Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pUB8KGQxzstRtC1bCHbL8RLVQmw.roa
File: pUB8KGQxzstRtC1bCHbL8RLVQmw.roa (raw, json)
Hash identifier: NhMN9K1Xejrm8OybvktDHBD2qsXFZttMMjqDcjaDqzM=
Subject key identifier: A5:40:7C:28:64:31:CE:CB:51:B4:2D:5B:08:76:CB:F1:12:D5:42:6C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01891CC131D5217A5732B210B534CAB9C9AE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pUB8KGQxzstRtC1bCHbL8RLVQmw.roa
Signing time: Mon 03 Jul 2023 17:16:10 +0000
ROA not before: Mon 03 Jul 2023 17:16:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198100
IP address blocks: 185.218.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 22:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:c1:31:d5:21:7a:57:32:b2:10:b5:34:ca:b9:c9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 3 17:16:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5407c286431cecb51b42d5b0876cbf112d5426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:47:c2:31:0f:65:0c:0f:60:87:5d:f4:b2:
1d:29:a3:6f:e9:7c:42:50:1c:d2:16:bf:0d:18:13:
d5:9c:64:53:e0:06:82:2c:2b:f4:1a:02:9a:de:e7:
00:c7:bb:ca:3e:99:40:3a:a4:f1:f1:48:2e:5a:a7:
9c:61:97:ae:d1:a0:e8:e6:43:dc:a4:9d:5e:16:1c:
cd:95:83:d9:aa:da:be:50:6d:d5:42:85:01:3a:74:
23:bc:0f:a3:1c:4a:d5:5c:56:4e:a3:b6:2b:85:90:
1c:fd:84:16:05:8c:21:78:66:69:37:9e:95:57:cb:
e0:17:cb:97:53:c7:dd:62:8b:3e:1b:5b:22:da:cd:
03:48:c5:4c:db:ce:de:21:0c:b7:75:de:ff:04:67:
6a:8c:c0:92:4c:d5:48:67:bd:73:aa:fe:51:e7:e5:
1f:1d:33:04:f1:79:2f:a9:bf:d9:08:0c:4c:9c:0f:
dc:74:c0:bd:c6:3a:29:e4:60:d8:8e:e7:b1:d0:df:
d1:4e:5a:f5:fa:19:b5:26:07:ce:9d:24:a8:12:7c:
6c:00:34:89:a9:8c:22:fe:8e:5a:f6:a0:9b:46:c3:
31:42:cc:fc:8f:3a:89:06:51:6b:46:bc:93:56:d4:
8b:81:1b:6c:03:51:e3:ba:6b:9f:8e:09:38:30:81:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:40:7C:28:64:31:CE:CB:51:B4:2D:5B:08:76:CB:F1:12:D5:42:6C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pUB8KGQxzstRtC1bCHbL8RLVQmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.102.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d6:cb:d9:91:c2:26:89:5b:0b:af:e1:80:4e:4e:17:76:2a:
46:8b:c9:0d:28:9a:dd:51:2d:5f:45:5d:e5:3d:fc:37:3c:f1:
a6:c9:b0:57:fa:a6:0c:f7:2e:28:f0:4d:07:63:ec:a1:8f:8b:
52:c9:ea:ba:1d:13:91:da:0c:d2:15:7a:30:c8:23:f2:b6:0e:
cb:fc:33:86:65:99:cf:c0:2b:c9:a2:73:c7:ca:43:b6:cc:69:
b1:15:a3:0f:34:9d:39:39:e4:ae:4d:8e:1e:da:b9:f8:cd:77:
40:6d:6a:00:1a:42:e9:22:34:f2:80:dc:62:0e:dc:b2:de:8c:
ea:dc:b8:16:c3:3e:44:89:e1:96:43:4b:0d:b3:9f:74:a3:ea:
3f:ca:c9:a2:90:9f:83:0f:8c:47:58:6b:0b:e0:47:5f:be:3d:
4d:25:f5:82:f7:90:1e:99:36:c5:9d:f8:80:6a:98:e7:b7:57:
a3:7b:62:57:ca:90:ed:b3:2c:9d:ae:1e:0b:45:18:4e:88:00:
4f:ce:33:6f:4a:d2:7c:dd:d3:53:ce:22:32:99:be:2b:4f:93:
83:9e:4f:49:26:6d:fd:99:14:d9:3a:97:1a:01:8b:99:5d:9c:
70:88:f8:72:7a:37:ec:25:c3:0b:ce:6a:1c:8c:43:8c:25:51:
f7:c5:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org