Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q01fPsUAbZGaf1o8c5zJumsoKPk.roa
File: q01fPsUAbZGaf1o8c5zJumsoKPk.roa (raw, json)
Hash identifier: 9EK82bEM4smmY6BkIpp654+lon/e9XdS4aYa6m2Djmo=
Subject key identifier: AB:4D:5F:3E:C5:00:6D:91:9A:7F:5A:3C:73:9C:C9:BA:6B:28:28:F9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018BC9A025205BF3257230CE6FAFE97B4692
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q01fPsUAbZGaf1o8c5zJumsoKPk.roa
Signing time: Mon 13 Nov 2023 16:59:57 +0000
ROA not before: Mon 13 Nov 2023 16:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.126.80.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:a0:25:20:5b:f3:25:72:30:ce:6f:af:e9:7b:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 13 16:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4d5f3ec5006d919a7f5a3c739cc9ba6b2828f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:de:8f:99:f8:0b:7a:29:22:8b:9a:14:08:
b8:1b:21:a7:50:f9:b1:21:21:8d:21:f2:cd:4d:fd:
d0:30:14:6e:38:09:d8:51:af:ac:32:67:e6:45:b4:
fc:9c:87:75:cf:8b:2f:4c:88:c1:9a:61:db:88:b4:
b4:9a:41:37:1d:27:3b:73:64:4c:63:01:d6:e2:cc:
e4:02:19:b1:bc:c0:bc:eb:1f:50:f7:24:dd:21:bd:
a6:b6:32:c7:b6:bc:63:56:fd:de:ee:6b:8d:7e:d1:
3f:d3:13:7f:b5:a2:0e:6d:13:a0:47:25:b3:d6:e6:
4d:1e:4e:67:5d:7a:aa:c0:04:3f:09:3c:96:52:6d:
83:2d:44:22:10:31:e8:d1:3e:02:bb:3b:3f:4f:80:
1e:95:cb:73:0b:98:45:c2:bd:27:d8:7d:b3:70:6e:
db:b1:5e:54:3d:3e:26:53:4b:b0:45:39:92:59:6d:
be:c6:c5:df:6b:df:ed:6a:7c:d0:ca:99:41:12:3a:
d1:0b:95:59:2e:17:8a:a5:11:80:12:97:74:44:65:
20:af:d5:4e:f3:cf:7b:6f:10:bb:59:7c:e1:03:b7:
b9:5d:d7:85:fb:4c:22:81:34:ab:d5:8b:c5:cb:a3:
8c:6f:c6:ec:f1:84:31:73:94:0b:9e:37:14:6f:e3:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:5F:3E:C5:00:6D:91:9A:7F:5A:3C:73:9C:C9:BA:6B:28:28:F9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q01fPsUAbZGaf1o8c5zJumsoKPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.80.0/24
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7c:f1:4c:51:f2:6d:5b:0e:2c:eb:6a:2d:32:4b:a8:97:52:
3a:16:75:5f:94:62:4d:b7:ac:88:34:73:16:ac:a8:64:47:ea:
67:45:e5:e2:1b:96:e5:3a:35:4e:ef:79:5d:9d:51:64:48:f5:
27:26:b7:dc:91:af:1e:65:1e:75:2a:15:04:5b:6f:84:38:95:
6b:98:99:0d:34:55:7d:41:c4:47:71:16:b5:8a:dc:e4:9d:e1:
75:e7:96:94:e5:6f:7c:37:02:fb:22:5b:21:d5:71:98:df:e4:
26:d2:4e:c7:a0:1d:f1:a2:d0:9e:a5:bc:3d:ac:80:c6:77:47:
e5:67:2a:2e:ff:81:96:b5:75:2e:45:07:71:a3:4e:ad:b1:8d:
16:b1:1e:77:c3:68:67:ba:e0:f4:f0:58:c7:1e:6e:37:0b:9c:
d0:6e:af:8b:86:9f:ff:f9:6c:e9:81:86:ca:53:de:ee:23:c8:
d0:62:c6:c2:07:81:27:08:f0:b3:76:38:23:36:f3:3f:86:90:
a0:72:7c:f8:74:6b:f2:de:de:d6:f9:07:69:ce:39:c7:2c:bb:
e7:cf:ba:26:4f:ba:0a:fa:a8:85:06:29:1c:ab:aa:85:dd:41:
cd:7a:d0:3e:93:ab:49:73:cd:bc:5b:03:8a:a8:17:0c:ac:de:
be:ac:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org