Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mMdgs3Q0YcnQXIamGDRN7TvnF4g.roa
File: mMdgs3Q0YcnQXIamGDRN7TvnF4g.roa (raw, json)
Hash identifier: O4wpjO2knCxoD6PBifKXqPF0w99r3Cn2taaYTUNJO+0=
Subject key identifier: 98:C7:60:B3:74:34:61:C9:D0:5C:86:A6:18:34:4D:ED:3B:E7:17:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AFF10B177097315801BE209429424BB51
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mMdgs3Q0YcnQXIamGDRN7TvnF4g.roa
Signing time: Thu 05 Oct 2023 08:59:58 +0000
ROA not before: Thu 05 Oct 2023 08:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.210.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 12:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:10:b1:77:09:73:15:80:1b:e2:09:42:94:24:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 5 08:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c760b3743461c9d05c86a618344ded3be71788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:f2:63:02:53:08:88:cf:bd:ea:59:c6:96:
09:85:85:08:89:9a:cf:15:d7:e3:16:51:b8:29:35:
71:4b:40:f0:7e:ad:05:9e:29:02:d4:fc:65:92:6c:
be:ef:e0:8b:11:fe:cc:ea:f4:c2:09:25:16:7d:0d:
c5:49:7a:31:1d:9a:0a:55:a6:d6:e0:ad:6d:b6:53:
b9:c8:a0:8a:ba:c5:a4:e2:6c:3a:e8:fb:d7:42:29:
b8:f3:f5:7e:7b:65:51:0a:bb:e2:db:24:9f:c3:ff:
97:91:7a:6a:ba:ce:fb:0e:d4:eb:db:fc:0e:70:12:
98:1e:92:cc:42:4b:66:07:f0:be:2b:9c:34:96:46:
17:08:98:de:3f:48:58:f4:03:31:36:9c:2c:34:ab:
68:a1:24:40:2b:60:81:3e:20:4b:b5:f3:07:03:83:
11:a4:ad:27:01:bc:bb:ce:56:9b:f5:83:13:fa:5b:
21:7a:0a:59:e2:5a:5f:e2:1c:4f:c0:4b:f6:f6:cc:
1d:c4:44:ce:bf:7b:46:b6:08:44:fb:ab:4a:ac:a5:
2d:20:ae:be:34:32:ab:21:b8:94:23:e5:a7:53:21:
91:23:1d:12:24:20:e0:2e:e5:3b:30:78:6a:2c:1f:
48:98:8a:bb:a0:66:2f:d4:ef:62:62:86:db:70:a3:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C7:60:B3:74:34:61:C9:D0:5C:86:A6:18:34:4D:ED:3B:E7:17:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mMdgs3Q0YcnQXIamGDRN7TvnF4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fd:05:1a:76:9b:6a:d7:00:8a:ae:b6:02:1f:26:12:1d:f7:
ea:8d:14:b2:4f:a6:4f:e8:5e:fe:c4:d6:94:95:63:75:d6:66:
53:c5:ee:bb:68:3b:e0:55:bd:49:89:47:09:ec:c5:fb:2a:c8:
44:3b:0e:41:0f:12:58:2f:a9:0b:63:b4:12:43:bc:cd:2c:77:
3c:1c:9a:b8:07:90:df:f9:37:25:dd:9e:92:77:bc:63:d7:d7:
ab:28:bf:f7:08:fe:f5:8a:fe:90:3b:f8:3c:ce:20:e2:55:41:
3e:a6:fc:58:72:02:75:b3:fe:0e:67:16:1d:b9:ad:d7:99:be:
46:58:88:8c:fa:3f:9a:2e:fc:21:ff:fa:d6:30:de:46:96:f5:
6a:dc:6e:5b:02:84:b5:25:cd:6c:37:c9:f9:33:a0:1e:05:ba:
20:a9:98:28:3c:30:1e:94:de:2a:af:e9:6f:dd:23:06:6b:37:
42:ea:b7:79:88:ca:c7:83:32:b3:00:57:73:8f:5b:72:f0:f7:
32:a3:82:a5:97:bb:c5:3c:be:0e:d4:ee:30:3c:09:58:39:35:
87:a3:2b:46:9e:de:d2:68:10:83:99:1c:1a:33:96:07:90:cb:
cb:ad:14:23:31:e1:cd:fc:68:18:af:26:e3:ff:79:a6:2c:7f:
8e:59:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org