Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x_DG01iK4yYF5Mg1Zyd9ZNfxlo4.roa
File: x_DG01iK4yYF5Mg1Zyd9ZNfxlo4.roa (raw, json)
Hash identifier: aOft+QFd1UKBdBGEHAo262M9K/6juzy4yxhUD0xTaSk=
Subject key identifier: C7:F0:C6:D3:58:8A:E3:26:05:E4:C8:35:67:27:7D:64:D7:F1:96:8E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B64D6BC335780B231DF58055A66A73
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x_DG01iK4yYF5Mg1Zyd9ZNfxlo4.roa
Signing time: Mon 02 Jan 2023 09:00:50 +0000
ROA not before: Mon 02 Jan 2023 09:00:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212862
IP address blocks: 185.196.40.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:4d:6b:c3:35:78:0b:23:1d:f5:80:55:a6:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f0c6d3588ae32605e4c83567277d64d7f1968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:2f:df:96:7f:77:51:83:65:0d:d0:fe:7d:
34:77:43:5f:a3:2f:c3:7a:7d:17:83:1d:ae:57:22:
93:3a:0b:a2:ae:62:8f:08:80:de:34:d7:41:1d:f0:
1f:1b:42:45:7c:dd:c6:63:19:93:71:dd:f1:07:ad:
a1:b1:d8:9a:b3:31:fa:43:4e:bb:3b:22:02:e3:6c:
f5:06:79:90:78:be:08:bf:25:9e:94:6b:08:d2:56:
bf:e8:c5:a7:62:03:43:1f:40:ee:79:1e:92:26:eb:
cb:0b:de:af:c7:c9:2a:81:92:11:34:4c:9c:00:26:
db:e4:88:49:d1:48:e8:13:27:64:54:cd:1c:b9:99:
04:aa:06:55:a7:14:14:67:1b:c8:14:3d:3d:12:30:
7e:0b:e9:61:92:40:54:1e:6d:d4:e5:2a:1f:4f:83:
69:e6:ea:1c:29:31:41:01:c8:f8:02:78:63:ea:7f:
f4:21:d7:70:67:5a:30:1a:26:12:09:ac:37:9c:d3:
a1:09:cc:6e:89:b7:c0:31:86:8e:f9:d4:c8:2d:76:
27:be:bf:35:26:28:8a:69:45:ba:a7:71:d1:c4:f9:
62:b6:d8:07:6d:97:e5:32:19:58:d3:69:15:0b:b2:
18:3a:cc:83:73:d4:78:8d:7a:2a:fd:da:8e:12:94:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:C6:D3:58:8A:E3:26:05:E4:C8:35:67:27:7D:64:D7:F1:96:8E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x_DG01iK4yYF5Mg1Zyd9ZNfxlo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.40.0/23
Signature Algorithm: sha256WithRSAEncryption
15:02:e5:c0:61:47:ac:c2:88:85:6b:cf:bc:93:d9:c4:74:14:
f5:81:99:a9:a2:d5:bc:4e:a9:ab:cd:67:d0:4c:66:82:38:b4:
bf:13:e6:45:23:1d:bd:25:15:11:22:0f:35:db:60:74:67:4f:
0c:cb:7a:1b:df:d9:17:63:1b:6e:bb:b7:77:b5:d0:6f:04:ce:
73:02:7b:5b:e8:0d:05:0d:8c:38:0a:66:85:6d:43:d7:70:ed:
ad:24:6e:31:e3:21:18:e9:11:fc:85:95:8a:58:05:67:40:af:
39:5a:3c:47:0f:33:a2:0c:8d:b0:55:2a:81:6c:9e:96:ed:b8:
b4:d5:0c:99:43:e5:7e:02:ad:c8:23:5d:54:ea:82:d7:50:9a:
28:80:87:c7:f8:66:33:ca:10:51:d1:47:80:1c:8d:7b:d1:11:
99:ec:67:88:72:4a:1e:c8:6f:86:0e:3b:62:ab:85:dd:2d:88:
77:ed:e8:a9:64:50:0a:28:93:db:2b:d3:b7:c6:1b:a3:e5:c6:
6e:a7:a7:0e:35:5d:bf:76:9f:96:2c:ec:ab:4d:93:eb:51:fe:
e7:77:28:42:6f:b1:6f:4d:77:d8:a1:2a:11:08:fe:3b:d5:5b:
99:fe:79:9b:31:fe:fa:8a:13:31:aa:8c:35:5e:e7:c3:3c:db:
b9:f2:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org