Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lc5KECfUN7nUBNVOyVv0uFRHaQU.roa
File: lc5KECfUN7nUBNVOyVv0uFRHaQU.roa (raw, json)
Hash identifier: YjDZTd0T1n0ohaCDvpWvz03JY9ClBFwLb5vQ7C3ZRCg=
Subject key identifier: 95:CE:4A:10:27:D4:37:B9:D4:04:D5:4E:C9:5B:F4:B8:54:47:69:05
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0192D29D9BB56264C4078DFBB6AB3BB6C7CF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lc5KECfUN7nUBNVOyVv0uFRHaQU.roa
Signing time: Mon 28 Oct 2024 10:13:17 +0000
ROA not before: Mon 28 Oct 2024 10:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 10:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:9d:9b:b5:62:64:c4:07:8d:fb:b6:ab:3b:b6:c7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 28 10:13:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95ce4a1027d437b9d404d54ec95bf4b854476905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:77:90:9b:6d:e5:b4:74:99:50:1a:9f:a4:
c5:cc:49:76:98:73:e1:41:44:34:3e:ad:2c:83:bd:
a3:2b:1c:f2:ec:e2:59:57:dc:33:a9:26:d7:db:24:
bd:52:39:a1:2b:86:e9:f4:2b:13:e5:dc:b0:fd:14:
92:fc:51:74:98:71:da:2c:20:ba:d4:e9:61:fe:58:
31:51:3b:b4:37:13:ec:ec:27:f0:96:5f:f6:e8:b9:
1c:2e:bc:3d:d3:2b:4c:82:0f:21:5c:fc:78:7b:46:
d2:76:ec:8c:ff:92:fc:b1:f3:80:0d:0c:e6:7c:f4:
09:12:61:f5:f5:a4:f1:e5:be:3e:87:98:1c:89:02:
7c:8d:8d:d6:ee:7e:bb:00:f5:2b:10:b3:33:04:bc:
83:91:6d:22:0a:96:2e:ac:70:84:63:14:3d:b1:24:
f6:9a:a5:50:67:f2:c2:58:83:d1:1a:87:6c:18:1c:
b0:cf:a6:f3:13:f0:98:2b:49:5a:96:11:1f:c8:c6:
f8:ce:51:d3:85:3f:ab:98:30:14:89:bc:e8:85:9d:
09:90:43:1b:78:bb:aa:00:64:46:80:58:26:9d:33:
73:28:bd:39:d5:3c:58:28:48:bb:d3:18:3d:42:ac:
de:87:db:5f:73:d7:90:2d:c6:d9:ba:2a:0a:46:cd:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:4A:10:27:D4:37:B9:D4:04:D5:4E:C9:5B:F4:B8:54:47:69:05
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lc5KECfUN7nUBNVOyVv0uFRHaQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cf:5f:53:a1:d0:84:2f:8d:02:8b:ab:1d:6b:22:47:af:4f:
f5:e3:c8:92:e6:3f:bd:62:f0:81:54:5a:f0:c3:67:e5:76:93:
02:59:71:dd:5d:92:fa:f4:3d:7c:37:d8:be:c6:ab:73:97:9e:
0c:2f:d1:48:32:33:10:ef:03:8e:05:61:9e:08:a3:46:62:fa:
73:85:a1:ba:b5:94:8c:cb:5f:c4:df:5a:61:cf:62:eb:6b:0a:
fb:4e:a4:8f:03:1b:e5:28:ac:40:ec:c4:ac:df:e7:d5:42:5b:
4a:73:ba:31:a5:8f:dd:8e:76:86:c9:57:aa:15:76:88:ed:c0:
da:56:6d:df:36:c8:54:c5:af:9d:fa:f2:03:76:0a:2c:40:07:
39:94:e0:2d:97:35:32:80:ef:85:da:70:bb:a3:46:e2:0b:98:
90:02:95:9f:42:74:56:b2:8d:83:0e:5e:15:e7:dc:c7:79:f3:
73:eb:1f:7f:52:a9:7f:03:7c:9e:ba:8b:74:72:59:83:49:c6:
d9:66:19:f9:be:99:b1:3c:3c:25:01:a7:ba:99:37:e1:41:6d:
7f:88:0c:b6:68:a0:4e:08:9b:f3:cb:59:07:ee:18:02:2d:da:
ed:82:db:36:a7:93:f3:15:6d:dc:d4:06:d2:0a:1d:af:aa:a1:
bf:06:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 14:04:44 2024 by rpki-client on console-ams.rpki-client.org