4e:27:ca:
38:95:52:bf:83:f2:1c:43:72:4f:a3:8d:bb:4e:1d:
06:64:b8:ad:20:69:08:1e:7c:68:8d:e3:af:11:60:
81:a8:fc:6d:8c:9c:13:20:9e:e8:8e:b4:55:ef:b0:
25:33:25:77:38:e5:c5:e6:59:b5:4a:04:bd:f4:16:
0b:21:94:eb:5f:ae:1c:10:75:08:2e:53:f1:0b:f0:
84:5c:8d:fa:64:15:44:11:ef:59:a5:00:95:71:3d:
b2:28:ea:d8:d9:ee:4e:a5:30:8b:51:e8:80:bc:33:
b7:53:e4:61:f6:40:57:10:e7:d9:9f:85:06:b3:ff:
1d:5c:21:c0:90:87:f6:39:33:8a:96:d8:cc:f9:7d:
57:97:bc:cd:d1:1b:d8:c5:93:37:5b:4e:40:52:07:
7d:44:7d:6d:fa:d2:f9:7e:c2:a2:d2:81:37:00:ad:
b1:8e:b2:6d:b5:e3:f9:97:fb:76:ef:c9:c3:12:fa:
b8:e9:5b:24:fd:e0:d3:24:bb:44:ca:ab:a8:5c:db:
84:7d:e6:86:82:b4:5b:bb:9f:33:9b:0e:a5:94:14:
71:25:51:05:a7:4d:48:49:7e:cc:cf:ff:18:5b:ac:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:D5:63:89:30:C2:2C:38:5A:15:F1:E0:59:D8:10:E3:D0:FA:E7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TrHVY4kwwiw4WhXx4FnYEOPQ-uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.35.0/24
185.230.54.0/23
193.37.64.0/23
194.35.41.0-194.35.42.255
Signature Algorithm: sha256WithRSAEncryption
68:1e:40:18:8a:2a:d6:f1:1c:1f:fd:8a:77:1b:7a:43:15:db:
6c:1d:0b:3c:a3:82:eb:2b:ab:a8:71:6a:f0:92:93:73:1e:c6:
33:e5:24:98:e6:e9:b7:5e:d2:ac:ee:59:e4:1e:ee:b6:90:2f:
e7:d5:d3:3f:a9:30:f6:ef:a2:49:4d:a4:35:40:6e:9d:54:81:
88:27:9c:0c:74:1e:c4:d4:65:cc:b4:bb:47:9e:b2:f9:6a:3b:
14:27:a5:cd:5b:7a:59:e4:e5:cd:e3:fe:d3:df:20:26:50:9f:
63:16:d0:21:0f:7e:d2:53:9f:b4:37:14:c2:01:0a:94:e8:2c:
cc:81:27:a8:d1:7b:80:f6:f9:e3:5c:9e:a9:fb:fa:bf:9f:c9:
0b:0f:fa:fe:98:ce:47:7c:a4:dd:ab:54:7e:fe:ff:e8:b8:eb:
1b:a9:8a:a2:25:49:78:41:cb:9c:3a:46:f9:27:63:dc:f0:32:
76:a3:c9:c7:32:58:5b:87:cf:5d:12:f6:26:d8:30:cc:06:02:
65:90:6c:07:5c:43:4b:91:f2:88:0f:17:17:22:d1:98:85:5e:
6d:f7:e1:a6:cf:66:c2:0b:81:34:ec:47:98:e9:49:ad:8a:0c:
bf:a5:a8:42:91:61:9b:5d:aa:ad:e1:76:8f:1f:28:3b:b0:35:
c9:ea:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org