Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n8mSeo9TYwOkqCQ0dNWoCF72-aY.roa
File: n8mSeo9TYwOkqCQ0dNWoCF72-aY.roa (raw, json)
Hash identifier: krx3zDVxrM0b8HyFNHwd4gvqEy4K9E+3frDIE9GV+Sc=
Subject key identifier: 9F:C9:92:7A:8F:53:63:03:A4:A8:24:34:74:D5:A8:08:5E:F6:F9:A6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B6518201F4F887A7399873F7BB68E6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n8mSeo9TYwOkqCQ0dNWoCF72-aY.roa
Signing time: Mon 02 Jan 2023 09:00:51 +0000
ROA not before: Mon 02 Jan 2023 09:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399641
IP address blocks: 185.194.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 22:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:51:82:01:f4:f8:87:a7:39:98:73:f7:bb:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fc9927a8f536303a4a8243474d5a8085ef6f9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:be:d6:ee:31:0e:04:f6:4e:e8:2b:fa:ee:
dc:43:17:44:0b:ee:3f:96:6c:83:12:1b:94:7d:66:
00:99:53:15:a2:01:40:19:32:bc:7d:73:52:c2:68:
0a:0a:50:8e:54:5f:3a:f1:9a:f2:9e:6c:89:2a:38:
d8:b0:34:1d:91:24:b3:d7:26:02:b8:7c:09:7e:b8:
6a:ab:e7:e2:bb:b3:cf:7c:79:00:5d:d8:20:eb:b0:
0c:72:1f:2b:0b:66:d2:99:52:f8:0a:de:48:85:c8:
87:b8:94:e0:9d:08:ab:54:97:23:ee:e5:57:c6:66:
21:96:df:2c:55:31:ba:2b:09:c5:76:98:2f:47:eb:
02:af:16:57:70:34:2c:bc:55:6a:a4:12:66:3c:2a:
3a:88:2f:5b:66:8e:ee:2c:3a:6d:d7:ce:db:3a:ad:
ef:b2:71:32:38:90:a3:46:4a:cd:d1:e7:6f:89:1b:
97:8b:27:85:65:32:67:8b:7e:03:b5:49:48:58:93:
69:b4:09:bc:46:17:fd:d2:7b:11:e0:4c:6d:f3:4d:
6a:d6:60:8d:9d:44:0e:07:c3:76:05:9e:95:6d:ee:
51:04:fb:be:fb:20:7e:be:26:c2:04:22:7c:77:b4:
49:47:db:64:a4:a3:2e:ad:c0:8c:bb:66:7b:bb:2b:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:92:7A:8F:53:63:03:A4:A8:24:34:74:D5:A8:08:5E:F6:F9:A6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n8mSeo9TYwOkqCQ0dNWoCF72-aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d9:da:9d:12:ef:36:5f:de:76:85:c1:1c:c4:40:6e:0f:37:
c4:56:b6:a8:a2:43:53:10:43:7a:12:ed:58:2a:5a:c4:99:e7:
03:7e:3c:89:18:49:be:b5:c9:a2:77:a1:35:e5:d9:7a:29:b4:
f1:23:2b:8f:a4:4a:38:7d:41:37:4e:8b:c6:dd:9c:1c:78:83:
37:fc:cd:08:4f:3f:bd:3e:6d:da:2c:df:72:5e:8d:60:cf:58:
2c:84:39:83:b9:02:25:2b:fa:12:b6:6d:85:9b:bd:11:15:cb:
ec:47:b4:71:51:4c:5c:e2:dd:32:d8:7f:57:9b:0f:f7:99:aa:
ba:a6:be:20:65:e1:09:d4:b9:10:53:6b:a4:6d:38:0c:82:5f:
75:83:52:85:44:31:7b:c0:70:18:e7:e5:44:05:20:df:3a:e8:
32:a8:ba:80:b7:3e:bd:6e:92:c7:f1:80:ac:ac:c9:52:81:e5:
05:18:d8:09:8c:ea:33:4e:91:c8:56:07:26:f1:59:74:1d:09:
9c:5e:48:2b:77:e3:88:fc:8b:1d:1e:57:ce:2a:c8:49:bc:e7:
41:78:a1:09:54:8d:f2:7d:dc:ee:f0:d9:fc:ed:34:5f:3c:5f:
e8:df:a0:13:f3:ad:d9:05:0a:28:e3:d9:a1:7b:be:1c:19:59:
00:f2:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org