Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p9aVMdDKS11G1Azko5S4Q1dPUsA.roa
File: p9aVMdDKS11G1Azko5S4Q1dPUsA.roa (raw, json)
Hash identifier: mxJVBPqZv935dCcIOsiSVcR6DogEZ6FHmxgK/PZ9hxk=
Subject key identifier: A7:D6:95:31:D0:CA:4B:5D:46:D4:0C:E4:A3:94:B8:43:57:4F:52:C0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01899BED8E3C63F58C387B55CA49CE2436C6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p9aVMdDKS11G1Azko5S4Q1dPUsA.roa
Signing time: Fri 28 Jul 2023 09:56:24 +0000
ROA not before: Fri 28 Jul 2023 09:56:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 185.214.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:ed:8e:3c:63:f5:8c:38:7b:55:ca:49:ce:24:36:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 28 09:56:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d69531d0ca4b5d46d40ce4a394b843574f52c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:16:f5:a2:53:29:b0:d1:9b:42:13:77:b8:
7f:c7:eb:41:3a:43:25:ec:30:da:c6:66:3a:36:82:
55:62:19:9b:69:06:f2:1f:d6:32:39:41:b7:c9:82:
ad:8f:bb:c9:05:5e:d3:bd:5b:3f:ec:a8:cd:ca:14:
8a:cb:ef:bb:c9:43:65:2b:c3:8a:7c:ce:96:1d:02:
c8:05:67:82:45:8e:f9:dc:41:77:c5:e0:f9:9a:0f:
41:9f:34:e1:dc:35:41:d8:cf:6f:80:13:3f:3c:50:
9b:f5:b7:77:18:f6:43:53:55:dc:f2:5d:99:93:89:
a1:bb:08:da:73:7c:dc:0e:c8:91:fa:0f:f0:96:2e:
f0:95:ce:b9:a7:6b:fd:63:b2:c5:cb:e7:f5:5d:1b:
b7:55:39:c1:54:73:f2:5e:8b:e9:4a:45:d1:34:a4:
95:e2:15:fe:4c:df:f0:e7:b0:11:72:c7:45:e7:e6:
1d:5c:53:88:51:cb:d0:0b:2f:39:c6:a2:61:dd:e4:
15:53:2c:ca:9f:ea:70:6d:80:78:17:1f:28:d1:ca:
38:41:44:1b:6f:2c:bd:6a:83:b2:5e:71:30:61:90:
16:fc:d0:a6:c6:b6:2a:f9:c4:5c:9e:c0:ca:cd:76:
bc:a7:55:57:3a:61:59:2e:c2:91:75:c7:33:59:66:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:95:31:D0:CA:4B:5D:46:D4:0C:E4:A3:94:B8:43:57:4F:52:C0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/p9aVMdDKS11G1Azko5S4Q1dPUsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
49:11:87:a0:2d:75:47:47:0d:49:0c:07:50:81:6f:32:7b:14:
07:4d:5f:a5:13:d5:f4:c0:ca:93:93:b9:10:3d:90:07:95:93:
5e:13:bb:59:3a:ae:af:58:7b:3f:11:c1:f3:bd:24:9d:bf:2d:
b7:16:76:44:ff:95:d4:8c:4e:c8:26:86:c8:8c:1b:2b:9e:6c:
d2:a7:e8:09:40:86:2f:df:a2:de:8a:d9:d1:82:c4:30:1b:67:
a7:c7:7d:b9:5b:2b:c6:a1:24:4c:7a:00:68:0d:a6:46:7b:ee:
76:fb:07:79:18:12:5f:04:32:e5:36:b7:50:2f:c6:47:9c:c2:
96:ac:ab:25:59:74:b6:24:4f:79:e6:42:8e:cd:ac:a9:9c:32:
68:0c:15:21:38:e1:a2:00:5c:96:81:4c:94:62:8c:9a:8a:46:
f0:dd:3a:f1:c7:44:e3:4a:85:a5:2c:42:cc:8a:f6:25:d0:82:
c6:41:4e:6d:d3:6a:5d:38:75:2f:75:56:96:ea:8f:c1:19:3a:
4d:7f:7b:72:85:38:e4:37:96:81:28:ef:26:3e:88:20:e3:ed:
02:4b:ed:7c:10:b5:87:00:e1:5d:9d:7a:13:28:24:f7:d5:b8:
00:f7:60:5e:b7:0c:61:60:d6:0b:8c:8a:33:fd:93:fd:5a:d3:
31:b9:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org