Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/udNH8rJV6vf6nNY8Ym3JW9_KyX0.roa
File: udNH8rJV6vf6nNY8Ym3JW9_KyX0.roa (raw, json)
Hash identifier: WdDTzTjGsUovbFTR7tj/Y/uxtRccBwTCTBLmpzJdjxk=
Subject key identifier: B9:D3:47:F2:B2:55:EA:F7:FA:9C:D6:3C:62:6D:C9:5B:DF:CA:C9:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B62BB8F6C5B8F3A71FB27B0279DD7E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/udNH8rJV6vf6nNY8Ym3JW9_KyX0.roa
Signing time: Mon 02 Jan 2023 09:00:42 +0000
ROA not before: Mon 02 Jan 2023 09:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 185.255.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 09:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:2b:b8:f6:c5:b8:f3:a7:1f:b2:7b:02:79:dd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9d347f2b255eaf7fa9cd63c626dc95bdfcac97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:bd:e9:68:6f:3b:ef:70:14:f2:db:37:9e:
d8:10:59:e3:06:1b:20:b9:f3:74:a1:84:06:77:dd:
d5:86:fc:32:2d:17:b4:07:8c:d3:84:47:54:09:a5:
9a:8e:cc:b3:81:fd:35:6e:ef:40:93:9f:16:18:b1:
ba:ea:12:8b:16:c0:34:1a:39:d8:8f:e0:40:09:56:
15:2f:6f:46:11:ea:3f:e9:83:5d:39:1b:2a:e8:7f:
c8:89:4d:1b:59:bb:cd:51:db:e9:4c:ca:92:ff:d8:
86:a7:20:33:de:c0:e4:48:ba:ec:0c:4f:44:23:a4:
89:71:95:12:68:50:93:26:17:45:2d:18:25:fd:ca:
2e:d1:f5:6d:9d:a5:ad:08:f8:b1:d7:c4:15:81:20:
e5:a6:a1:1a:5d:7e:d6:7f:94:e6:c4:76:f0:c2:f5:
a3:c2:44:74:57:d5:53:76:37:f2:2d:b9:02:0b:b4:
d0:9c:d9:77:52:4e:37:44:e8:83:14:16:42:8f:3e:
a2:1f:33:25:be:b9:57:ba:33:c3:37:e3:6b:ee:0d:
7b:0b:f0:d2:9a:3f:51:f1:12:44:df:cb:9d:85:ba:
77:24:53:e1:4e:91:78:73:ea:ee:79:ec:f6:86:bb:
05:99:fb:00:fa:d0:f0:ae:14:2a:a1:68:22:c1:ff:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:47:F2:B2:55:EA:F7:FA:9C:D6:3C:62:6D:C9:5B:DF:CA:C9:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/udNH8rJV6vf6nNY8Ym3JW9_KyX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9a:f5:89:09:d4:87:de:32:42:b2:64:a9:b0:8e:b7:a7:c9:
62:a0:29:ed:c9:41:63:2b:e0:93:63:b4:ec:ce:53:78:43:12:
11:93:69:fa:e3:e5:f0:9b:9c:5c:8e:f9:e0:76:34:e5:34:c2:
b5:bc:18:33:1f:ec:15:15:ad:47:74:e1:4f:7d:c5:3d:c4:74:
19:77:32:eb:77:6f:7b:60:69:ab:f9:7e:59:00:73:eb:ab:db:
b3:33:0f:0d:1f:ec:7d:2b:cc:61:60:0a:3e:5e:29:05:ca:db:
4e:04:82:dc:3a:33:07:df:d4:7a:f8:c0:eb:0d:da:55:67:5f:
ef:cc:62:b3:79:cd:a7:52:57:3b:3c:e2:a3:cc:a8:f9:0c:bf:
bf:93:6d:ff:dc:2f:48:e4:a8:02:6b:21:3e:1e:52:02:e3:26:
d9:51:bf:7e:b5:2e:4e:a6:5f:5c:ad:de:c6:ef:e5:c8:8b:24:
bb:0d:8e:a9:ce:36:52:f7:74:f8:90:4e:fb:da:b0:35:d7:60:
b9:3d:32:06:66:be:6e:75:01:70:90:7f:63:d8:98:9b:8b:b5:
7b:df:3a:75:48:09:8e:a7:32:b5:4f:08:a1:4e:35:04:47:04:
c8:0b:5f:1a:b7:83:d5:bc:f6:d3:8d:cb:85:fe:07:da:bc:50:
10:a0:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org