Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xxtiW8zWGkN_6rmQICfLvVIMkLs.roa
File: xxtiW8zWGkN_6rmQICfLvVIMkLs.roa (raw, json)
Hash identifier: uPlaDs+dvCzHafuy5w9b9opwPZBmNzhNWYFTzTnY/bs=
Subject key identifier: C7:1B:62:5B:CC:D6:1A:43:7F:EA:B9:90:20:27:CB:BD:52:0C:90:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B055E8C97367A7DF60C3FB799B823FB9A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xxtiW8zWGkN_6rmQICfLvVIMkLs.roa
Signing time: Fri 06 Oct 2023 14:22:44 +0000
ROA not before: Fri 06 Oct 2023 14:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 185.226.107.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:5e:8c:97:36:7a:7d:f6:0c:3f:b7:99:b8:23:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 6 14:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c71b625bccd61a437feab9902027cbbd520c90bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:b1:68:a0:02:66:76:71:bf:2e:35:01:da:
af:18:c8:12:34:40:73:4e:aa:83:43:bd:20:83:79:
56:ff:38:d6:5c:a0:d3:8a:32:a4:85:8f:78:bf:ac:
c2:db:10:71:a6:d5:72:ec:21:21:7f:1c:6c:d4:50:
a8:8a:21:6a:f8:38:2a:ef:48:e4:0a:79:89:4f:b8:
ee:95:bd:16:c8:42:11:09:bd:18:13:d6:2f:d0:e8:
8a:03:94:a0:e0:e6:00:41:99:65:4f:94:28:b1:33:
ed:52:72:fb:2a:5a:f3:b7:d5:5d:c2:57:31:ec:0c:
0b:23:21:b1:24:c5:43:44:67:30:c5:74:35:ce:6a:
22:42:67:89:45:0e:90:b0:93:af:e3:0a:56:55:e2:
09:5d:d5:e0:6d:bd:79:2a:f9:7f:d5:f9:13:36:47:
d7:8d:30:27:97:4a:77:28:96:a5:d8:91:7a:b1:3a:
86:fc:7b:22:aa:f8:68:f3:c0:ee:50:7d:ec:21:7d:
ae:8d:f7:13:b5:12:1f:8f:6f:9e:05:2f:8f:1f:22:
7c:68:56:a4:1c:9d:db:6e:43:10:0c:db:e7:8f:7d:
fc:ed:02:d8:d8:4a:14:94:79:6e:27:be:0e:80:49:
c3:70:df:32:0c:50:31:82:47:38:5a:b4:25:f2:cb:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:62:5B:CC:D6:1A:43:7F:EA:B9:90:20:27:CB:BD:52:0C:90:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xxtiW8zWGkN_6rmQICfLvVIMkLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.1.0/24
185.226.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:81:33:90:9a:72:a1:5c:24:13:e2:ac:4a:04:3a:d4:18:df:
a4:0c:41:a1:d3:33:92:8b:f7:e3:b1:55:34:0c:7f:35:c0:1c:
e9:0e:57:d9:33:68:7e:25:e3:5c:50:b0:cb:cf:53:49:2a:16:
36:b9:82:e6:01:e8:d3:fe:b3:35:64:b8:bb:74:2c:ce:59:79:
df:a2:77:20:0a:76:1c:6a:97:9e:ad:11:91:3d:a1:f3:c9:aa:
44:24:2c:d8:e2:25:25:d2:ca:46:1d:e5:58:35:5b:2d:64:7c:
50:8b:29:24:9f:3c:e4:03:10:81:2f:68:1e:c3:1d:62:0b:8e:
3c:aa:e6:c9:fc:22:98:6c:43:7e:26:9a:3a:23:ef:6a:0e:7c:
93:4c:96:11:b1:e5:a9:69:77:63:36:87:27:2e:d9:cc:bd:9d:
28:e4:ea:9e:4b:4d:28:e5:81:9f:b1:84:a5:75:19:6c:3b:53:
80:6b:11:28:d6:31:b9:47:5f:c2:fd:b4:c8:c7:ae:4d:14:f8:
a7:56:81:d2:d9:49:aa:c2:ac:81:17:b3:85:48:bc:aa:a2:b3:
fc:c0:7b:a8:a0:c1:7b:8a:72:9e:8e:ae:a3:1f:b5:ba:bd:52:
4f:98:a9:17:0b:fa:9b:2a:24:ab:34:5a:85:02:15:16:83:e1:
94:3a:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org