Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V_fYjD0Zl-Wxuy54TqNnJqGLmeE.roa
File: V_fYjD0Zl-Wxuy54TqNnJqGLmeE.roa (raw, json)
Hash identifier: 9qzIh20C0lT0QA/LOX0nSoE3reMKvg+GZOvN0Km1nIk=
Subject key identifier: 57:F7:D8:8C:3D:19:97:E5:B1:BB:2E:78:4E:A3:67:26:A1:8B:99:E1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CE889B6D7CD9945AB29BD9D11E9FFF2BA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V_fYjD0Zl-Wxuy54TqNnJqGLmeE.roa
Signing time: Mon 08 Jan 2024 10:06:28 +0000
ROA not before: Mon 08 Jan 2024 10:06:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.223.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 12:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:89:b6:d7:cd:99:45:ab:29:bd:9d:11:e9:ff:f2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 8 10:06:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57f7d88c3d1997e5b1bb2e784ea36726a18b99e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:24:0d:0e:74:6a:55:8e:2c:05:ed:7e:4a:
63:7e:92:48:b9:00:b8:b7:50:1b:07:3b:c3:f8:41:
ca:ae:9a:97:b5:38:a7:16:00:2d:a8:40:4d:95:89:
d3:2f:ac:00:a7:da:26:b7:4a:fb:3d:a4:45:52:dd:
b1:2f:96:f5:c2:b4:14:21:6d:11:b2:98:25:14:28:
07:a8:2d:da:30:ba:b5:3d:8d:a8:be:df:dd:34:52:
40:ef:b5:8f:d0:74:21:f9:5b:bc:ff:3d:8d:44:ce:
70:47:9b:11:70:76:6b:b0:f1:8d:b1:96:61:bf:da:
7d:48:8b:03:aa:79:94:e8:ef:43:95:36:19:54:90:
ac:fb:fa:b2:6d:12:12:ab:0c:df:4f:f7:d8:b2:00:
17:9e:ea:05:94:3c:ca:ec:86:1f:6e:b0:6d:3d:09:
97:d7:14:57:b8:1c:ab:55:cd:28:01:53:9d:eb:89:
21:22:a2:6c:d8:1e:a5:29:ba:6e:bb:e7:54:d8:da:
e3:f2:08:c3:40:bb:8b:cd:5b:09:ce:40:8d:c9:9c:
aa:13:63:81:f7:50:62:0c:81:cd:f2:66:52:98:e3:
c8:a3:5b:11:2f:b4:21:87:48:27:8f:6e:f4:c8:6a:
f8:f9:d5:23:2e:31:98:69:64:00:b6:c2:b0:91:9c:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:D8:8C:3D:19:97:E5:B1:BB:2E:78:4E:A3:67:26:A1:8B:99:E1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V_fYjD0Zl-Wxuy54TqNnJqGLmeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:29:48:9d:f0:ed:56:d2:07:fe:fa:61:8b:0c:cf:96:c1:6e:
3a:13:62:39:18:d4:4a:c7:98:84:10:75:65:7c:42:c3:30:60:
7e:84:e9:08:c0:9e:27:54:c6:c5:5c:96:12:81:78:9e:2b:b0:
23:8c:c1:22:f5:ad:4f:47:f9:4c:8a:34:d3:c1:7b:a5:61:19:
3e:8e:de:3c:a9:c2:22:8a:62:7b:86:fe:fc:64:27:9b:0b:47:
ed:20:65:7b:fd:d3:86:25:d1:73:9e:76:73:3a:01:44:f2:d1:
e8:9d:36:79:ce:e5:e5:1f:7e:5c:3f:d6:2b:2a:91:d6:e6:5f:
12:7b:1b:3b:ac:37:f6:2b:9e:4b:7a:68:68:52:a1:39:f7:9a:
5f:d4:4f:df:9f:76:08:4e:f6:e9:95:eb:98:60:f1:85:db:90:
15:ab:f8:43:8d:b0:e0:99:36:bd:8d:6b:88:cf:25:08:4d:d8:
f3:11:6a:a4:cb:cb:c3:7a:fa:59:fd:bc:ff:9f:db:d0:18:21:
fb:4a:50:57:53:20:5c:98:b1:39:0c:f2:1d:89:a0:e7:2c:69:
cb:a1:77:d5:b5:de:bf:fc:55:6a:22:2d:74:ee:14:7b:af:73:
73:27:7d:9f:32:4f:38:f5:f5:46:09:8e:e8:ae:98:fe:00:b8:
38:f0:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org