Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j7GNih9Uz1abPuq179xYF7t_iPY.roa
File: j7GNih9Uz1abPuq179xYF7t_iPY.roa (raw, json)
Hash identifier: UXXSc5L9ac4PpNNzf9DlujOGk7gUxpYAHpBuPlwJHUU=
Subject key identifier: 8F:B1:8D:8A:1F:54:CF:56:9B:3E:EA:B5:EF:DC:58:17:BB:7F:88:F6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802701DC6A12BC522F24B5C03F21E3B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j7GNih9Uz1abPuq179xYF7t_iPY.roa
Signing time: Tue 02 Jan 2024 02:30:52 +0000
ROA not before: Tue 02 Jan 2024 02:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.222.30.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 18:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:70:1d:c6:a1:2b:c5:22:f2:4b:5c:03:f2:1e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fb18d8a1f54cf569b3eeab5efdc5817bb7f88f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:17:4b:6c:68:d4:75:e2:54:b1:56:76:b0:
f8:4e:0d:2e:d3:cb:74:28:9a:b1:b1:be:73:61:d3:
4f:59:1a:94:e7:6e:c2:1d:3b:47:80:f7:6f:82:03:
c4:19:7b:20:23:a0:ca:fd:71:9a:b0:2b:92:ac:40:
9f:38:6b:f4:a7:0a:41:51:58:0d:7d:52:9b:04:33:
bb:22:48:67:66:ec:fe:de:bb:74:96:7c:60:94:54:
c9:bc:61:84:46:b2:60:f9:95:be:4a:09:03:09:55:
45:d7:38:0a:20:0d:5b:60:4d:2c:83:42:99:bc:d6:
34:67:6b:82:89:b2:eb:ff:d4:d7:1b:6f:45:af:5d:
65:a1:44:4d:c0:b8:e8:ae:dc:de:68:91:7b:80:71:
7f:f4:c6:8c:1c:d2:62:2b:72:1b:42:4c:26:a9:a9:
50:fe:29:24:b1:1f:a5:ea:29:3d:43:8c:cf:b3:de:
be:a1:48:a8:9c:cc:99:c8:c7:c3:20:62:c2:3d:2c:
5b:fd:e0:0e:07:16:ab:d6:65:a2:bc:7a:6d:6e:d0:
da:f6:b8:b5:39:de:d5:98:1f:47:60:0b:a2:28:72:
b0:e3:d3:a9:2c:01:d0:50:e3:5c:89:16:b2:c2:fb:
ea:f4:4b:79:90:50:96:ad:6c:1b:c0:a9:28:6a:6f:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:8D:8A:1F:54:CF:56:9B:3E:EA:B5:EF:DC:58:17:BB:7F:88:F6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/j7GNih9Uz1abPuq179xYF7t_iPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.224.0/24
185.222.30.0/24
185.223.83.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
20:04:92:51:d6:04:e8:6b:56:09:47:94:db:e4:b1:c8:23:c3:
e1:72:93:48:27:76:10:4d:af:12:93:20:36:7b:24:1d:38:33:
21:c4:c7:ef:41:96:90:6b:0d:3c:9b:65:98:92:e0:3f:7b:38:
12:69:bb:8a:9e:66:ac:59:64:1b:4f:d0:e9:74:2a:e6:58:50:
48:9c:71:cd:c2:b4:f4:e5:62:06:22:9f:9e:7c:65:e5:67:85:
1a:e0:aa:0f:33:b2:92:a9:31:8d:a7:a3:72:c8:fb:03:28:6e:
ff:a9:9a:21:e7:08:3d:14:a2:57:3f:be:6e:ff:8d:85:4a:df:
b6:ae:9b:7c:e8:b3:3a:12:44:d7:11:d6:ea:81:a9:69:58:c3:
7d:87:df:f1:fb:eb:e2:df:2f:dd:08:58:9b:59:29:ba:8d:8a:
00:52:a9:3f:3a:8d:7f:2f:54:48:bb:17:0a:16:7f:f3:b1:20:
f5:71:81:e2:dd:81:94:0b:15:ee:77:97:71:b9:ba:71:77:27:
06:5b:09:08:57:c2:ca:7e:45:61:5b:f9:16:02:03:e1:d4:96:
b6:64:81:86:20:60:c0:f6:e2:dd:6c:a2:c6:23:6c:a5:49:de:
fa:76:a9:19:f9:3b:80:bd:b8:be:cc:13:ab:54:2a:9d:72:8e:
28:ea:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org