Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X51vvvQyMCH7hO4Ztrm6TKr0dLk.roa
File: X51vvvQyMCH7hO4Ztrm6TKr0dLk.roa (raw, json)
Hash identifier: EM/p3TRMLz3ybLdlb/o5e3wsMrdDl+I8Qq3G2rAi3/Y=
Subject key identifier: 5F:9D:6F:BE:F4:32:30:21:FB:84:EE:19:B6:B9:BA:4C:AA:F4:74:B9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62BFCEC639F480982FAD4DAEBF532
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X51vvvQyMCH7hO4Ztrm6TKr0dLk.roa
Signing time: Mon 02 Jan 2023 09:00:42 +0000
ROA not before: Mon 02 Jan 2023 09:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 185.223.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2b:fc:ec:63:9f:48:09:82:fa:d4:da:eb:f5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f9d6fbef4323021fb84ee19b6b9ba4caaf474b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:6c:f2:9e:8e:eb:13:d5:d4:37:f4:f4:05:
a5:43:af:74:b7:cf:66:59:a4:7b:a3:16:1a:9b:2b:
6d:d0:01:54:1a:78:59:9b:80:d2:cb:85:2e:97:1b:
c9:53:cf:e9:3c:6e:bc:de:da:55:4e:17:26:54:92:
ab:d0:3b:52:9d:73:c7:d1:20:98:dd:3b:a3:1d:c1:
42:e7:d6:b9:b4:09:19:13:59:5c:c6:e6:0f:89:9e:
93:f2:b7:af:b2:61:46:71:e0:8d:f7:99:0e:51:7d:
e3:54:79:25:c7:e5:90:8a:30:66:66:3e:7a:c7:76:
b3:2f:97:38:4e:6b:75:1d:76:89:e2:6f:1c:81:1b:
56:ff:f0:92:ad:6a:6d:c2:5c:86:d5:81:d4:a9:80:
c9:12:14:dc:81:1b:2f:aa:6b:bd:b6:3f:8e:ca:db:
5e:f1:c9:ce:7d:80:1a:e6:5c:c6:41:94:92:8c:cf:
d4:26:10:5e:b7:0d:d0:67:df:67:5a:e5:d1:78:8e:
5d:f3:d7:fc:2a:8a:4c:01:b1:ec:91:28:8b:e1:09:
61:62:9f:a2:30:d2:75:5a:ff:86:7a:27:ee:ce:ac:
50:5b:71:74:0e:f9:c7:d8:c0:a1:47:41:e4:c2:72:
6a:db:be:05:89:cd:5c:dc:7c:f5:81:61:46:dd:51:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9D:6F:BE:F4:32:30:21:FB:84:EE:19:B6:B9:BA:4C:AA:F4:74:B9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/X51vvvQyMCH7hO4Ztrm6TKr0dLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.153.0/24
Signature Algorithm: sha256WithRSAEncryption
31:98:e4:02:06:e3:f1:5c:d6:6c:60:95:9f:99:65:f6:ba:84:
21:e1:30:8e:e5:a6:58:0a:e7:fb:d2:ce:2f:77:30:21:98:1f:
be:4c:09:2f:34:60:a5:9e:30:fe:9e:db:a0:5c:c3:54:e2:b0:
90:7c:8c:9f:e9:93:ca:cf:0f:44:01:16:ae:e5:64:0b:bc:00:
e4:61:4f:12:87:1b:0c:05:1c:73:f4:c9:56:1b:34:07:df:ea:
90:d2:6e:66:a1:0f:ef:f6:b9:92:f5:88:d8:0e:7b:fa:f3:49:
15:d1:d9:c5:a1:ad:d0:55:44:4d:94:47:93:58:19:9e:22:c5:
8e:55:08:c8:14:8f:38:74:3a:b9:4f:70:08:96:ce:c2:10:c5:
f7:e4:6f:12:85:e5:c6:04:6b:63:73:1c:e9:f7:0d:61:96:a5:
34:a9:c1:26:a8:d9:41:6f:a1:4b:42:76:86:fe:9c:d7:93:92:
cf:bf:9e:44:ca:ee:7c:4a:87:1f:89:52:52:f6:a0:af:bf:89:
6b:f6:d5:d5:35:d4:b4:17:f9:3a:c6:76:17:cf:16:ca:72:db:
d3:eb:80:08:2a:b8:53:d3:f6:77:fa:e9:df:e7:19:d3:51:c7:
1c:fc:02:94:05:91:f1:8b:3a:4d:b2:a2:dd:7b:22:77:97:2f:
79:f8:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org