Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g5Dk-lRs6RnwzHCE2wQDcgLtfuE.roa
File: g5Dk-lRs6RnwzHCE2wQDcgLtfuE.roa (raw, json)
Hash identifier: t7HVXZL4cKzQgfYfBHNBOabQ4IFTYUbY1rC6b8J8B/8=
Subject key identifier: 83:90:E4:FA:54:6C:E9:19:F0:CC:70:84:DB:04:03:72:02:ED:7E:E1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AE181E26072874B44F1A078031556ADE0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g5Dk-lRs6RnwzHCE2wQDcgLtfuE.roa
Signing time: Fri 29 Sep 2023 15:15:00 +0000
ROA not before: Fri 29 Sep 2023 15:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.230.52.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Sep 2023 19:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:81:e2:60:72:87:4b:44:f1:a0:78:03:15:56:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 29 15:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8390e4fa546ce919f0cc7084db04037202ed7ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:79:3f:d8:1c:85:3a:8b:a7:b3:a1:16:16:
c5:8f:dc:77:c0:1b:09:12:23:ef:6d:d9:d3:9a:d6:
f3:22:1d:04:44:e7:ee:bd:30:30:33:b8:89:1e:21:
03:54:40:4b:67:d6:b2:e0:f7:d4:a0:e3:51:d0:d8:
99:b6:57:b3:3a:5c:1e:e2:dd:07:7c:c1:ad:78:75:
8b:79:af:8b:f8:95:14:d2:fe:91:1f:99:6b:94:d2:
3b:90:1e:a8:3c:19:5f:26:57:c6:58:34:79:e6:6e:
44:63:91:51:6d:fc:54:1c:eb:63:af:26:c7:de:95:
8e:b3:e3:91:8d:0d:07:34:e3:38:77:e1:32:f6:21:
29:f0:93:d4:12:5c:f1:ff:b0:d6:9c:1e:9c:6d:3a:
27:2f:59:fd:86:c2:ce:e7:67:6f:57:38:2e:af:1f:
7d:96:8e:1b:d6:62:1f:8c:33:78:3b:de:1f:76:84:
e2:d2:7d:d0:d9:32:7a:37:4e:31:af:eb:59:f0:d3:
de:71:97:5a:13:1d:07:aa:cb:37:32:a0:ec:72:49:
65:0a:4e:5f:05:31:d3:33:f4:1b:40:6c:15:07:91:
62:0f:5a:32:a4:b1:29:62:be:88:36:17:d5:c3:f8:
e4:e5:97:d3:85:43:68:8d:62:1a:6d:57:44:35:42:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:E4:FA:54:6C:E9:19:F0:CC:70:84:DB:04:03:72:02:ED:7E:E1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g5Dk-lRs6RnwzHCE2wQDcgLtfuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
185.230.52.0/24
185.246.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b4:03:b2:4a:44:d3:71:38:22:c7:a5:9b:00:cf:7c:93:ea:
00:4e:7e:9d:a7:e5:c1:88:20:a9:e3:43:70:79:91:0e:85:a6:
1f:8a:80:ef:da:52:f5:ad:5c:f3:6e:86:5e:cf:63:71:5a:5f:
63:27:d6:35:71:95:77:8b:7d:e9:2a:1b:3d:1e:95:0c:24:06:
d4:9b:d7:65:fc:0d:bb:fc:34:cb:c4:ec:05:8a:5a:df:17:4c:
80:d4:e7:28:6c:ea:e5:92:b8:ba:05:42:bc:bc:69:e3:94:ad:
86:2b:38:d3:a3:71:ba:1f:51:3d:1d:35:23:be:dd:cd:52:8f:
f0:53:1d:01:f7:dc:67:35:4e:af:10:92:f8:9b:c9:f3:84:1e:
4e:5d:b4:fe:ba:58:12:24:8e:4a:da:e2:ef:b4:38:f9:eb:91:
ce:a9:c1:ad:59:96:b9:7b:21:9a:b4:a3:5c:bf:71:04:46:6c:
7b:a7:14:21:c2:d1:bd:6e:25:d7:a3:5b:0b:3e:6e:e1:9c:e6:
72:9b:dc:79:c0:c2:0a:a1:f5:0e:34:cd:5f:a5:6d:7c:66:c5:
a5:b6:1d:0a:e1:af:6b:53:d5:e4:cd:34:66:7b:40:02:46:d1:
1a:34:08:03:c2:c5:2f:de:6a:ef:07:b8:ce:7e:b8:a9:05:a1:
de:86:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org