Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/L43tLIs_QnyezlPIsS6cGlL96fA.roa
File: L43tLIs_QnyezlPIsS6cGlL96fA.roa (raw, json)
Hash identifier: pKxMSv2Sho/DwfNBMZW2zC9JHg0M0zEv22bEgcDFpG4=
Subject key identifier: 2F:8D:ED:2C:8B:3F:42:7C:9E:CE:53:C8:B1:2E:9C:1A:52:FD:E9:F0
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018572C39A38AEDD107B5B6435406AF35FF6
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/L43tLIs_QnyezlPIsS6cGlL96fA.roa
Signing time: Mon 02 Jan 2023 13:54:59 +0000
ROA not before: Mon 02 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59588
IP address blocks: 185.254.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:9a:38:ae:dd:10:7b:5b:64:35:40:6a:f3:5f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 2 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f8ded2c8b3f427c9ece53c8b12e9c1a52fde9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:f9:a5:45:77:83:62:ff:32:24:8a:f7:82:
a2:39:8b:8a:3d:d2:5b:f2:53:69:ad:1d:5c:71:48:
35:bd:eb:bb:0c:e0:0e:94:79:02:54:65:71:d2:0b:
1f:d2:54:7a:f2:8e:b4:05:75:f8:ec:a6:c5:07:2a:
d6:1a:3e:4b:74:66:70:14:5e:eb:80:7c:9e:63:c1:
2d:80:69:dc:d2:53:d2:7b:d6:56:2d:29:e6:0f:89:
61:5d:19:20:ab:0b:dd:ab:78:23:5e:4f:2b:da:ab:
d4:84:59:9d:98:4b:81:4f:6a:28:60:97:00:46:52:
b6:70:61:fd:cc:a1:02:07:45:ea:49:4e:16:f6:f9:
c2:84:9d:92:ab:9c:4c:df:f2:b3:2f:7d:d3:db:16:
30:e3:49:10:a3:fa:e6:14:a1:4b:c5:f0:ff:a4:8f:
31:16:7f:d1:fd:54:7a:4f:21:f5:91:95:28:7f:17:
87:55:bf:08:c1:d7:6a:9c:37:b8:d6:cd:39:eb:be:
b5:61:75:57:1b:76:0e:90:7d:36:8d:0f:5d:ea:09:
c8:54:03:31:fb:e7:8e:b7:83:3f:a9:f2:07:b7:f6:
3a:df:22:ab:4e:b9:34:0e:8c:e8:55:c7:0e:3d:9c:
1e:ca:62:ce:86:25:33:57:fd:d7:e1:f8:67:6a:94:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:ED:2C:8B:3F:42:7C:9E:CE:53:C8:B1:2E:9C:1A:52:FD:E9:F0
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/L43tLIs_QnyezlPIsS6cGlL96fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d4:88:b7:b2:81:0f:63:5a:9a:84:28:87:a2:bc:4c:58:43:
3d:92:a8:06:48:69:9b:c4:d2:5b:e1:0c:2e:e3:80:28:79:c9:
86:22:e9:02:38:ec:63:c9:1a:52:81:48:22:48:28:be:5c:75:
f8:f4:6d:d5:32:3a:94:d6:28:83:8d:b2:26:6c:db:a2:4d:1c:
72:0c:d1:a4:8d:66:47:1c:2e:fb:93:e2:a5:fe:8e:66:7b:f6:
31:a9:e3:3f:64:dc:58:7d:58:d7:db:8e:6e:74:48:a7:68:25:
9e:98:f7:49:71:bc:fa:7b:c4:20:24:f4:b9:58:60:02:bc:03:
48:0a:fc:87:59:23:58:c5:2f:41:74:bb:73:29:46:6f:c1:9d:
cf:ad:79:4e:b3:6a:be:4e:70:a8:ad:01:70:2b:f4:c8:cb:47:
c8:8f:8f:8d:45:c5:f1:1a:48:b5:cd:be:c8:fc:b0:a6:7a:3f:
79:fb:1b:62:48:ab:ec:21:f2:f6:74:f3:1c:56:46:52:57:12:
15:08:7b:c8:b9:7a:75:f6:2e:5e:90:9f:52:fb:a4:dd:46:8f:
09:e2:95:2f:06:0c:cb:b4:e2:ee:cb:40:26:93:69:f7:60:a9:
68:08:82:7f:97:16:d3:c8:b9:e6:e5:92:3b:e8:e0:38:85:9f:
54:b8:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org