Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yCJ4XC9DRMY8LFlm10xOtwYBbo8.roa
File: yCJ4XC9DRMY8LFlm10xOtwYBbo8.roa (raw, json)
Hash identifier: E1QB1fZgkvR/ihC8BTjra7fDVxIgJGpXr1qGJ9I9ZRA=
Subject key identifier: C8:22:78:5C:2F:43:44:C6:3C:2C:59:66:D7:4C:4E:B7:06:01:6E:8F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187B28FCE05C130FA6AD10260C772B8A051
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yCJ4XC9DRMY8LFlm10xOtwYBbo8.roa
Signing time: Mon 24 Apr 2023 09:19:41 +0000
ROA not before: Mon 24 Apr 2023 09:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 185.255.124.0/24 maxlen: 24
185.223.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:8f:ce:05:c1:30:fa:6a:d1:02:60:c7:72:b8:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 24 09:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c822785c2f4344c63c2c5966d74c4eb706016e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:d4:05:7b:1e:c1:36:99:d2:fc:5d:20:75:
43:2a:b1:a3:a9:7b:7f:d2:e9:61:5d:04:c0:70:78:
b4:83:82:98:bc:16:3e:2a:55:bd:1d:9c:b9:80:80:
4b:82:75:38:db:9d:5a:be:02:e1:8d:2a:ef:eb:a3:
e3:9a:42:70:9d:e1:c8:98:2f:04:37:89:fa:32:db:
97:b5:02:ca:21:0a:bd:bf:c0:6d:86:72:61:05:ab:
d7:db:36:77:a3:cd:e7:44:09:82:4d:15:36:e7:a7:
55:49:4b:29:c3:45:bb:0e:bc:26:3d:cb:c9:b8:8d:
b1:5f:26:85:a8:a9:36:62:fe:a5:5c:33:74:65:bc:
66:b8:4e:7a:0d:9d:7c:7e:a4:3c:62:4a:9b:2c:1e:
cc:24:5a:7f:53:71:96:1e:c9:20:80:38:48:28:30:
2b:25:28:3f:3f:0b:dd:a1:fd:db:a7:77:84:b3:45:
9a:e3:65:67:45:81:1e:72:9e:ee:9a:07:f0:54:d8:
f3:70:d4:4d:8c:c6:a3:92:2e:fc:a9:ae:d0:e9:4c:
24:7c:6d:77:88:a8:f3:e8:0c:4d:49:d9:63:4f:30:
d4:91:16:71:23:6a:25:36:a0:6a:0e:e9:ea:89:d9:
a9:00:f8:cc:80:b3:42:86:76:08:8a:c4:c1:5f:5f:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:78:5C:2F:43:44:C6:3C:2C:59:66:D7:4C:4E:B7:06:01:6E:8F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yCJ4XC9DRMY8LFlm10xOtwYBbo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.152.0/24
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d2:1f:46:e5:a3:2d:02:72:ce:78:ca:bd:f6:b3:c5:ef:fc:
68:62:e6:21:73:65:78:4c:f2:b7:c0:75:68:55:05:cc:5b:28:
5b:27:0d:7b:1e:10:dd:1c:8c:06:e8:5c:d6:25:e1:ed:ed:9f:
ba:a7:28:e0:e3:64:3f:db:d2:0c:f6:d1:9f:7b:44:9d:00:db:
2f:95:82:17:59:da:04:76:1a:33:c2:ab:1b:73:37:f9:ad:4d:
1b:7c:34:75:20:98:06:72:4c:66:37:71:db:ca:bb:be:42:44:
2a:b3:12:10:08:4b:64:d2:76:bd:d1:c1:a6:a0:7a:d0:f7:04:
f6:cb:72:95:15:b8:d0:fa:37:5b:63:86:b3:4b:85:be:3c:bc:
90:1b:32:01:10:66:a0:a4:23:fc:a7:c3:74:9e:69:9d:ac:1e:
af:fb:2c:60:05:2d:1d:dc:c4:ad:0e:b4:b1:08:c2:27:62:ec:
a7:ec:91:9f:ae:08:5c:6e:34:e2:63:33:e3:71:d4:9f:df:80:
9e:bd:78:0c:e1:9d:04:ae:50:2e:a3:13:7c:d7:3c:56:1d:09:
a7:86:ef:6f:13:74:d4:e8:50:7e:2e:da:5e:9c:8c:7e:8f:e7:
83:48:68:b1:12:96:dc:78:33:40:f7:c7:0f:6b:6d:9f:c3:3c:
55:1b:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org