Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q89QC5sfWPTKNpzovtF_yef4CIw.roa
File: q89QC5sfWPTKNpzovtF_yef4CIw.roa (raw, json)
Hash identifier: dnPNT2UbOyRHFe4Y3Rd+9+t7OAplwM7vsvGcYmQK6Os=
Subject key identifier: AB:CF:50:0B:9B:1F:58:F4:CA:36:9C:E8:BE:D1:7F:C9:E7:F8:08:8C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80271507B69C908ACD5B73222AFE451
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q89QC5sfWPTKNpzovtF_yef4CIw.roa
Signing time: Tue 02 Jan 2024 02:30:52 +0000
ROA not before: Tue 02 Jan 2024 02:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 185.234.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:71:50:7b:69:c9:08:ac:d5:b7:32:22:af:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abcf500b9b1f58f4ca369ce8bed17fc9e7f8088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:58:43:ac:d7:7b:62:df:c6:97:33:ad:78:
1f:53:86:8f:74:dc:24:8c:48:86:a6:4e:b4:34:f6:
c7:49:da:4b:e8:5a:ce:08:f5:46:6b:b1:e0:9e:48:
d1:b3:b8:a7:3c:3d:af:10:e6:b6:cd:bf:e9:8e:c3:
cb:47:77:91:7f:ee:30:b5:7c:ea:9d:a0:6e:0d:e7:
52:70:e6:15:58:07:c0:5c:52:b2:c1:83:88:b6:f3:
b8:19:64:84:70:54:18:ed:f7:f6:89:9f:91:67:08:
c2:d0:40:4e:7a:8f:75:63:3a:16:f4:9e:fc:8e:f1:
11:e9:05:4a:24:a2:5e:db:d0:ba:24:e9:a2:54:fc:
02:d6:8c:85:ae:b0:14:fb:11:7e:80:5b:e1:0f:18:
9c:d3:35:b6:51:64:a6:16:cd:21:d5:15:18:8a:5a:
f7:15:c5:e2:70:9a:98:5b:c8:6d:32:df:34:84:13:
ab:ba:53:31:ff:3d:5e:bb:f6:a6:70:84:20:af:9f:
64:c9:9a:d7:25:f3:00:52:aa:5b:ee:a4:6c:25:3a:
a0:a3:96:61:11:21:0e:3b:df:e0:93:de:3f:47:c8:
f6:91:cf:b9:4d:5c:c0:ce:c7:ac:74:95:22:11:40:
78:cf:c0:66:e5:7b:5a:3c:13:38:4c:d7:f5:d3:41:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:50:0B:9B:1F:58:F4:CA:36:9C:E8:BE:D1:7F:C9:E7:F8:08:8C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q89QC5sfWPTKNpzovtF_yef4CIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.20.0/24
Signature Algorithm: sha256WithRSAEncryption
15:38:24:72:12:3a:64:7e:b5:19:5b:ef:57:fa:a2:a0:ea:25:
ae:be:bb:ca:38:60:69:48:4b:43:38:46:24:71:c6:f9:27:46:
e0:57:12:0c:0e:c6:a8:ab:51:88:46:45:90:57:d4:97:e0:9f:
16:9f:c3:71:dc:58:55:63:e9:ac:69:cc:05:53:45:7e:c3:3b:
4c:74:ed:47:f8:c0:48:10:6f:fb:23:3d:18:6e:ce:85:a9:bf:
c2:33:22:40:8a:f9:0e:d0:1f:94:80:6d:da:10:55:12:32:9c:
d3:c8:6e:51:69:92:40:84:35:bb:81:2a:96:1b:03:fc:ab:f6:
9c:65:b0:1b:ff:ff:80:34:df:ec:11:ed:29:c5:a9:f0:4a:13:
69:8a:1e:f7:94:15:f6:df:0a:6a:84:cd:28:a9:7b:e5:19:64:
48:22:c9:41:b5:bf:2d:d2:fb:74:5d:49:9c:da:c9:f4:89:ef:
13:9e:62:b0:ae:93:ab:4a:15:b6:d7:a5:4e:94:64:c7:c7:0c:
26:40:35:e4:fc:34:da:13:e6:f0:ce:25:67:c6:b1:5a:80:8f:
48:9a:9e:60:46:93:a7:73:e1:96:dc:e0:a5:4b:55:34:2c:c2:
06:1a:9a:e9:49:2c:11:d0:31:56:f7:b2:33:ec:98:88:e5:b8:
cd:11:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org