Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yws80mY_-_RpwYmipwH8zsJkn4Q.roa
File: yws80mY_-_RpwYmipwH8zsJkn4Q.roa (raw, json)
Hash identifier: X4sAD1mDulZnqkb0gBoWHWIJfL5iMdfFTtgOVmssHgA=
Subject key identifier: CB:0B:3C:D2:66:3F:FB:F4:69:C1:89:A2:A7:01:FC:CE:C2:64:9F:84
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AA93EA893EF1790517AE076D5F6AD655C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yws80mY_-_RpwYmipwH8zsJkn4Q.roa
Signing time: Mon 18 Sep 2023 17:02:50 +0000
ROA not before: Mon 18 Sep 2023 17:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 10:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:3e:a8:93:ef:17:90:51:7a:e0:76:d5:f6:ad:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 18 17:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb0b3cd2663ffbf469c189a2a701fccec2649f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:90:59:81:85:ee:bb:48:ec:3c:0c:46:4c:
29:d4:ab:4e:78:7b:21:d0:38:d7:6d:91:35:00:21:
0f:d3:4c:e8:f6:6c:ea:19:74:58:3e:cf:f4:6e:45:
6d:46:06:e4:05:e8:1f:11:59:98:bf:88:8b:e0:0d:
9f:f0:e0:ee:f1:96:79:58:4c:c4:2b:5b:b0:13:f7:
fe:3d:e0:29:0f:0e:e5:77:b8:e0:3b:61:c7:1e:1f:
42:8e:35:eb:ab:b2:1a:97:f5:bb:e1:0d:93:a9:62:
23:7b:19:46:f8:e7:9f:11:f5:37:24:0c:34:f5:88:
1f:0a:79:c6:ac:a6:72:e6:51:c7:ea:84:00:9d:1c:
6e:eb:71:de:7a:e2:95:bd:eb:82:80:6c:95:a1:8d:
b4:24:06:91:40:40:bf:d8:20:ca:40:76:ba:dd:3f:
0d:7f:81:2b:a3:b4:ca:35:24:30:8b:89:47:d4:55:
c3:3a:35:49:66:4c:71:93:4b:7d:af:77:67:ca:04:
81:a4:1a:73:c7:b1:5e:57:51:51:5c:ec:16:b4:cb:
24:67:86:ee:02:af:20:6b:2c:ca:6e:1c:fe:c3:39:
bd:43:c0:f9:75:81:b0:1f:7a:6b:f2:4b:9c:65:e0:
b4:fb:16:01:50:21:c4:57:32:69:77:fc:ec:da:00:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:3C:D2:66:3F:FB:F4:69:C1:89:A2:A7:01:FC:CE:C2:64:9F:84
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yws80mY_-_RpwYmipwH8zsJkn4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bd:61:19:72:e8:0c:13:a1:f0:22:9c:a3:f4:9b:59:5b:e3:
8e:2f:f5:2d:36:45:aa:dd:5d:f3:2b:75:ee:90:f5:0d:2f:0c:
c2:f6:74:69:6d:08:6a:d0:af:db:a7:37:b9:ea:87:b4:4a:e9:
3c:24:fa:3c:89:10:cb:e1:42:02:62:51:26:c3:64:25:33:f4:
dc:e4:8c:f6:a5:0f:e0:ac:e2:7a:d8:95:70:e4:33:ce:a6:43:
01:1f:4e:a6:40:12:85:ca:a4:56:03:ee:8f:bf:67:09:26:69:
7d:08:3c:c4:66:3b:b9:83:9c:1c:95:72:a8:c0:e1:5f:1e:26:
a0:61:86:ff:99:58:d9:eb:c7:5d:5f:f4:09:02:93:c8:b2:fa:
c9:71:e2:19:04:7a:89:bd:81:20:48:0c:7d:ff:45:0b:8c:2b:
5c:1c:8e:22:85:fd:d8:de:67:fc:b7:91:8a:aa:b3:fd:4d:73:
29:66:e8:ae:20:97:22:41:7a:bb:1d:7e:42:3b:60:86:21:4d:
9a:36:e1:5a:91:c3:06:96:51:43:15:6c:c6:ca:18:6d:36:5c:
6b:02:37:cc:ea:64:4b:49:97:f5:ad:2d:e1:a9:2f:25:35:02:
7c:32:b6:18:fd:dc:e0:f9:c9:ba:9a:05:ab:c2:2d:38:34:ec:
cc:03:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org