Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a-Icb0HnnmRc7XEf1O8FSGWcE7Y.roa
File: a-Icb0HnnmRc7XEf1O8FSGWcE7Y.roa (raw, json)
Hash identifier: O/gYohBaG0ZdhUDhuP89aRTtUJTapAT93KfxLJ5VgWs=
Subject key identifier: 6B:E2:1C:6F:41:E7:9E:64:5C:ED:71:1F:D4:EF:05:48:65:9C:13:B6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189D0A40CBC273DBAA46A134F84EF5D06B6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a-Icb0HnnmRc7XEf1O8FSGWcE7Y.roa
Signing time: Mon 07 Aug 2023 15:35:59 +0000
ROA not before: Mon 07 Aug 2023 15:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 185.223.78.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:a4:0c:bc:27:3d:ba:a4:6a:13:4f:84:ef:5d:06:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 15:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be21c6f41e79e645ced711fd4ef0548659c13b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:de:52:04:23:01:36:dd:1f:11:3e:92:85:
79:e7:a2:0e:a7:91:bc:bc:0f:fc:37:d9:af:a5:9e:
ea:34:dc:de:4f:d8:40:81:fa:99:cb:98:e3:42:9d:
d5:e1:8e:35:50:d4:90:29:eb:2e:ae:ad:df:70:de:
52:30:88:db:97:39:a2:bb:88:2f:98:a2:42:8c:11:
18:9b:81:ed:3f:f4:a3:e5:36:11:da:30:8c:0b:7a:
cd:8e:5d:a2:15:82:5d:e3:a7:1e:57:a9:ac:11:20:
5d:f8:26:d0:cd:7c:d7:7f:fe:2e:83:27:9c:73:87:
be:5f:bd:f2:f9:1c:fd:0d:69:40:c8:c5:e2:d5:d0:
e6:44:e9:bf:6e:08:d4:92:72:fc:40:01:92:4d:66:
4c:64:dc:05:33:a8:39:98:26:c6:eb:7a:da:b1:b3:
95:54:38:c7:e9:e4:47:de:e8:ad:bf:7c:b7:5e:15:
0e:1e:b4:bd:21:52:c5:f6:8d:b5:d8:1c:e6:4e:42:
bb:33:65:0b:23:bf:35:b8:af:b0:a1:62:b5:3a:b4:
29:d8:56:e8:29:c2:0a:5f:c7:ed:20:48:99:bd:17:
e2:d4:ea:23:e1:61:a8:f5:e8:8c:7e:42:2c:3d:eb:
ed:8f:e3:ff:36:c3:4e:f9:0d:a9:b1:97:59:f4:d9:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:1C:6F:41:E7:9E:64:5C:ED:71:1F:D4:EF:05:48:65:9C:13:B6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a-Icb0HnnmRc7XEf1O8FSGWcE7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.78.0/24
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:11:d1:7d:d2:ed:69:5e:d4:bc:b5:c9:51:22:f2:d7:34:40:
b1:ff:ad:0c:37:f7:88:91:e8:9e:2a:9e:7e:61:8e:de:40:f5:
f7:f8:b2:db:1a:67:a8:28:d1:84:0a:87:63:bd:07:f1:10:a8:
fd:13:b2:9e:ad:bb:d9:5d:32:05:51:07:38:ec:ce:e8:66:c0:
e7:68:59:1f:c6:17:60:a1:c6:7d:d3:af:36:f5:31:06:87:da:
21:08:dc:3e:7c:78:c5:36:99:c2:a1:69:10:1f:be:2f:47:15:
6b:97:7d:85:3e:91:bf:96:a7:37:4b:92:81:6b:02:cb:cc:47:
8b:a2:21:78:67:3c:03:75:9e:c7:45:74:f1:35:ed:0f:35:75:
f4:85:59:8c:8a:88:7b:f1:bc:c2:cd:c8:33:c6:ca:a4:e3:1f:
c4:5a:8e:72:ba:07:06:7e:cf:b6:53:c0:ec:b9:05:fb:eb:62:
e5:f3:00:a7:e0:27:35:ed:d9:8e:76:e8:ae:89:b5:b8:ec:34:
e9:69:27:57:e7:4c:74:4b:f8:65:41:f9:7f:6b:63:c2:47:57:
a3:c6:72:d5:5d:f8:6a:b3:0b:49:c1:47:70:a8:b2:28:1d:e6:
8b:8e:d4:ff:47:c1:99:eb:61:de:b0:06:ad:58:ce:0c:9d:5d:
86:0d:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org