Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xsf0lZK1YrntTGp1yypOGPIPhsE.roa
File: Xsf0lZK1YrntTGp1yypOGPIPhsE.roa (raw, json)
Hash identifier: ld262NPWOZ4sAnmvhV+0LwFreA6GoBngESIrRR/cIGY=
Subject key identifier: 5E:C7:F4:95:92:B5:62:B9:ED:4C:6A:75:CB:2A:4E:18:F2:0F:86:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C43A8A68C655CE9B42A0FAE1ECF3945D1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xsf0lZK1YrntTGp1yypOGPIPhsE.roa
Signing time: Thu 07 Dec 2023 09:42:55 +0000
ROA not before: Thu 07 Dec 2023 09:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 16:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:a8:a6:8c:65:5c:e9:b4:2a:0f:ae:1e:cf:39:45:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 7 09:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ec7f49592b562b9ed4c6a75cb2a4e18f20f86c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:87:90:41:92:3a:e2:82:dc:e2:f9:88:f5:
01:f0:36:43:26:79:21:59:46:96:da:d6:45:f2:02:
75:71:61:28:d7:7d:da:16:90:30:60:1f:30:a7:6a:
39:f9:8c:da:74:67:45:e3:e8:9c:f5:75:66:16:1f:
fd:a6:04:fa:f4:4f:74:a2:2a:7b:13:6a:9f:d4:4a:
bf:e1:85:d4:e1:67:cd:68:a8:53:7b:ed:c5:31:f3:
5d:64:47:5b:c3:c0:5b:c2:fa:c4:21:b6:54:7f:f9:
f4:a8:03:db:86:65:bd:ae:8f:0d:5a:7f:e6:bb:a6:
cf:a1:05:ed:50:3b:ff:3a:3d:76:75:4a:c5:29:97:
51:94:15:94:7f:5a:21:7e:1e:cf:12:0b:52:f4:6c:
a7:eb:03:e6:82:5e:ac:50:af:ab:d0:41:c7:a7:53:
a1:40:2f:9c:95:3a:3f:07:04:a7:8b:34:1b:e2:c6:
4a:8f:51:9e:6b:ec:36:d4:a9:63:07:f2:e8:4c:fe:
80:d0:7e:34:80:90:ea:b0:b1:73:18:62:6e:18:d1:
80:4b:30:fa:0e:35:a1:5d:fc:05:b1:7a:f1:3b:6a:
1d:31:4c:f9:b7:20:25:c7:13:f3:78:92:ee:8c:4b:
b5:88:6b:27:ad:df:92:41:12:e5:0d:a9:6e:86:80:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C7:F4:95:92:B5:62:B9:ED:4C:6A:75:CB:2A:4E:18:F2:0F:86:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xsf0lZK1YrntTGp1yypOGPIPhsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:92:df:80:65:a3:ee:32:e0:02:a5:ff:f8:f7:05:5e:eb:22:
4c:ab:f0:4a:a6:45:df:fd:f5:64:48:e8:b2:ee:3d:98:3c:95:
7e:1d:d1:60:5e:dc:4e:81:8e:d1:d5:61:20:49:41:03:80:ea:
06:0f:f6:90:5c:eb:a7:d0:0a:7c:cb:4b:3c:e9:9b:9e:65:59:
bc:2f:d5:68:c6:7d:d5:54:79:7b:e1:ff:d7:b9:88:69:12:36:
87:92:f5:df:50:e4:6b:36:da:7a:e1:84:44:8c:09:39:59:dd:
d5:a5:25:e2:e3:a1:08:3e:7a:43:e2:97:7e:25:73:4d:74:09:
f3:e8:29:e0:00:c6:8d:b8:a4:57:05:c4:e2:ba:06:44:f4:c2:
71:30:ca:f5:56:40:6c:f9:92:4f:f9:f3:70:02:6d:e7:46:95:
93:85:d8:0f:a9:b9:e1:aa:0e:b6:4f:8e:5f:c5:ac:28:0b:2a:
63:a0:e6:e7:e6:d8:ff:df:3c:89:64:2b:44:c6:e0:32:1a:53:
0b:88:25:9f:e9:85:36:7c:af:17:25:26:43:d8:8c:a9:06:1c:
a4:d2:01:ff:0e:66:08:51:13:ab:6d:df:ef:b8:1b:bf:e5:3c:
1a:b0:f4:bd:0e:7b:70:e4:da:e5:ad:18:3c:1a:42:80:33:4a:
84:9b:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org