Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/CEyGXqchKcwaHpy08uVqoZ2Hj3c.roa
File: CEyGXqchKcwaHpy08uVqoZ2Hj3c.roa (raw, json)
Hash identifier: xKwULMRt0pR9CJGCXVqe8oszXmSRYxsPxo0E6iXu15I=
Subject key identifier: 08:4C:86:5E:A7:21:29:CC:1A:1E:9C:B4:F2:E5:6A:A1:9D:87:8F:77
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 018570C2B4D60A723EE14ABDCDC1CD0F49B6
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/CEyGXqchKcwaHpy08uVqoZ2Hj3c.roa
Signing time: Mon 02 Jan 2023 04:34:46 +0000
ROA not before: Mon 02 Jan 2023 04:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2830
IP address blocks: 185.106.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 13:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:b4:d6:0a:72:3e:e1:4a:bd:cd:c1:cd:0f:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jan 2 04:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084c865ea72129cc1a1e9cb4f2e56aa19d878f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:d3:05:e8:35:64:67:1b:b6:cc:ab:e8:e0:
32:04:19:a1:93:e5:c8:f6:99:b3:f1:0f:c2:86:25:
f0:26:cd:08:ea:c3:03:0a:5b:a2:b1:fd:25:81:ae:
e1:25:d5:45:f8:23:e2:79:41:1f:89:b6:14:93:fc:
76:6f:0f:a5:87:68:8a:ee:0e:49:22:fe:c7:5c:f7:
24:5d:3a:f1:d3:25:69:f0:90:ef:3c:fc:56:f9:bf:
d3:5e:20:00:d2:e7:b7:13:63:48:91:cc:68:25:d4:
a3:72:9f:cb:d3:62:a8:9e:04:d9:16:37:bd:96:5b:
1d:d1:19:62:da:52:77:6d:6b:94:3c:6a:12:0c:25:
77:ce:ed:03:4d:9e:c8:5c:d5:94:bb:bb:37:63:4a:
01:aa:dc:a8:f1:06:2b:bc:39:f7:c6:8b:40:c4:6d:
b0:1f:26:4e:58:06:eb:66:53:5d:23:e9:47:7c:28:
a6:61:a3:0d:52:85:e2:f4:cf:25:27:0c:42:f7:96:
05:83:a6:a5:1a:31:c6:b8:b5:f8:ec:9e:5b:c0:2b:
d5:1b:14:e4:3b:89:34:75:ba:09:67:f5:22:e0:f0:
7d:5e:b2:48:1b:82:0f:86:5b:5a:1e:83:a3:11:1f:
38:15:7b:62:40:6c:13:27:e3:98:36:d3:6a:ff:df:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:86:5E:A7:21:29:CC:1A:1E:9C:B4:F2:E5:6A:A1:9D:87:8F:77
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/CEyGXqchKcwaHpy08uVqoZ2Hj3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.226.0/24
Signature Algorithm: sha256WithRSAEncryption
29:40:9f:cf:b4:2c:fa:b8:cd:66:85:27:6c:b6:3b:63:b0:d1:
28:7d:cd:8e:5d:4b:7f:d7:8f:9b:e8:eb:0f:07:86:bb:f7:f3:
0d:2f:25:b8:c3:be:21:92:77:cb:2d:72:74:23:9b:1c:b5:b7:
65:04:9d:b5:4b:21:4a:fb:ac:ea:e6:07:ad:dc:65:f2:f5:86:
6f:66:72:97:2c:3f:ed:f8:2a:b2:59:c1:d4:15:ce:02:16:4b:
c3:e7:c6:de:04:d7:d7:7d:e6:e7:42:0d:cc:33:36:15:f0:7b:
6e:8a:af:88:36:27:b2:c9:f4:40:82:a7:f0:5b:f5:fe:18:5e:
59:ac:bc:90:5f:70:84:c9:00:89:4b:8d:e2:06:00:09:73:38:
7e:39:93:26:a3:38:e2:23:38:6e:dc:71:f9:57:54:c3:d4:55:
f3:05:db:ca:f3:20:5b:a5:ae:04:a4:f6:17:a9:bc:8f:f5:bd:
66:10:37:c8:bd:ad:fc:f1:d8:af:6c:34:39:31:c0:b6:73:0b:
08:a2:e4:b3:de:85:01:15:a6:3f:da:d0:c3:b1:0e:d5:7d:07:
57:b4:d2:66:f4:89:48:50:19:45:10:51:ba:66:5b:5b:88:14:
38:94:f6:d0:54:2a:e1:ee:80:66:41:ef:9d:df:17:40:fb:c6:
05:73:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org