Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/obBui_CguoLqMpdv5L7vF6RFOc0.roa
File: obBui_CguoLqMpdv5L7vF6RFOc0.roa (raw, json)
Hash identifier: u7idsAB3bMw353rx6xr0wl/8odhoqax6tge3aF0z1j8=
Subject key identifier: A1:B0:6E:8B:F0:A0:BA:82:EA:32:97:6F:E4:BE:EF:17:A4:45:39:CD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DC7539EBDF3C2F3CB9E33BC14822AE165
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/obBui_CguoLqMpdv5L7vF6RFOc0.roa
Signing time: Tue 20 Feb 2024 16:22:42 +0000
ROA not before: Tue 20 Feb 2024 16:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 185.199.54.0/24 maxlen: 24
185.230.66.0/24 maxlen: 24
193.58.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 16:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:53:9e:bd:f3:c2:f3:cb:9e:33:bc:14:82:2a:e1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 16:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1b06e8bf0a0ba82ea32976fe4beef17a44539cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:e3:03:21:54:31:e0:72:95:d5:13:65:38:
64:89:54:0b:71:aa:c1:05:24:fa:38:03:af:4e:a7:
ca:02:59:96:48:0e:1c:55:0d:a4:df:64:41:1f:98:
ab:16:c3:21:d7:4c:d2:d2:ab:49:a3:3b:a2:f7:f5:
ee:85:eb:6f:c9:ac:68:c9:f5:c0:bc:1a:e0:e8:38:
98:72:d2:d1:95:4f:e8:23:f6:df:7e:01:e0:0e:59:
c0:4b:5f:e6:be:2e:4d:fc:e2:d4:ae:c7:94:50:78:
94:02:43:ad:14:eb:c6:35:b0:6a:e3:34:a5:f2:dc:
6a:3b:79:3c:d0:03:f7:e2:1d:30:46:6a:8b:87:84:
4a:3a:0a:ef:ce:eb:01:36:0c:20:84:df:86:43:54:
ed:d8:c6:22:8e:c7:b6:dd:f5:97:6d:ff:f2:98:f3:
78:ca:d7:c6:36:35:b1:86:8c:30:dc:bc:6b:38:66:
19:6c:c3:13:2f:38:01:ce:f1:1a:38:9b:c8:42:c4:
fa:16:c8:c1:d1:20:7d:42:1b:48:dc:98:5a:ae:30:
e8:f5:f4:18:03:45:78:1e:4d:1f:77:36:bc:ad:3f:
12:dd:f2:f3:11:49:af:6b:df:56:a5:7c:43:78:b3:
0c:fb:2a:25:55:f0:e9:87:6d:7c:9e:64:42:6f:d6:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:6E:8B:F0:A0:BA:82:EA:32:97:6F:E4:BE:EF:17:A4:45:39:CD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/obBui_CguoLqMpdv5L7vF6RFOc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.54.0/24
185.230.66.0/24
193.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5c:fd:33:59:d8:24:e1:89:d2:25:cb:74:c3:63:91:57:db:
61:0c:d4:99:53:ae:38:89:ad:ae:ad:e2:c9:93:22:95:f8:9f:
72:3d:0c:14:25:ed:ec:87:95:c9:8b:2a:f9:31:04:87:71:5f:
8a:94:96:de:1c:38:5e:49:92:17:ee:ee:24:f8:15:4a:87:47:
80:32:48:3b:52:04:c8:8c:a3:ce:61:ff:99:86:f4:bf:b6:c7:
2a:d4:9c:dd:65:ae:c0:6d:b7:28:1a:30:f0:5d:37:a8:a3:d5:
c3:18:ed:ef:9e:77:c1:78:e8:74:35:86:35:c0:ae:5c:dd:9d:
b0:c1:22:c1:f2:48:8e:7e:f0:02:80:51:c3:8c:74:c9:5c:fc:
85:b2:93:a9:3a:7b:4a:64:a8:8d:b6:77:68:bc:14:cd:3c:33:
64:e5:c4:2e:30:cf:c2:f6:9d:8d:21:1b:cd:87:05:ee:66:b3:
dd:c4:0b:d1:9e:ab:d6:cf:4e:b6:b8:a7:61:92:e3:c0:6d:09:
3b:77:b2:1a:3f:16:66:b6:bb:a0:a6:ed:7d:b3:a6:ef:81:60:
34:6e:72:6f:0f:c1:9e:ff:45:8b:60:3c:46:30:64:92:6d:95:
58:36:96:c7:58:c7:1d:92:f3:8f:6e:83:72:05:f8:8f:5f:a3:
9e:e1:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org