Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/srvglnnv9bNijsnKjizDfB7WFkg.roa
File: srvglnnv9bNijsnKjizDfB7WFkg.roa (raw, json)
Hash identifier: /VKE/062ugHaNQFm9x6SjoAeGMDAM4k1AKBplgN3hvc=
Subject key identifier: B2:BB:E0:96:79:EF:F5:B3:62:8E:C9:CA:8E:2C:C3:7C:1E:D6:16:48
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01884816AA6D29924FD6BFA794B752F4EBE6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/srvglnnv9bNijsnKjizDfB7WFkg.roa
Signing time: Tue 23 May 2023 10:10:24 +0000
ROA not before: Tue 23 May 2023 10:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.230.52.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:16:aa:6d:29:92:4f:d6:bf:a7:94:b7:52:f4:eb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 23 10:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2bbe09679eff5b3628ec9ca8e2cc37c1ed61648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:c5:31:02:23:cc:d3:39:77:f0:1d:f4:7a:
88:02:86:a5:23:77:b7:f2:69:d7:c7:40:f9:a0:a3:
d2:ea:aa:ab:23:b9:07:65:d9:c0:a4:77:aa:44:42:
1a:42:55:14:f6:af:a2:f4:4c:2e:53:bc:bc:b4:de:
69:c1:87:93:48:d3:df:e3:66:ec:97:16:34:18:fd:
ea:a6:7c:f0:21:44:ed:7d:b1:b1:0a:7d:dc:fe:e9:
a8:7d:f6:ce:5d:de:6d:26:aa:c3:59:b6:d0:0e:c0:
df:40:e4:94:ad:ed:9c:de:a5:3e:90:99:22:d9:5b:
69:58:70:85:9e:4e:e2:d0:ed:be:48:0c:27:3f:f3:
12:23:d2:5b:c1:9c:a5:ed:7e:58:cc:73:a5:56:97:
3f:f9:39:86:20:c9:bb:35:5a:a0:24:f3:3f:51:a6:
5e:b7:72:0f:9c:9e:72:95:97:23:81:48:62:2b:e6:
31:a1:cf:6a:ff:a4:a6:de:2f:7c:30:88:35:15:e8:
e8:fc:40:04:9a:32:15:9a:34:b5:1d:c1:3f:8e:e0:
11:37:71:f2:6d:4b:bd:9c:6d:51:42:af:f4:ed:2b:
19:98:2e:bc:62:74:f1:95:f3:e6:0e:16:a4:05:e5:
ca:49:ee:df:67:5f:6e:ce:f5:be:0e:cb:ec:80:ec:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BB:E0:96:79:EF:F5:B3:62:8E:C9:CA:8E:2C:C3:7C:1E:D6:16:48
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/srvglnnv9bNijsnKjizDfB7WFkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
185.246.112.0/24
185.251.231.0/24
193.58.144.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:59:74:0e:db:62:93:cf:70:1e:ec:e9:3c:be:8d:da:65:f5:
c7:16:43:6d:ab:37:13:5b:ff:c7:36:e1:da:3d:90:a2:94:af:
6c:ae:33:57:4b:ac:52:e0:d7:d4:8e:ff:3c:5d:0a:42:92:a3:
22:c8:65:27:64:2c:50:89:b4:35:99:31:01:1b:0e:1c:42:75:
ac:ec:ab:ba:39:d8:e2:cb:57:87:63:0a:73:9b:cf:87:90:b3:
79:33:28:48:9c:b7:59:81:68:4f:7c:a7:9d:e1:20:a5:f8:d4:
99:00:d9:5c:15:01:e8:3c:b8:cf:23:2a:08:e1:dd:1e:90:a4:
76:b6:08:ee:3e:eb:25:5d:4c:a8:c8:90:3a:b7:90:54:81:6c:
fa:a6:bb:38:21:bf:28:3d:f0:50:61:3f:16:c8:27:0e:6c:fb:
e6:4e:da:a9:8e:7b:b7:15:34:85:97:5f:3b:95:19:f1:29:0f:
44:f7:a2:bd:d5:8b:7d:30:77:06:b3:79:7e:89:07:5d:d9:24:
2b:15:04:39:3e:2d:4a:7d:3c:98:62:27:96:43:66:da:95:8d:
a6:70:a8:01:93:6b:2d:7a:62:8c:5d:d5:f9:4c:c8:5e:c1:3c:
db:ce:31:ec:52:c9:18:f6:c1:d1:19:da:9e:a5:e1:56:91:bc:
aa:59:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org