Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c6vYTdDVakdDrmJJ4V39rUBGRPA.roa
File: c6vYTdDVakdDrmJJ4V39rUBGRPA.roa (raw, json)
Hash identifier: lc4N7Y0Pa3tsKA9UA2tgA0EsduzCplIetoKRHFPC7pI=
Subject key identifier: 73:AB:D8:4D:D0:D5:6A:47:43:AE:62:49:E1:5D:FD:AD:40:46:44:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01886DCCE64DE40A07082B21D0E2946A3D1A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c6vYTdDVakdDrmJJ4V39rUBGRPA.roa
Signing time: Tue 30 May 2023 17:55:24 +0000
ROA not before: Tue 30 May 2023 17:55:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.240.122.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:cc:e6:4d:e4:0a:07:08:2b:21:d0:e2:94:6a:3d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 30 17:55:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73abd84dd0d56a4743ae6249e15dfdad404644f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:82:f0:8e:0e:a7:91:8d:a1:a9:52:31:74:
2a:63:de:8e:71:e8:35:d5:04:9e:3b:fe:40:dd:6d:
6f:0a:7c:2b:f6:ed:07:dc:a6:a8:90:7f:8f:dd:d8:
b8:2b:64:b3:86:c3:d3:90:a2:e3:8c:a0:00:0f:74:
fb:db:90:7f:56:ee:68:cb:bb:bc:8c:89:de:c7:ca:
25:df:1e:77:21:8a:df:c9:02:90:d8:a0:a9:30:94:
e6:f0:74:64:73:7e:b7:01:58:95:30:32:44:28:3a:
e7:be:39:df:48:4b:59:58:dd:1d:98:42:4e:22:38:
2e:d5:c3:d4:a2:b4:61:91:87:4c:9d:39:e3:4d:01:
9c:eb:cf:ea:89:82:ad:bb:02:15:ca:78:0c:00:55:
27:1a:07:57:60:7f:a5:95:30:94:79:18:e5:6c:a9:
00:f5:ee:04:dd:47:0f:48:7f:81:4a:73:09:6b:26:
84:96:8c:c2:ce:e8:dd:42:3a:57:4b:81:b0:9c:65:
68:23:69:94:81:82:e7:34:ba:aa:55:2e:aa:12:1d:
7f:db:e7:37:06:8f:f6:6f:1b:f4:f7:75:23:d5:a8:
67:ea:0b:97:fe:85:a4:f5:78:3a:44:34:73:63:62:
83:80:5c:e8:13:8d:fc:e4:a6:83:27:6c:61:cd:45:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:D8:4D:D0:D5:6A:47:43:AE:62:49:E1:5D:FD:AD:40:46:44:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c6vYTdDVakdDrmJJ4V39rUBGRPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:26:fe:d9:69:94:55:f1:49:8f:41:d4:8b:ba:1a:e8:01:28:
95:ff:64:1d:65:4b:97:e1:42:0a:55:8f:d2:8d:2e:f7:d2:7c:
92:f3:67:9e:48:bf:17:b5:8e:75:15:82:66:53:f7:1f:9c:da:
1b:38:ea:5c:63:f4:13:12:00:93:48:64:eb:59:b2:20:f2:d2:
b3:da:66:e6:78:19:16:82:61:07:59:91:4a:06:53:51:8b:74:
66:0a:91:94:f5:c3:f4:9b:81:da:ba:bc:a1:4f:8b:88:24:7c:
c3:96:17:76:dc:b8:4f:c8:cf:c9:c6:04:c8:eb:0d:18:4f:0e:
25:fb:84:c8:e6:80:9e:c2:7e:27:39:6d:5b:48:60:2a:70:22:
57:6d:f5:d9:93:e0:45:37:7c:65:85:e9:26:f1:2d:c9:3d:38:
4a:ca:00:39:53:ee:fa:84:29:d3:9f:fe:44:d3:41:25:bd:9a:
ed:4b:d5:b5:c9:86:d4:c2:2f:f5:46:a8:10:51:fa:61:48:c9:
26:b2:a0:f1:c9:af:3b:be:cd:7f:e0:b2:48:0c:5a:bd:35:47:
f9:3d:fe:2b:e9:b5:1b:d9:2a:09:c4:63:12:9d:41:a0:22:94:
b8:3d:b0:3a:5a:26:dd:06:b6:bf:7c:0c:11:d1:5c:05:6e:cf:
5a:20:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org