Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/waP2GZ8MrcXZIuEOmaR6vi-ATd0.roa
File: waP2GZ8MrcXZIuEOmaR6vi-ATd0.roa (raw, json)
Hash identifier: fVw04bbIxNhmUx3+P/tLpo1fQg8CadKmLLQoXlmLNEA=
Subject key identifier: C1:A3:F6:19:9F:0C:AD:C5:D9:22:E1:0E:99:A4:7A:BE:2F:80:4D:DD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B3CFD2CDBB6EB89F60882175B1FB73FC3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/waP2GZ8MrcXZIuEOmaR6vi-ATd0.roa
Signing time: Tue 17 Oct 2023 09:35:06 +0000
ROA not before: Tue 17 Oct 2023 09:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270564
IP address blocks: 185.228.72.0/24 maxlen: 24
185.223.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:fd:2c:db:b6:eb:89:f6:08:82:17:5b:1f:b7:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 17 09:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1a3f6199f0cadc5d922e10e99a47abe2f804ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:db:fc:c7:3e:36:34:25:08:6c:ca:47:d0:
80:32:40:74:41:2e:79:a7:e4:3c:03:89:9a:1d:83:
3e:5d:ee:31:fb:54:1c:3f:86:37:b6:cc:da:e0:62:
85:d8:90:a1:e0:3a:f1:18:09:88:bb:25:3e:c4:8a:
57:d2:9b:41:74:2a:a3:b6:e0:2c:aa:2d:21:9a:f5:
ab:f9:2e:75:41:98:15:36:d3:77:f6:cf:72:35:27:
52:75:c5:d3:a6:7c:97:6a:93:d7:bf:90:c4:e5:3d:
7d:26:75:6c:66:80:dd:1d:99:09:41:bd:f7:be:07:
b9:10:f6:32:13:ef:0e:dc:a5:41:56:b3:b9:83:2d:
f3:2d:04:cb:82:28:48:c1:5b:2e:72:49:30:fa:76:
6b:2d:e4:be:c8:f2:40:b5:a0:02:b7:4c:d7:f2:17:
ae:f7:7b:ba:f9:da:31:44:f0:ce:5a:da:35:ca:a7:
8c:6e:d9:47:69:b3:2b:8a:cc:21:27:77:80:f6:3c:
cd:de:92:bd:93:73:a3:d7:b1:3f:5a:e2:d6:e8:d6:
f0:85:60:84:bf:ea:49:43:15:9c:9c:f1:cf:63:df:
de:30:60:88:35:99:b5:e8:58:57:8f:5a:f3:4f:a5:
a3:1e:8f:35:56:07:ca:e4:b1:ff:ca:a2:97:f2:94:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:F6:19:9F:0C:AD:C5:D9:22:E1:0E:99:A4:7A:BE:2F:80:4D:DD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/waP2GZ8MrcXZIuEOmaR6vi-ATd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.83.0/24
185.228.72.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1b:0c:9c:90:57:3b:b6:c9:31:2d:ac:d4:1f:ff:77:2e:cf:
dd:b3:df:ae:85:2a:39:b9:9f:e5:e4:9c:bd:b1:d3:68:f7:0f:
cf:55:2c:e7:c5:db:b9:9e:37:10:0c:19:e5:9d:48:ab:4f:bc:
a7:83:a3:27:6e:d9:8f:16:4e:8f:02:7e:bb:58:3e:80:ca:5f:
a6:2b:85:8e:2d:71:2d:12:a7:8b:fb:18:0f:fc:ab:a5:7e:4d:
56:b3:01:fa:fa:15:11:c2:20:fd:d3:a4:98:da:c5:f6:db:66:
aa:08:25:7a:75:85:59:c1:26:02:41:d3:f8:a8:96:0f:1e:68:
e1:99:e1:1c:19:4d:2e:f6:da:86:d2:01:fc:50:d5:ff:e5:ee:
df:0f:9e:75:a2:35:3a:b2:6b:c0:92:05:d4:5a:9b:78:99:c1:
29:e3:df:9a:6c:eb:75:6b:da:66:7d:e8:fb:64:9d:d6:c6:bc:
07:fd:0f:ee:28:33:f2:95:cf:af:fd:a6:a5:5e:d4:5c:17:28:
cd:a6:fb:a6:0b:68:08:1e:da:1e:5f:7a:43:5d:1d:18:a9:26:
42:32:21:8b:a5:c5:5b:14:37:ec:61:bd:3b:f8:98:83:29:d6:
98:14:72:68:24:13:63:61:90:af:d2:0a:0f:8f:b5:d4:cd:7f:
b6:7a:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org