Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cUbSYNiWAXHnaXlqEFDcl66Vfio.roa
File: cUbSYNiWAXHnaXlqEFDcl66Vfio.roa (raw, json)
Hash identifier: SNN97CXnvKF/8wI5LoQEUfMtegg+k33vi07a/7etOLY=
Subject key identifier: 71:46:D2:60:D8:96:01:71:E7:69:79:6A:10:50:DC:97:AE:95:7E:2A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A93076714524C07A7D8F59E417AA2516D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cUbSYNiWAXHnaXlqEFDcl66Vfio.roa
Signing time: Thu 14 Sep 2023 09:30:50 +0000
ROA not before: Thu 14 Sep 2023 09:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48296
IP address blocks: 185.226.106.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:07:67:14:52:4c:07:a7:d8:f5:9e:41:7a:a2:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 14 09:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7146d260d8960171e769796a1050dc97ae957e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:fc:cd:66:48:05:31:16:8b:21:9c:e0:41:
57:bc:bc:67:20:01:f4:0a:c5:a9:d6:4c:bd:67:bc:
49:b1:18:ad:38:bb:89:3e:54:e1:6e:6e:db:15:a0:
40:89:ae:74:50:a6:ee:2e:6c:03:3d:02:5c:ab:e7:
51:0d:c4:12:4b:9b:e6:2f:16:3a:f6:4c:e3:9a:0b:
c7:62:1d:10:c7:4e:96:2e:93:39:61:78:6f:3d:93:
fe:cb:c1:70:f9:be:dd:d1:dc:a8:b2:af:e2:8b:b9:
16:0f:ba:ee:af:b0:67:58:64:92:3b:61:1b:dc:a8:
53:90:f7:04:fa:b3:83:34:5c:bb:2a:87:51:a4:86:
79:ca:bf:71:1d:ee:b9:10:c9:ec:da:e4:92:da:30:
01:58:39:37:48:a3:18:69:17:37:05:45:5c:5e:c2:
14:6f:8f:83:06:d0:84:f3:0f:a2:8d:e1:be:8c:63:
3e:77:88:45:c0:11:c5:8f:32:b0:6c:60:ca:69:1b:
60:89:b4:ae:d9:c0:96:37:82:86:32:72:46:f0:3c:
b4:37:22:bd:37:51:b3:1f:ff:2c:9e:3e:45:fb:e8:
bf:49:ea:54:8f:fd:19:c8:4e:e6:ce:3f:26:3c:92:
58:53:13:71:46:11:bd:48:f3:1c:59:3a:a6:8a:20:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:D2:60:D8:96:01:71:E7:69:79:6A:10:50:DC:97:AE:95:7E:2A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cUbSYNiWAXHnaXlqEFDcl66Vfio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
185.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1f:dc:0c:b7:0c:e2:dd:76:29:cc:2a:a1:e5:05:87:cb:1f:
0e:e1:a7:c3:59:9d:64:04:a6:5e:2a:77:0e:d1:27:2f:84:c4:
12:98:29:6b:96:7f:a3:45:48:17:3b:22:34:16:cd:eb:e0:80:
01:e3:ba:8d:80:9f:14:ed:da:99:89:fa:8e:8d:cc:f7:49:5f:
62:14:6a:5f:4c:9a:60:71:26:9d:77:ee:7d:57:fd:2e:4b:02:
db:b0:d0:9f:05:fc:74:7b:dd:2f:8d:5f:6e:7d:8b:8a:5f:50:
f5:1e:1e:40:f5:39:65:70:b1:9b:a8:6f:5d:20:64:b0:d4:8b:
20:d1:40:7d:0b:f7:16:95:13:36:93:6a:0f:00:62:d2:a0:1c:
03:77:2b:b3:81:12:72:4a:ac:15:dd:e8:56:b3:d6:4e:18:4b:
0e:97:60:1c:c4:20:0b:e9:98:18:2d:cf:78:5f:5e:d5:02:d9:
75:d5:4d:51:b3:b2:df:a4:24:22:6c:76:09:da:ac:f6:b2:5c:
80:be:4f:c1:26:6f:01:46:5c:09:77:54:21:ad:3b:36:60:cb:
31:0c:70:f3:dc:1d:e9:dd:49:ab:ca:56:03:0b:5d:22:f2:14:
b5:10:53:8a:96:39:51:b1:03:28:a0:4c:e4:99:7d:0f:df:e3:
2c:63:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org