Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v-dbSHIWMA85kD0DFLESaJL0VtU.roa
File: v-dbSHIWMA85kD0DFLESaJL0VtU.roa (raw, json)
Hash identifier: CKn/ACmXxH72jLXnk5QsJIOVnUrxAevXJbJSBxqrfeU=
Subject key identifier: BF:E7:5B:48:72:16:30:0F:39:90:3D:03:14:B1:12:68:92:F4:56:D5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188205AEF38E670E2B2C6A9BAF2602260BA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v-dbSHIWMA85kD0DFLESaJL0VtU.roa
Signing time: Mon 15 May 2023 17:00:10 +0000
ROA not before: Mon 15 May 2023 17:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.230.52.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 10:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:5a:ef:38:e6:70:e2:b2:c6:a9:ba:f2:60:22:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 15 17:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe75b487216300f39903d0314b1126892f456d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:fd:7f:23:1f:56:d2:b7:9e:f0:76:14:a6:
0a:05:3a:8b:5b:2d:0d:4e:1a:5f:b0:b8:04:b7:ce:
81:43:09:47:93:4d:20:a9:c1:a3:07:6e:d1:b1:df:
70:af:aa:db:46:21:c9:10:28:be:47:ce:16:c1:8b:
d5:e3:7b:40:f1:9e:14:27:71:da:98:4e:29:98:72:
2c:9d:8c:30:32:ad:a5:19:c5:c9:7a:3a:6e:ac:8e:
74:98:e9:02:74:90:85:1f:38:da:83:1a:2f:3f:43:
91:89:d4:b6:ae:22:da:e9:55:8c:54:ce:d3:44:33:
82:6c:30:4d:98:e2:f4:e4:a0:9a:7f:d6:8e:81:6c:
63:67:bb:24:06:b1:4d:19:5e:3d:e5:76:5e:06:68:
8c:6d:91:42:cc:0e:7e:1e:22:02:a2:bf:dd:aa:2b:
1e:35:08:c4:6f:e6:93:54:b3:15:d9:ae:81:74:d3:
8f:32:05:d1:81:75:6d:e9:e4:e0:e6:1e:77:79:00:
bc:0d:39:a8:4d:c0:2f:43:d3:3c:2f:4c:b1:6f:a9:
54:da:e8:78:75:53:5c:7a:5f:91:78:4d:fa:ef:63:
fb:ef:4f:33:18:e5:c1:54:68:4e:7c:e9:b6:e4:d9:
c6:8e:86:e9:41:bf:9d:e5:83:f5:00:29:18:67:77:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:5B:48:72:16:30:0F:39:90:3D:03:14:B1:12:68:92:F4:56:D5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v-dbSHIWMA85kD0DFLESaJL0VtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
185.246.112.0/24
185.251.231.0/24
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:55:d7:8c:6e:59:aa:ca:f8:ff:4e:70:48:4d:91:0b:f8:1c:
c1:61:88:8e:b2:b4:b8:6b:ac:21:43:1f:c9:2e:8b:80:03:e7:
91:17:d0:83:9f:06:97:23:f5:d7:37:64:f3:1f:f3:ee:a0:38:
5e:80:81:de:90:f3:19:91:1d:d3:1c:ae:f8:cb:8f:2b:f0:03:
3a:b6:f3:ec:79:bc:fc:2d:7d:2c:eb:2f:72:9b:13:4c:65:7e:
cb:72:bc:72:24:43:a7:63:23:03:c6:9b:fc:58:5c:39:ea:ae:
66:0e:87:2a:64:c2:b6:c0:12:f3:2a:93:07:ff:08:c3:b5:c5:
12:5d:7d:48:b6:e5:08:1a:f4:97:75:fc:6a:26:93:3d:48:6c:
c7:be:c7:94:bc:62:1f:98:3a:28:d4:70:5c:f4:34:26:e4:b2:
fe:1d:c5:ae:f4:da:8e:e4:7f:84:98:dc:22:d8:76:c5:a5:98:
03:fa:b4:b2:9f:50:27:b9:36:a4:61:98:b8:bf:ea:13:67:2e:
7b:7e:f0:23:c3:9e:e2:1d:4f:ee:f5:00:5b:96:1c:7d:12:bd:
b7:89:05:95:57:72:25:da:24:61:c2:fd:f2:94:95:1c:48:ce:
70:66:0a:91:41:bf:49:a8:be:78:88:7f:55:af:64:4d:44:75:
10:f0:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org