Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XaN7vpQSjNfCgW8ky9s87j87oHc.roa
File: XaN7vpQSjNfCgW8ky9s87j87oHc.roa (raw, json)
Hash identifier: R7fq2ze1Fn81cEOynPUWq32KOMrc6zOcJvsIuXLqhLY=
Subject key identifier: 5D:A3:7B:BE:94:12:8C:D7:C2:81:6F:24:CB:DB:3C:EE:3F:3B:A0:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189C021F7FF1A4FA3078890A0CDF39BDBC6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XaN7vpQSjNfCgW8ky9s87j87oHc.roa
Signing time: Fri 04 Aug 2023 10:39:58 +0000
ROA not before: Fri 04 Aug 2023 10:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 185.227.145.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 15:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:21:f7:ff:1a:4f:a3:07:88:90:a0:cd:f3:9b:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 4 10:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5da37bbe94128cd7c2816f24cbdb3cee3f3ba077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:82:ed:df:48:17:0a:43:e9:a3:a4:ba:10:
68:34:48:5f:80:00:ea:38:5b:36:55:71:23:fc:15:
d0:3f:fc:f4:99:14:8d:53:77:02:40:ad:d5:5a:8b:
f8:fa:03:01:f0:74:22:fe:81:38:13:df:9a:41:2a:
be:f7:da:d4:fe:a5:8f:fc:29:a0:ae:8f:e9:f6:87:
7c:27:1a:b0:6e:a3:43:fe:a1:31:5e:5e:00:50:3e:
4c:f2:04:b0:7f:18:05:21:38:be:e9:28:29:10:73:
ee:ae:66:33:f6:63:6d:21:5d:6d:61:2d:8f:51:10:
3b:36:94:60:bc:2a:22:64:e4:ed:b5:f6:0f:ad:c7:
f4:05:a0:1b:2b:25:d0:a4:b4:14:7a:6a:25:ad:1d:
ee:57:8a:a3:44:4d:41:7f:4c:44:81:c5:d1:c5:58:
dd:61:7d:05:29:82:63:db:1c:c9:d2:21:a5:44:3f:
56:ac:ae:42:c4:a3:54:21:d6:04:d4:20:e7:94:9b:
57:da:04:88:fe:74:25:fa:22:1c:ed:23:e2:d6:02:
ce:71:c5:8e:d7:69:c4:27:f3:57:85:24:76:55:ed:
97:9f:80:07:e9:f6:32:89:2e:0f:0c:55:75:9d:e1:
84:38:b7:a3:84:1d:9a:33:92:39:22:af:54:27:4e:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:7B:BE:94:12:8C:D7:C2:81:6F:24:CB:DB:3C:EE:3F:3B:A0:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XaN7vpQSjNfCgW8ky9s87j87oHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/23
Signature Algorithm: sha256WithRSAEncryption
52:d7:79:1b:19:fe:88:63:2a:54:47:6e:e6:2c:fd:5d:54:49:
4c:2a:5d:1c:16:b0:0e:46:66:b2:b0:23:20:55:a4:3e:46:ce:
e0:85:94:f1:d2:44:15:cc:98:1a:6e:09:47:d6:83:52:ef:7e:
ee:d6:7d:6e:55:8f:e8:5d:ea:86:fe:90:6b:4e:df:fa:cf:32:
52:37:96:1e:61:d6:15:a1:e8:4c:d7:4f:61:af:e8:78:93:49:
c7:b5:5e:5a:ea:44:f2:e6:4d:d9:4f:8e:7b:b4:a8:24:e3:49:
6b:e8:46:21:b7:0d:5c:8f:0b:c5:c9:10:20:da:07:99:88:34:
25:ea:1e:15:b0:83:94:50:b2:d5:45:eb:6e:41:89:48:e8:44:
02:c8:4d:f4:c6:da:38:5a:31:fa:22:b3:db:fd:83:f4:cc:8c:
83:95:dc:b4:b4:5e:82:d6:c1:7a:c7:33:8c:8a:95:28:51:bc:
4c:3e:7c:86:4b:97:fe:65:9d:1e:52:cc:44:c3:c2:c4:36:cc:
bc:b7:83:04:4f:29:55:af:d7:ca:d3:0b:dd:30:17:d0:64:74:
38:98:e6:7c:79:fd:b2:82:8a:bb:3c:87:69:c5:39:40:4d:43:
b2:dc:ef:55:c6:5a:8c:b4:4e:92:80:ac:b3:45:d8:77:b4:08:
c9:19:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org