Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WzPm1ymuOn2GswU--oMA45Mu50w.roa
File: WzPm1ymuOn2GswU--oMA45Mu50w.roa (raw, json)
Hash identifier: 3Ykq+jJYyOGblMW8NGGDdOGOpw2l0vcUP/+bb78I7ws=
Subject key identifier: 5B:33:E6:D7:29:AE:3A:7D:86:B3:05:3E:FA:83:00:E3:93:2E:E7:4C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CEE1C4C6E97673FF9E5465ED8A38571A3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WzPm1ymuOn2GswU--oMA45Mu50w.roa
Signing time: Tue 09 Jan 2024 12:04:41 +0000
ROA not before: Tue 09 Jan 2024 12:04:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 185.230.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 11:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:1c:4c:6e:97:67:3f:f9:e5:46:5e:d8:a3:85:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 12:04:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b33e6d729ae3a7d86b3053efa8300e3932ee74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:39:c6:26:30:53:7d:79:e1:bb:16:36:3f:
24:ad:2b:e4:c4:e0:38:92:1b:07:e4:fb:b2:d5:b0:
ee:84:58:9f:99:1a:f9:f6:e4:9f:09:81:69:47:2d:
2c:95:24:3d:4e:88:74:79:87:05:cf:71:cf:88:e5:
8b:08:f6:36:d8:25:8f:55:b7:42:ae:e1:99:22:0e:
48:94:d2:a6:2c:4c:d0:d5:f1:e1:cc:1c:15:e4:14:
7d:9a:74:67:a6:e1:52:87:f6:8a:ea:16:b6:71:9e:
3f:0c:95:97:a3:2a:4d:11:ec:6d:0f:b0:2c:dd:d8:
5f:02:fc:ae:8d:c1:21:7d:9d:11:67:18:58:3b:1b:
75:4f:6f:30:f5:bc:71:5c:89:e8:3a:2d:0d:79:9e:
22:52:6e:2b:b0:65:7a:d1:33:70:6d:c6:b5:8b:4e:
23:0c:96:36:f1:2e:cd:b5:75:05:ba:de:2c:2d:04:
e8:48:93:f9:53:25:b6:1d:d9:a6:38:b9:ca:2a:26:
35:bd:02:76:76:89:20:eb:bd:c0:37:b1:ee:91:22:
2c:72:4b:ec:48:d4:26:c9:93:47:c6:00:53:c3:a1:
16:be:98:63:19:b9:d0:8f:6b:44:27:11:19:85:a6:
99:4c:8c:8e:09:56:8a:c7:95:ab:70:1a:6c:e6:14:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:E6:D7:29:AE:3A:7D:86:B3:05:3E:FA:83:00:E3:93:2E:E7:4C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WzPm1ymuOn2GswU--oMA45Mu50w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.54.0/24
185.230.67.0/24
194.76.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:14:ab:e7:9c:83:7c:2e:7d:19:e3:c3:d6:1a:23:2d:11:80:
6a:16:ca:fa:52:c0:45:61:e2:df:70:75:a2:a9:7e:4c:fa:e5:
4e:dd:51:4d:c4:e8:f9:11:a8:35:b4:62:2f:e9:8e:a6:d5:c1:
09:41:e6:40:10:2a:92:63:d8:af:55:ce:e6:d6:d5:7f:97:f7:
0b:bf:e0:0a:c1:77:a6:bd:41:f3:be:6f:52:69:93:22:55:e3:
c3:a8:4e:23:92:14:d5:56:ae:6d:6b:5c:70:43:1a:ea:88:8a:
9c:06:c6:a8:87:5b:5a:d3:21:77:1b:56:0b:a6:f0:4c:da:67:
89:af:72:0d:74:35:1a:45:15:0b:81:40:ec:57:a5:41:df:2f:
0b:40:cd:98:1c:b6:a8:f7:29:42:e4:af:23:69:90:bc:1d:7d:
12:55:09:c8:6b:1f:f4:00:e5:c2:9c:45:33:57:b5:50:24:69:
d8:29:6e:ee:a3:7a:fd:f2:9e:d0:36:bd:36:5e:4c:2c:d0:b1:
14:82:a3:d3:91:83:b3:b9:37:ff:95:75:e7:41:ef:cf:9f:73:
4b:e8:88:4a:69:34:63:d7:83:54:e2:51:b2:f1:a4:4d:a3:ff:
fe:7e:93:b0:e3:f6:31:6d:f3:8b:55:17:46:a7:97:64:1b:d2:
f2:02:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org