Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nCId7v9KcQ53_0f3hj0Ov_creNc.roa
File: nCId7v9KcQ53_0f3hj0Ov_creNc.roa (raw, json)
Hash identifier: UE+9vBXZoav6uhpKqKj7AJHtLEMQ6R+J9ZFtan7hbsc=
Subject key identifier: 9C:22:1D:EE:FF:4A:71:0E:77:FF:47:F7:86:3D:0E:BF:F7:2B:78:D7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B1E2EF59C34A411E71129141C0482403B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nCId7v9KcQ53_0f3hj0Ov_creNc.roa
Signing time: Wed 11 Oct 2023 10:01:15 +0000
ROA not before: Wed 11 Oct 2023 10:01:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2e:f5:9c:34:a4:11:e7:11:29:14:1c:04:82:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 10:01:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c221deeff4a710e77ff47f7863d0ebff72b78d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:64:9a:50:af:07:e7:f1:55:57:38:1b:3d:
03:aa:43:b8:0c:a1:e3:5b:21:bb:ed:c3:a2:11:d2:
1a:47:64:c0:a1:6d:ee:eb:60:11:6c:ba:ee:14:73:
f1:c0:7a:56:44:a0:e9:c1:0e:77:b0:6a:c9:27:d7:
4d:3f:3e:97:a5:93:9b:1f:d1:5a:0e:81:f6:7d:03:
7f:66:d3:fd:56:73:b0:6c:d4:a2:3c:76:f9:c3:c8:
a8:52:c9:b8:d6:ad:fd:ea:0d:81:75:31:28:d6:d0:
2f:15:b4:14:ed:f6:02:5a:e1:23:05:fc:5d:12:6c:
67:00:37:2d:fb:bc:7d:21:41:d4:b0:1c:34:5b:93:
26:66:16:06:00:bf:0c:16:ef:4a:4e:13:8b:64:0e:
c6:7c:27:f0:97:ef:0e:80:ba:7f:57:21:4f:42:eb:
5c:e7:4e:0a:9f:8c:2d:b8:90:9e:16:51:bc:cb:92:
fb:d4:8f:1f:c0:f1:9e:43:a7:da:a5:d6:0c:22:fc:
e5:a6:b7:56:ec:b3:f7:da:5a:d9:ea:80:4f:35:1c:
af:e4:04:2b:8f:f8:f9:2d:ce:74:10:7b:4a:8a:a8:
1f:6b:02:19:48:d3:63:a8:41:df:ba:55:91:5b:77:
20:51:8c:c1:f2:fb:5c:76:56:ee:f3:12:15:2d:75:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:1D:EE:FF:4A:71:0E:77:FF:47:F7:86:3D:0E:BF:F7:2B:78:D7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nCId7v9KcQ53_0f3hj0Ov_creNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fd:ac:69:66:08:4e:c6:9e:3a:8e:5d:cf:bb:50:99:b1:4c:
8a:58:2f:f1:d2:db:05:b9:f0:1b:8d:34:8d:6c:3d:c5:49:56:
8a:6b:90:80:65:ab:76:b3:18:6f:62:e0:06:04:23:98:d2:de:
a7:53:e1:5e:fb:07:3e:c1:5d:12:6c:51:38:6e:97:76:92:0b:
18:a7:68:17:31:68:fc:e6:d8:96:7c:b9:96:c5:ef:26:2a:84:
1c:ec:cd:0d:66:b1:32:1f:ee:49:4f:d3:79:ae:41:02:e2:3a:
6a:86:95:fe:30:39:51:37:ba:9b:d7:df:2e:69:f8:14:63:43:
75:76:a1:fc:a6:98:a4:6f:e8:50:fd:66:f9:c3:b8:92:6a:ca:
a4:1a:d2:48:b9:c7:f9:08:2b:22:83:2b:55:71:1a:f4:b3:1f:
1e:c4:64:b3:2a:26:be:04:37:77:3b:71:2a:d1:c7:ab:92:eb:
3d:5e:bb:d4:8f:7c:eb:43:0c:e9:88:a5:e6:30:ff:57:57:25:
41:f7:6f:97:17:8e:b5:51:6f:9f:6f:93:dd:15:18:43:b2:28:
88:63:3f:ad:be:f0:3a:9f:0a:b4:71:94:0f:63:f0:b1:45:50:
e3:0e:b7:a0:37:87:ae:c9:d9:79:36:ee:31:f0:22:3e:3d:52:
96:05:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org