Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bonG-5ZuFFoEw4j36eYDj2D6ZiA.roa
File: bonG-5ZuFFoEw4j36eYDj2D6ZiA.roa (raw, json)
Hash identifier: 3pFyMiKwdJvwzwzD26wKALpLy169V3rzCjbbtUE3WfA=
Subject key identifier: 6E:89:C6:FB:96:6E:14:5A:04:C3:88:F7:E9:E6:03:8F:60:FA:66:20
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8029A8E3A5BBF607E79B64377533A21
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bonG-5ZuFFoEw4j36eYDj2D6ZiA.roa
Signing time: Tue 02 Jan 2024 02:31:03 +0000
ROA not before: Tue 02 Jan 2024 02:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216159
IP address blocks: 185.209.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:9a:8e:3a:5b:bf:60:7e:79:b6:43:77:53:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e89c6fb966e145a04c388f7e9e6038f60fa6620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:8c:ba:fb:e4:a4:7a:7f:dd:56:e9:bd:c0:
90:81:5c:3b:bb:8d:10:2c:82:0d:34:68:2b:5c:c5:
da:81:57:7e:73:90:22:72:63:42:1f:9b:98:b6:75:
aa:67:87:52:ab:5c:16:a2:27:e5:e2:3b:9c:47:7d:
7d:17:5c:cb:09:db:19:7a:77:f0:a4:69:df:61:44:
9c:9f:91:94:9c:23:5a:d2:c9:8a:1d:e8:07:d5:c4:
98:d3:76:16:5b:51:c9:eb:e6:38:a2:1a:35:93:43:
1b:da:20:10:d0:4d:6f:bb:bd:c1:ba:4a:02:6f:0c:
27:24:2d:58:1d:23:89:37:77:ea:93:c1:e0:e5:9f:
5c:4c:30:f8:c2:f4:97:7a:26:8e:b0:36:eb:be:1d:
8f:da:49:31:78:39:a2:d4:12:e1:73:45:bc:5e:6b:
91:83:c3:ac:32:c3:52:04:4f:af:83:7b:8e:0f:45:
d4:2f:a9:91:b0:c0:df:b4:cc:67:95:d7:71:d0:62:
8f:49:05:32:3c:8d:61:b6:73:b0:6f:72:a3:b1:06:
38:58:1b:de:6f:3b:84:9b:5e:2b:42:51:c6:65:17:
eb:fc:2f:c7:68:15:36:8b:73:6e:94:0b:37:87:bd:
05:15:63:94:ef:52:5d:60:dd:e1:2a:be:0a:ca:25:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:C6:FB:96:6E:14:5A:04:C3:88:F7:E9:E6:03:8F:60:FA:66:20
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bonG-5ZuFFoEw4j36eYDj2D6ZiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
82:98:f7:a5:39:b9:1b:c5:23:72:de:33:f9:ea:4a:4a:d8:28:
3d:d3:2c:a3:27:8a:75:26:c2:c8:27:d1:5f:6d:45:66:88:6e:
aa:0f:04:d1:25:d7:ab:34:40:21:78:0a:ab:45:18:fa:64:cd:
65:32:01:d9:50:df:91:fd:e2:49:c4:36:51:93:d1:a5:cb:3f:
fb:3c:c0:4c:80:94:20:39:8f:73:63:02:cf:7f:1b:16:c9:18:
2d:7a:7c:8c:ed:4b:68:98:23:bc:35:65:9b:1a:ec:5c:62:15:
4b:76:98:29:91:2d:a8:48:d2:bc:ca:7c:29:ae:aa:91:39:c2:
1c:b5:75:07:d7:49:52:6a:bb:72:17:8e:54:ba:8e:85:09:ff:
8b:38:09:cf:d9:89:fd:2a:c2:79:7e:70:a5:42:1f:2a:97:5c:
bb:7f:4f:e3:b5:f6:f9:9e:53:3e:e9:65:93:85:1a:9c:84:fe:
b8:28:90:d7:cf:fd:ca:e1:e9:62:bf:98:58:19:55:c9:d2:6c:
e7:51:c5:7b:bc:33:c0:29:9f:0e:0d:2a:d7:b5:dc:40:25:e0:
38:65:e0:7e:ff:c9:8d:31:a3:44:94:82:5e:09:46:e2:72:2f:
50:30:4d:b3:8f:1b:73:1a:4b:97:0d:05:fa:d5:5d:b9:e3:56:
02:29:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org