Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kdokN9KvPW9WvyazNIhWTsTZTyk.roa
File: kdokN9KvPW9WvyazNIhWTsTZTyk.roa (raw, json)
Hash identifier: cX2SVs6QCw/SNqviBR+cRSXbsaG7OsvweCJ77ajPCRA=
Subject key identifier: 91:DA:24:37:D2:AF:3D:6F:56:BF:26:B3:34:88:56:4E:C4:D9:4F:29
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018650580E5423991F5D27A1E5A8037ECCD1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kdokN9KvPW9WvyazNIhWTsTZTyk.roa
Signing time: Tue 14 Feb 2023 14:33:13 +0000
ROA not before: Tue 14 Feb 2023 14:33:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 185.251.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 13:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:58:0e:54:23:99:1f:5d:27:a1:e5:a8:03:7e:cc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 14 14:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91da2437d2af3d6f56bf26b33488564ec4d94f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:4b:5f:c8:b0:10:39:11:6a:d2:be:a1:d0:
20:fc:9c:76:7e:e5:41:9e:12:9c:e8:8a:c3:4d:c4:
4d:17:b5:74:12:fb:ed:84:01:6a:93:5d:8b:dd:b5:
78:32:a6:88:92:b0:e3:43:6d:5c:78:da:0b:2d:aa:
93:24:88:9c:67:f0:26:a5:14:86:4c:a3:e5:a2:c0:
34:00:68:8f:e5:bd:1e:67:80:83:28:33:09:81:de:
8f:f9:fb:7b:8a:63:42:b2:2a:04:a9:fb:39:bc:bf:
17:f2:4c:c8:6f:c1:55:9b:c2:ad:29:88:65:b1:00:
51:92:61:91:3a:a4:71:2f:dc:e9:a7:33:c7:c5:3a:
a4:d8:5d:67:74:0b:7a:59:85:af:87:51:70:38:42:
f5:9b:08:24:31:76:2f:d5:55:84:c4:ac:8c:5c:39:
96:cc:c1:81:03:07:14:99:7d:e9:df:49:ab:38:14:
18:ac:c2:68:48:e5:14:d7:93:4a:41:01:b2:0e:84:
15:5f:ec:9f:a0:8c:e9:5d:55:0a:7b:12:b6:80:a5:
e3:c9:d2:5d:5b:b5:b5:2c:b7:3a:b6:c0:0f:d9:16:
e4:27:e8:66:3a:e2:ce:79:c1:72:b3:2c:f5:08:83:
68:bc:af:cd:63:58:f6:f0:ba:bf:f9:7d:e4:0c:f6:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DA:24:37:D2:AF:3D:6F:56:BF:26:B3:34:88:56:4E:C4:D9:4F:29
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kdokN9KvPW9WvyazNIhWTsTZTyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:43:0d:c6:07:05:bc:a6:7b:4c:08:d1:78:fe:23:cd:b9:91:
a0:8e:ad:d5:c1:91:4f:d0:5b:ce:88:df:8c:91:07:39:e1:57:
9e:2b:bc:56:73:bf:ac:d9:82:c4:b1:51:d8:3f:54:ce:65:61:
89:9d:c6:de:d9:40:66:ee:fa:22:a4:37:b6:2e:5a:61:35:ec:
e3:28:58:9e:5c:ae:6b:86:c6:ee:a4:58:b6:27:b8:47:41:25:
25:2d:5f:f4:b6:e0:9f:8a:6f:02:70:74:3f:61:d4:44:58:73:
d1:a3:61:a4:d6:77:32:e7:47:22:37:4b:0c:bb:06:4e:44:fe:
6f:98:ee:0d:d1:72:89:c2:5c:59:10:81:dc:1b:1e:82:1f:96:
30:3e:94:b4:3d:15:60:be:79:ef:b9:14:8a:e5:cc:3b:db:ce:
14:20:07:10:43:bc:34:77:ea:61:95:ef:e0:99:a8:1a:b0:28:
f5:1f:a9:71:41:0b:eb:d7:90:36:a4:58:8d:ef:b9:a4:0c:09:
3e:f2:74:ac:54:4b:64:53:3f:53:52:da:c8:d0:9b:47:90:74:
81:36:53:f0:c7:59:e8:e3:d1:16:e9:ce:76:b7:d6:9f:cf:a1:
74:0e:a3:43:e0:7b:48:1b:41:e7:48:93:2c:ca:ac:dc:a6:e9:
a5:94:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org