Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c1GzpLSbdu-BmFoHPU7EK86bDus.roa
File: c1GzpLSbdu-BmFoHPU7EK86bDus.roa (raw, json)
Hash identifier: fNTq0bKUWiEu3QhdAaNbnpTe7S0Alh12A00z3ASquxw=
Subject key identifier: 73:51:B3:A4:B4:9B:76:EF:81:98:5A:07:3D:4E:C4:2B:CE:9B:0E:EB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01896A4BE8E6B5D1B6D1EAAED84FF4B33D62
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c1GzpLSbdu-BmFoHPU7EK86bDus.roa
Signing time: Tue 18 Jul 2023 18:38:26 +0000
ROA not before: Tue 18 Jul 2023 18:38:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 185.226.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 08:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:4b:e8:e6:b5:d1:b6:d1:ea:ae:d8:4f:f4:b3:3d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 18 18:38:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7351b3a4b49b76ef81985a073d4ec42bce9b0eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fe:79:da:29:30:0f:9a:43:10:e2:20:af:dc:
73:bf:6d:77:e0:87:64:71:8b:d5:44:b8:b9:42:27:
b0:67:3a:da:a4:cf:27:18:6e:8c:a5:5c:a8:3f:33:
c1:00:db:9e:4b:82:a3:c4:a2:74:7a:83:90:96:62:
93:d6:ec:87:8d:e3:38:95:f1:a3:ea:5b:b3:b7:6a:
2d:53:0b:84:dd:2b:87:9b:01:8f:d3:78:c5:93:63:
42:cf:26:02:97:48:87:10:73:cc:e3:b7:30:2c:36:
7d:65:00:42:38:e5:79:2d:03:c3:4e:4d:19:b8:dd:
bd:d1:6a:4d:68:3b:d6:62:d8:1e:be:eb:6c:19:19:
96:61:63:01:ff:bb:4b:9f:32:f9:1b:e1:02:b7:dc:
25:f5:04:7d:00:bc:09:3c:a2:78:0b:91:e6:6b:b6:
8e:d8:d2:7e:ad:c1:54:cf:be:6d:c3:44:23:bd:be:
93:4f:b9:b7:a0:52:c6:d3:8b:04:a0:63:52:73:eb:
87:0e:6c:c4:2b:a8:53:63:da:3f:38:00:a8:b1:22:
d0:a5:a9:9d:51:86:46:ed:01:cb:3a:ee:a2:ec:ef:
c7:e9:4d:8f:d3:66:a7:fd:5d:0c:56:a7:73:4e:76:
f0:53:85:7c:d6:b0:12:8b:64:48:56:e9:21:c9:0d:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:B3:A4:B4:9B:76:EF:81:98:5A:07:3D:4E:C4:2B:CE:9B:0E:EB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c1GzpLSbdu-BmFoHPU7EK86bDus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:83:b9:8a:b7:76:ab:e0:6c:33:97:a3:a0:56:36:59:60:de:
34:8f:b9:24:b9:7e:2f:b7:99:8d:82:73:10:17:c8:06:0b:ef:
31:c2:e7:78:fb:37:49:77:3a:79:0a:de:f4:4b:ef:92:8a:70:
c9:45:92:55:12:9b:d6:0c:29:01:f6:08:48:a3:f7:88:37:59:
ea:67:c2:9f:6c:bd:93:a1:cf:a0:27:d3:e5:9c:fe:18:31:11:
1a:5b:8d:7f:54:df:76:1a:bf:f3:41:14:7b:d6:e4:99:0f:94:
50:cd:3e:45:b5:42:f8:47:7e:28:cd:52:82:22:27:f0:1f:c9:
51:32:be:93:00:41:88:03:e4:5b:ae:55:ca:20:ef:b0:04:a8:
b0:e0:96:d8:63:a1:c2:42:cb:8c:78:47:3a:66:54:38:24:79:
24:8c:07:a8:79:3e:30:c1:c2:5f:dc:e3:3d:fb:ab:e1:2a:8b:
78:62:f4:39:99:6a:38:61:c0:58:8e:9a:44:1b:9f:63:99:ad:
cc:c5:e4:77:51:09:3c:6d:a3:39:17:54:2c:5a:d4:71:d1:d7:
29:09:51:0e:e2:fc:84:36:3b:66:5e:ee:51:3e:62:59:d0:fd:
6a:cc:4e:ac:ec:89:fb:73:02:2a:4f:b0:36:1f:c2:d6:58:73:
0a:cf:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org