Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rC5TdrNsgVQ9CfaIn8M0a-6DXtw.roa
File: rC5TdrNsgVQ9CfaIn8M0a-6DXtw.roa (raw, json)
Hash identifier: /s/iDHO7gj1+YGtFhVSL3b9ce59GYk1GXRnNY/9PoBs=
Subject key identifier: AC:2E:53:76:B3:6C:81:54:3D:09:F6:88:9F:C3:34:6B:EE:83:5E:DC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B239A9A13DB30A5CC9910E58C17DCB250
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rC5TdrNsgVQ9CfaIn8M0a-6DXtw.roa
Signing time: Thu 12 Oct 2023 11:16:56 +0000
ROA not before: Thu 12 Oct 2023 11:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 185.240.122.0/24 maxlen: 24
185.238.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 18:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:9a:9a:13:db:30:a5:cc:99:10:e5:8c:17:dc:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 12 11:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac2e5376b36c81543d09f6889fc3346bee835edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:be:bc:ea:2e:4f:99:6c:c9:e4:53:81:4f:
d6:29:c7:52:b4:e9:48:c9:6a:04:c3:d2:3b:76:2e:
79:91:9b:0c:44:9b:0f:a6:05:e9:36:0f:29:0e:ba:
a0:ee:d6:eb:0c:4e:e4:a4:6d:c1:f8:1c:63:5b:ed:
8e:e4:3b:93:fe:d3:fa:ba:ba:fb:b4:c7:cc:45:91:
67:c5:ed:77:87:7d:79:f0:0a:cc:65:10:31:b3:a0:
63:c1:20:4f:f6:a0:90:b0:81:58:13:ad:78:62:f2:
02:8e:52:f3:13:1e:2f:6a:85:c8:98:15:54:21:8c:
8f:a7:d5:fa:0d:62:62:59:4d:64:7f:2a:0e:11:53:
da:b1:66:2f:02:20:91:78:00:cb:13:1c:ae:6f:34:
60:9d:05:8a:cc:73:5e:0c:09:ce:65:52:ee:0f:01:
e0:4d:94:a3:f9:09:dc:da:f8:61:e4:fa:5c:3a:eb:
99:ec:63:a4:c9:57:80:0c:84:53:27:9a:89:f5:99:
20:b3:87:72:e8:a7:09:36:8b:ab:10:75:ce:69:e0:
c6:b3:25:0e:b6:c7:dc:e7:f4:c4:fc:a9:5d:fe:69:
f2:29:77:23:a1:2f:aa:2b:25:c7:03:ec:f0:cb:5e:
7e:61:b3:19:fe:33:e0:1a:e8:55:4a:c7:e9:de:c9:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:53:76:B3:6C:81:54:3D:09:F6:88:9F:C3:34:6B:EE:83:5E:DC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rC5TdrNsgVQ9CfaIn8M0a-6DXtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.229.0/24
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0b:e2:46:4c:eb:b8:d3:ec:36:2b:8b:f9:46:7f:0b:8c:9c:
fd:34:40:7b:df:21:e9:ec:d6:ab:60:5c:c5:3e:b1:e8:c3:16:
2f:b7:82:77:8e:a1:f0:e2:49:de:8d:26:7a:79:cb:81:de:62:
9b:3e:d7:49:82:3e:81:e8:64:42:02:65:a6:bb:40:b9:69:cb:
f7:75:e5:99:3a:f4:83:5b:0b:1c:d9:ff:00:5d:31:40:ae:b6:
e0:be:b2:f1:09:04:a0:97:8c:dc:9e:e1:4d:7e:70:26:ec:91:
b8:22:15:9f:af:2d:d2:89:c2:5e:56:19:48:86:02:f4:9d:13:
37:84:3c:df:ee:de:57:26:1b:97:01:e0:d4:48:eb:79:2c:7d:
c3:d6:3b:26:6b:c5:81:ba:cf:f6:6c:e0:f7:93:ff:1a:63:ce:
cd:38:bb:76:d2:76:06:47:07:33:2a:35:8f:fc:1f:40:2f:45:
69:e1:9c:5d:40:c7:b8:35:82:35:7f:5c:f1:44:c5:f5:01:2e:
00:a3:24:30:e9:0c:8d:bb:ac:2a:de:8a:8d:6c:df:36:f9:58:
6e:d6:f9:77:21:85:f6:80:a7:48:b9:4b:9b:d1:c5:0c:76:98:
b8:06:1b:99:44:e0:e9:5e:49:1a:bc:70:35:40:b5:76:cf:8b:
06:69:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org