Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yKlefu9zWiGW6oCMsCOItYfsWZs.roa
File: yKlefu9zWiGW6oCMsCOItYfsWZs.roa (raw, json)
Hash identifier: H94gr4dHablHDdLTwXPnab7iYQpA/lQ2MS41w4C8h5k=
Subject key identifier: C8:A9:5E:7E:EF:73:5A:21:96:EA:80:8C:B0:23:88:B5:87:EC:59:9B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018F29994A91E6537293B17B0D2B17C16DA9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yKlefu9zWiGW6oCMsCOItYfsWZs.roa
Signing time: Mon 29 Apr 2024 11:24:22 +0000
ROA not before: Mon 29 Apr 2024 11:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 271324
IP address blocks: 185.234.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:99:4a:91:e6:53:72:93:b1:7b:0d:2b:17:c1:6d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 29 11:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a95e7eef735a2196ea808cb02388b587ec599b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:0d:07:e7:15:11:6d:52:70:a8:23:74:c3:
48:29:ea:1d:0e:15:ea:f2:a8:8e:02:a9:e9:a7:64:
01:4e:8e:cc:f7:a0:a3:24:cb:aa:3e:3e:74:5f:b7:
7d:eb:88:53:b2:ab:8d:a7:92:f9:ea:0b:f2:e9:d4:
aa:65:88:51:e1:ec:21:1b:cf:82:47:42:fa:a2:97:
1f:8a:1c:d8:35:12:6f:07:ff:ee:f8:aa:41:e2:f7:
c0:89:d6:04:76:02:d5:f3:d7:38:92:ca:a9:a1:de:
26:d2:f1:a0:6e:48:e2:6c:b9:bf:14:ca:9a:54:2c:
7b:d7:da:c6:73:d4:4b:e0:38:cc:04:fb:2b:2f:6c:
88:75:12:56:86:ab:94:08:bd:f5:6a:3e:5e:59:fe:
47:00:c7:af:3f:6a:df:cd:a4:2e:f0:a1:c9:51:75:
5e:4f:41:35:21:db:cb:64:a8:b9:f2:13:10:f3:5d:
f1:28:72:63:d9:e9:90:b5:21:21:f3:09:8e:48:e5:
0d:79:5e:e1:f6:6b:ad:a2:53:a3:f9:1d:31:54:04:
85:24:c0:09:a5:05:50:90:3b:ed:eb:d1:73:43:07:
6c:f3:be:d7:9b:df:6a:d8:75:c6:98:f5:f2:58:d3:
45:c2:45:bf:f7:6e:66:c4:62:20:c3:0a:55:36:1c:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:5E:7E:EF:73:5A:21:96:EA:80:8C:B0:23:88:B5:87:EC:59:9B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yKlefu9zWiGW6oCMsCOItYfsWZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2e:a7:09:4e:be:e4:f1:77:06:5a:3a:78:d6:e9:77:38:e4:
a4:0e:56:53:fa:76:ae:b9:26:b3:d3:bc:1e:7e:fe:7d:1c:aa:
ce:60:e6:90:d9:e5:53:84:2b:9e:b3:40:65:65:ca:a7:05:e1:
fa:bd:cd:b1:a6:9f:8d:19:01:e1:76:b0:76:a0:48:52:f4:c8:
51:5d:15:57:0b:df:b9:81:d7:ad:58:83:3f:09:15:0a:dd:06:
23:be:8c:6d:71:55:cc:f0:9a:9e:9e:ea:a4:e8:7d:86:5a:2d:
5c:78:f8:0b:9a:e9:a9:4c:4f:56:51:4d:f3:88:bd:ed:6f:b4:
31:3c:27:76:22:7f:5d:aa:cc:2f:27:fd:4a:b0:84:3f:e7:80:
20:a7:3c:9c:31:db:fc:60:79:40:6c:23:18:3c:a0:71:a6:90:
ed:95:37:c4:1d:21:a4:e5:4e:24:61:96:90:f6:66:3e:1b:4f:
b3:fb:37:aa:f3:f6:dc:a4:70:06:42:18:42:9c:d7:0a:a9:9e:
70:b6:a1:c9:5d:8c:47:ac:85:5f:f1:c8:ce:6e:bf:e4:6d:2e:
1a:2b:5c:1d:84:2a:98:70:d3:a4:7c:47:d9:a6:76:69:d4:8e:
3f:9d:cd:f2:6e:d3:f3:a9:aa:d7:dd:55:28:32:3f:c7:58:1a:
85:f0:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:22:20 2024 by rpki-client on console-ams.rpki-client.org