Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/E5DW600SX1DwX_0V2pdT0eeQiY0.roa
File: E5DW600SX1DwX_0V2pdT0eeQiY0.roa (raw, json)
Hash identifier: jl5ThoYX+VvltuhVmZXbCRXrMbrQ2SQB9K/sRE8eG+g=
Subject key identifier: 13:90:D6:EB:4D:12:5F:50:F0:5F:FD:15:DA:97:53:D1:E7:90:89:8D
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 01856CE6117BAA0F786EDDDBF80CC875F51A
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/E5DW600SX1DwX_0V2pdT0eeQiY0.roa
Signing time: Sun 01 Jan 2023 10:34:55 +0000
ROA not before: Sun 01 Jan 2023 10:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60815
IP address blocks: 185.20.24.0/23 maxlen: 23
185.20.24.0/22 maxlen: 22
185.20.24.0/24 maxlen: 24
185.20.27.0/24 maxlen: 24
185.20.26.0/24 maxlen: 24
185.20.26.0/23 maxlen: 23
185.20.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:11:7b:aa:0f:78:6e:dd:db:f8:0c:c8:75:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Jan 1 10:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1390d6eb4d125f50f05ffd15da9753d1e790898d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:a1:25:2c:00:6b:13:59:59:81:41:48:47:
b3:b9:4f:bd:de:91:73:d2:a4:5c:15:52:e3:98:36:
26:23:aa:b5:39:8d:38:cb:fd:53:13:b1:8d:97:44:
34:86:a7:27:64:c6:dd:3b:55:3e:50:3c:d5:83:6a:
37:d2:8e:ab:f5:48:cc:db:f7:be:3c:9b:ec:9c:88:
1f:98:c4:95:93:3d:a2:40:10:70:32:0f:a6:4b:51:
33:0a:f3:21:65:33:33:ca:e7:51:9d:10:3e:4a:8d:
53:d0:8d:98:66:5c:23:0a:0c:c2:e3:4c:57:cc:f7:
c7:da:26:62:b1:85:ff:7f:f1:6e:68:c8:cc:07:6e:
09:27:da:e8:8e:b9:86:dd:5e:2b:60:fc:10:df:3e:
aa:22:b3:d6:8a:98:2d:28:49:a1:a2:71:51:72:18:
0e:13:94:13:57:d6:3d:13:8b:d7:69:f4:5f:e0:e0:
9d:fe:84:0a:6f:7e:3d:87:8d:df:ca:e7:04:00:24:
ed:c4:88:b7:6f:5d:65:c8:0b:93:b0:3e:81:dc:16:
03:6a:95:9a:7d:07:2a:17:8d:ef:27:b9:69:34:e1:
95:2b:77:08:f9:9c:73:c7:62:2c:ac:98:30:72:8a:
0c:31:06:6c:0c:57:1f:5f:ff:49:e0:a8:51:38:e3:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:D6:EB:4D:12:5F:50:F0:5F:FD:15:DA:97:53:D1:E7:90:89:8D
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/E5DW600SX1DwX_0V2pdT0eeQiY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.24.0/22
Signature Algorithm: sha256WithRSAEncryption
78:95:22:32:04:7a:c3:e8:6c:8f:35:44:b6:f6:1b:25:19:a7:
50:76:0b:25:42:ea:5f:a7:c7:87:37:c2:d0:8a:a8:f2:c4:4f:
96:29:f4:2f:54:26:40:42:8d:05:91:5f:18:07:19:98:82:57:
84:17:58:e6:c4:26:8b:45:07:55:d7:12:6e:cf:69:cc:3b:28:
35:5b:ac:57:2f:d2:62:f7:95:ce:36:c6:62:9f:77:50:e5:50:
eb:e8:55:52:f4:47:d9:64:91:24:b0:22:44:a0:41:a6:56:51:
01:ac:3b:a5:6b:c6:6b:a3:63:78:12:81:54:96:c1:d8:d3:4f:
a2:55:df:99:8c:c6:00:10:0c:c2:7d:46:a2:01:9c:5b:dc:23:
78:8d:6a:d9:4b:5f:98:f0:31:81:77:2f:1b:87:6f:7d:89:68:
da:19:7e:88:ea:a2:f1:cf:3f:f1:5d:39:b7:6a:25:c9:01:6a:
43:79:7b:f2:fc:3d:44:02:d9:d6:ca:17:55:ac:7c:5b:1e:86:
ed:7b:47:e7:32:56:1a:8c:13:51:54:3d:bf:15:42:ba:13:50:
ab:19:4f:25:3f:e7:7e:d6:99:21:86:d1:f4:71:53:46:d4:b5:
b8:41:93:2f:53:1a:c5:bd:5e:71:c4:03:17:e0:ef:89:42:b5:
50:b9:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org