Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p2y0z7ZHumH1tLZqu-IUgzSmSg8.roa
File: p2y0z7ZHumH1tLZqu-IUgzSmSg8.roa (raw, json)
Hash identifier: ShvUYiK8vWmmZ1Tb0CrCBOCjui77oDD7xFqZLb6mNRU=
Subject key identifier: A7:6C:B4:CF:B6:47:BA:61:F5:B4:B6:6A:BB:E2:14:83:34:A6:4A:0F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B6305205C52FE83BD72AFD8D10C29D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p2y0z7ZHumH1tLZqu-IUgzSmSg8.roa
Signing time: Mon 02 Jan 2023 09:00:43 +0000
ROA not before: Mon 02 Jan 2023 09:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.238.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:30:52:05:c5:2f:e8:3b:d7:2a:fd:8d:10:c2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a76cb4cfb647ba61f5b4b66abbe2148334a64a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:41:17:02:74:9c:1f:11:fe:c4:fc:76:07:
56:7b:d6:d8:cb:ba:d0:37:a8:67:02:21:9d:8b:d6:
73:3a:54:c5:c8:69:0b:3b:71:ee:3e:5e:8f:ef:75:
e6:1a:3f:b6:27:2c:8e:ee:01:1b:09:af:7a:fe:2d:
b3:f6:8b:bf:5a:1a:3f:02:3b:e7:bf:67:4e:0a:60:
3c:53:cc:34:49:79:5f:a8:13:7b:4e:a3:ec:01:39:
53:9b:d4:01:bb:fb:39:b7:78:b4:19:4f:6e:e3:f1:
1c:72:66:7e:46:4c:b4:c8:00:a8:cd:6f:8d:57:a9:
9e:63:5b:05:bc:6c:73:e9:51:89:1b:e9:c5:b2:73:
5d:20:0c:39:47:e2:e0:f3:91:1c:50:3c:fc:54:e8:
c3:71:ed:e0:96:00:d3:bc:a8:48:73:13:b9:b3:bd:
00:9a:48:c4:9a:29:24:39:df:91:8c:7f:82:58:c8:
c5:33:63:43:1a:8a:15:a8:e8:ed:43:d4:59:ac:fe:
42:75:ac:c2:b0:a0:cc:6c:a1:4f:b2:81:5e:bb:74:
ab:8b:76:19:ae:47:ef:c9:4c:ab:f7:9b:94:c9:7f:
fd:f1:e8:ac:61:c2:ab:63:5b:90:1a:9f:28:6a:15:
cb:56:4c:b7:02:20:21:da:81:43:4f:f1:d7:97:c8:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:B4:CF:B6:47:BA:61:F5:B4:B6:6A:BB:E2:14:83:34:A6:4A:0F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p2y0z7ZHumH1tLZqu-IUgzSmSg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:69:e7:e9:3f:7f:00:e9:c2:dd:a2:d9:1d:28:97:83:cf:71:
cc:e2:ac:88:59:ea:55:bc:58:06:66:ed:a4:9b:a0:65:e2:2c:
eb:a0:9c:dc:9c:7a:f2:f2:6d:47:0b:e2:a2:85:42:92:6b:be:
37:42:a7:d2:71:54:8a:58:25:04:61:15:68:91:32:50:61:52:
27:28:fe:9b:b6:a9:7c:1c:2d:43:49:15:8b:b6:75:9c:e2:53:
86:f5:aa:e6:86:d9:4b:e9:c8:58:ea:34:93:58:e4:92:7f:9f:
4d:bb:69:fa:86:57:89:f5:00:f7:8d:1f:b4:52:8f:d7:01:66:
06:94:d8:8a:8a:65:e7:b4:8f:51:9a:5c:17:07:eb:ea:48:f9:
a5:3c:b1:93:6d:4e:04:11:c7:00:6a:f2:33:28:ef:4b:93:0a:
7b:0a:c4:24:fd:87:30:87:ed:07:aa:cb:e1:50:0a:9f:81:f7:
2d:3d:a8:37:92:13:3b:d5:81:bc:0d:e4:63:d8:9c:20:13:07:
a2:61:e1:43:89:ab:92:83:1a:af:51:b3:0c:78:14:92:ff:6e:
5e:91:a7:a6:6e:67:55:9f:96:24:5a:a7:61:50:6f:6a:88:e7:
b3:cb:34:88:19:a6:89:e5:7f:fa:e1:89:c1:aa:e1:b4:94:1b:
ca:4b:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org