Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pGfJ8Vu1KUesjKUuuRKn1ItacZE.roa
File: pGfJ8Vu1KUesjKUuuRKn1ItacZE.roa (raw, json)
Hash identifier: ZOzlkdsnhHuqT0/kPFt5eJknyJekBJj1gYyb5sOinds=
Subject key identifier: A4:67:C9:F1:5B:B5:29:47:AC:8C:A5:2E:B9:12:A7:D4:8B:5A:71:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186BB3B259CD29E1061D4B5738591E21C9B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pGfJ8Vu1KUesjKUuuRKn1ItacZE.roa
Signing time: Tue 07 Mar 2023 08:41:00 +0000
ROA not before: Tue 07 Mar 2023 08:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 185.226.105.0/24 maxlen: 24
185.194.28.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 11:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:3b:25:9c:d2:9e:10:61:d4:b5:73:85:91:e2:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 7 08:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a467c9f15bb52947ac8ca52eb912a7d48b5a7191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:fc:b7:e7:2e:80:0f:6e:06:d8:17:5e:97:
30:2a:e0:32:5c:23:0a:82:df:c5:b2:b8:db:0f:8f:
0e:59:ff:d4:90:f6:23:3e:1c:d3:13:ff:9c:d0:bb:
47:2b:0d:d5:24:d5:83:e0:87:54:57:7b:26:ca:99:
12:d7:aa:20:40:53:2a:47:7b:2d:0d:05:58:5d:36:
90:06:4f:a7:bd:e5:a3:b2:01:a0:3a:4d:fd:38:84:
48:e1:aa:f4:83:9e:f4:86:5e:e2:3c:3a:6e:63:31:
f2:63:75:be:69:25:d6:f0:56:8e:26:01:b6:54:41:
3e:2a:14:3b:da:5a:be:1e:4a:d8:d1:d9:fe:3a:ee:
a6:8e:9a:51:15:77:50:fa:be:cc:ea:5a:78:3d:5a:
40:14:38:b5:1f:1e:9d:4d:b4:f9:85:7e:3c:f3:13:
14:94:88:6a:bd:0c:6d:18:e6:ef:3b:df:cc:e7:95:
aa:41:61:06:3b:ab:e1:a1:53:8f:86:b5:ad:e0:e6:
57:93:1f:a8:b0:46:45:f4:8f:cd:a6:8c:e2:50:3c:
7d:3c:58:aa:39:17:06:f3:1d:82:41:84:ad:dc:b7:
03:a8:54:88:d3:d7:ab:03:d7:e9:d2:73:40:28:d1:
a9:76:22:8c:ac:0b:5e:78:a1:ea:0f:b2:bb:49:6f:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:C9:F1:5B:B5:29:47:AC:8C:A5:2E:B9:12:A7:D4:8B:5A:71:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pGfJ8Vu1KUesjKUuuRKn1ItacZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.28.0/24
185.225.3.0/24
185.226.105.0/24
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:46:b8:11:64:71:f2:14:97:56:0e:39:55:06:07:f0:6b:ae:
11:38:26:38:15:1f:bb:2f:3e:09:16:9c:1b:d5:33:3c:bb:38:
f4:fb:01:b0:90:02:4c:ef:40:a0:eb:6b:71:5c:09:40:70:fc:
af:23:66:02:37:90:1f:7a:ac:7f:85:b8:03:18:f4:49:20:6a:
17:8d:3f:ce:80:e9:cb:2d:94:69:54:a4:db:98:a6:b0:ab:43:
c0:1c:47:b4:bb:cd:da:f8:8d:b3:36:9c:70:ec:c2:99:ab:f5:
b1:b5:22:d9:c9:99:53:b0:af:7f:ed:d3:48:de:d7:4c:38:c7:
db:cc:46:3e:65:7d:72:4d:f9:48:31:c2:04:e5:97:a5:ba:3f:
aa:c4:10:90:00:49:97:bc:db:c0:48:52:8e:24:c2:e7:8c:a8:
4d:5a:df:d3:61:41:1b:b2:6b:fe:a0:c3:7c:4d:ca:b1:67:89:
a9:27:ca:8a:e0:1e:2d:7c:18:e4:1b:d3:70:5a:65:84:b3:1e:
2a:13:b8:a0:5f:07:7a:cf:75:f6:94:e2:e6:6e:d9:50:2f:d0:
66:e2:71:bc:b0:0b:ae:1b:ce:4c:b3:c9:13:36:a9:9b:9e:25:
43:e1:ad:d2:ff:01:65:a8:c4:22:6f:5a:31:59:74:f5:b9:42:
aa:5f:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org