Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c7z5cmsOl6RPT6DZMxn1ifwZE4M.roa
File: c7z5cmsOl6RPT6DZMxn1ifwZE4M.roa (raw, json)
Hash identifier: 6DmeE8I0PgEJQcwUecpS6au/TJCt6aRO/F7+Hksx0Cg=
Subject key identifier: 73:BC:F9:72:6B:0E:97:A4:4F:4F:A0:D9:33:19:F5:89:FC:19:13:83
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DF98179A33A4D3EC4EADDA303117BE13D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c7z5cmsOl6RPT6DZMxn1ifwZE4M.roa
Signing time: Fri 01 Mar 2024 10:13:48 +0000
ROA not before: Fri 01 Mar 2024 10:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.121.12.0/22 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:81:79:a3:3a:4d:3e:c4:ea:dd:a3:03:11:7b:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 1 10:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73bcf9726b0e97a44f4fa0d93319f589fc191383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:c3:2e:bb:8a:b5:1d:b0:c7:99:b7:de:15:
9e:7a:4e:0e:67:8c:43:4c:0f:c6:56:6f:31:5e:c7:
e0:60:9a:12:69:1d:93:2e:7c:a4:33:62:c1:cc:d4:
72:4f:d2:5b:b8:e5:6e:39:ff:3a:71:50:86:35:c2:
73:0e:b9:12:e8:30:6d:d1:c5:8a:99:c4:37:67:bc:
42:53:af:0b:79:f8:26:0f:50:41:ed:d8:67:77:0e:
6a:14:39:44:08:2b:46:47:4a:4c:36:12:b6:b5:f9:
46:b9:41:7f:4f:e8:bc:8f:bd:5c:25:dc:70:9d:6d:
05:21:9f:c5:f9:1b:a8:c2:aa:70:65:44:13:90:da:
b4:d7:53:c3:23:6b:a9:bd:7b:6a:73:80:b1:d4:6b:
c1:93:f9:a5:4a:f9:ec:0d:23:b0:5a:06:52:c3:5e:
c0:11:d7:8b:49:b3:02:04:2b:7f:04:52:99:0c:2a:
12:6d:8c:89:c4:f4:c4:53:be:46:9a:b3:1a:d5:67:
0f:3a:56:2c:00:8b:45:83:a2:ed:4b:0c:ef:05:a0:
55:f8:4d:ab:d8:14:04:ee:47:ba:2a:7b:cf:87:e6:
2f:bf:7c:6e:e0:a2:ee:84:0e:0d:5e:a3:a2:00:a1:
6b:a0:1b:23:7d:ef:93:cc:b0:50:3f:8d:55:82:5d:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BC:F9:72:6B:0E:97:A4:4F:4F:A0:D9:33:19:F5:89:FC:19:13:83
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c7z5cmsOl6RPT6DZMxn1ifwZE4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/22
185.199.159.0/24
185.206.248.0/23
185.206.251.0/24
185.209.36.0/23
185.209.74.0/24
185.210.152.0/22
185.218.101.0-185.218.102.255
185.223.76.0/24
185.223.80.0/24
185.225.2.0/24
185.225.22.0/24
185.226.107.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
84:44:41:18:40:9d:ad:a2:71:c5:cc:2a:fd:5f:8b:d9:fd:e4:
68:5c:28:12:56:e6:ba:a2:a7:ee:43:11:cd:66:93:c5:ea:bb:
07:82:94:ff:a0:45:ef:3b:75:ec:0a:f4:29:e0:99:8e:54:5d:
75:70:82:5a:49:30:6c:44:08:c5:b2:9f:d5:c3:6f:80:48:3e:
2b:49:db:cf:3b:54:4f:08:bc:ac:9d:60:33:0a:e0:33:da:1e:
c9:33:7f:9c:fc:33:b1:51:33:bd:59:d4:b1:62:d1:48:8d:e6:
d2:ca:c1:63:58:0b:98:2d:e4:81:18:ae:35:2a:c7:ef:52:c3:
ea:8c:3e:4b:57:e3:2e:f2:14:0c:2e:db:14:c3:8c:61:c0:5d:
13:12:56:8c:0c:e4:28:eb:66:98:83:93:14:9d:01:5e:5a:64:
4a:04:89:39:be:d1:3a:50:75:ad:f3:13:be:c0:9c:bf:b1:03:
6f:2e:5e:8a:47:31:2c:55:fa:19:c8:b9:a8:08:f7:c4:24:50:
aa:8c:63:09:4d:af:ba:05:e8:23:ed:84:16:62:e1:ad:0c:f5:
3c:58:e2:0e:65:d3:00:5e:38:44:ca:d1:3b:45:d9:45:28:31:
48:38:90:d1:85:55:74:24:b6:db:5b:67:20:12:a5:9a:a7:f2:
f9:3e:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org