Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xBINUgHZbOaRs-YR5qMxokkYPz4.roa
File: xBINUgHZbOaRs-YR5qMxokkYPz4.roa (raw, json)
Hash identifier: buMmO0g+5GCsyQJ4zykW4XoY238X1fKfPe5AWxYEasg=
Subject key identifier: C4:12:0D:52:01:D9:6C:E6:91:B3:E6:11:E6:A3:31:A2:49:18:3F:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A284931501DF7DAB40C644A962034CE54
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xBINUgHZbOaRs-YR5qMxokkYPz4.roa
Signing time: Thu 24 Aug 2023 16:03:19 +0000
ROA not before: Thu 24 Aug 2023 16:03:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212849
IP address blocks: 185.254.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 11:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:49:31:50:1d:f7:da:b4:0c:64:4a:96:20:34:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 24 16:03:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4120d5201d96ce691b3e611e6a331a249183f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:80:a8:d4:37:c2:dc:7a:22:13:a4:35:ee:
7c:c1:83:33:ca:c4:f2:15:3e:14:e7:d8:46:6c:f2:
a6:ab:e2:79:03:8f:70:9e:6b:55:5b:e0:e8:57:ab:
0e:f5:d6:1b:41:8a:81:59:24:2a:10:9e:34:4f:9e:
02:cb:82:0a:b6:2b:2b:12:a9:0b:8e:61:ab:5f:66:
e4:54:00:17:da:19:d1:de:d0:dc:77:fe:0c:8e:94:
90:ca:07:a7:6e:65:ae:d3:b0:90:66:77:12:cc:47:
13:0d:62:91:0c:9a:66:98:95:f6:c7:fe:ca:73:ce:
c2:6a:98:4b:0e:26:ff:e3:15:28:fc:48:ae:e1:78:
4a:98:c6:db:80:69:94:4a:18:0c:ba:71:f7:23:cc:
f2:59:b2:32:8a:87:17:04:f3:b9:23:52:59:7b:6e:
6a:06:de:a8:62:01:65:2a:88:04:78:be:1e:93:7b:
28:3b:cc:5d:80:30:96:ee:d0:75:97:83:d4:8f:45:
fb:25:95:d0:e6:17:95:b9:6f:58:6a:c6:41:ff:80:
02:66:f3:98:a5:59:33:f8:75:10:74:72:58:00:ab:
84:89:14:58:cd:1a:c3:9d:3b:e3:d1:1f:04:38:f7:
d1:01:3c:91:89:50:8f:79:f7:8c:dd:37:c4:68:8b:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:0D:52:01:D9:6C:E6:91:B3:E6:11:E6:A3:31:A2:49:18:3F:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xBINUgHZbOaRs-YR5qMxokkYPz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.156.0/22
Signature Algorithm: sha256WithRSAEncryption
11:1f:e8:d2:76:ea:77:b4:6b:f7:fe:51:74:d2:5a:92:a0:7e:
db:1b:01:20:e0:fb:83:57:1e:4b:b2:ab:c1:6a:a7:bf:b6:e2:
5e:c4:33:04:30:da:43:1b:a1:be:c8:35:6d:b2:f2:15:87:87:
95:64:da:b4:48:6b:53:28:af:55:00:b5:3b:2c:ce:a2:71:8f:
19:0b:c6:10:4a:f2:e0:47:31:aa:e2:f8:cb:d4:1b:75:a3:99:
19:2a:dc:50:a1:19:33:dc:56:cf:15:24:2f:80:c6:41:92:e2:
5c:fc:be:07:5a:0f:d2:ed:62:30:db:53:7e:6c:b5:1d:da:ed:
9a:20:b6:9e:5c:e7:d8:80:56:ec:16:b0:bb:95:18:f6:50:2f:
c3:2a:20:43:70:92:a2:35:3a:38:b7:c6:89:79:4e:c1:1f:8c:
ae:aa:66:f9:e2:53:56:b4:88:3e:f2:52:05:1c:11:ec:b3:90:
b6:d0:bc:d2:0a:e3:6c:eb:bb:7d:99:6c:44:b8:e1:e4:76:a7:
6e:be:7b:18:ca:cf:37:ed:8f:d0:55:4b:62:58:7c:c0:76:08:
d4:c7:0c:81:09:c3:ac:c3:b0:79:4f:85:47:85:b0:ee:54:e0:
a6:4b:92:65:34:e0:a4:13:b2:7d:57:e6:f9:b5:72:64:c9:e1:
99:0a:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org