Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/krqSaEZ45mfRMLaAaMWju5ZQqyo.roa
File: krqSaEZ45mfRMLaAaMWju5ZQqyo.roa (raw, json)
Hash identifier: BcRxckF6GDD8mjgOcYiW6U+YJUlHjnsBx2rNXmz2bwM=
Subject key identifier: 92:BA:92:68:46:78:E6:67:D1:30:B6:80:68:C5:A3:BB:96:50:AB:2A
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018CC94E5ED4F49B817E49FAF7D7D6435450
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/krqSaEZ45mfRMLaAaMWju5ZQqyo.roa
Signing time: Tue 02 Jan 2024 08:33:25 +0000
ROA not before: Tue 02 Jan 2024 08:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205411
IP address blocks: 185.21.124.0/22 maxlen: 24
2a00:5560::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 12:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5e:d4:f4:9b:81:7e:49:fa:f7:d7:d6:43:54:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92ba92684678e667d130b68068c5a3bb9650ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:d2:82:7a:51:68:c2:be:bf:ac:41:ab:9f:
37:98:84:73:31:2a:62:9e:33:96:06:62:da:14:56:
21:23:64:0a:85:98:fa:33:f7:3f:64:72:bb:a6:7e:
60:cb:f5:3a:f8:72:f5:6a:cc:17:2e:34:ba:f1:b5:
72:b7:8d:e8:08:f4:44:24:b5:ce:34:dd:1d:57:3e:
34:3f:91:66:15:4f:58:ba:df:e3:df:eb:1e:90:05:
e7:e8:e5:d6:46:b3:3c:58:ae:24:d6:04:23:e9:93:
9e:3b:9f:84:05:12:ef:1b:23:15:41:de:18:f5:76:
a3:31:87:1c:77:3c:bb:60:eb:3d:aa:43:01:c1:e1:
01:b3:c9:eb:a8:0c:78:b5:e4:47:29:e9:ad:5b:5b:
99:c7:e9:97:ca:dc:5c:79:20:fd:2a:8a:aa:b8:6e:
d4:fd:a6:f0:c1:cd:10:53:bb:30:c3:63:9d:09:ba:
86:d5:3e:e9:2c:1d:47:fb:29:c7:7c:57:cb:15:eb:
de:e5:e3:42:d1:49:aa:ff:3d:71:24:cb:4b:ab:12:
2b:7e:da:64:a1:68:d5:17:4e:6f:7a:37:07:8a:8b:
45:55:65:22:45:d7:c0:d2:a2:1f:31:ea:eb:fe:91:
c6:89:8e:e0:cb:ff:83:4a:dd:b2:83:a8:56:78:ca:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:92:68:46:78:E6:67:D1:30:B6:80:68:C5:A3:BB:96:50:AB:2A
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/krqSaEZ45mfRMLaAaMWju5ZQqyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.124.0/22
IPv6:
2a00:5560::/32
Signature Algorithm: sha256WithRSAEncryption
9b:3e:d7:b5:ae:fe:ea:18:26:2e:dd:c7:d8:9b:a9:f7:63:0b:
df:f6:7e:78:9c:36:e7:d3:90:22:88:eb:6b:3b:74:73:6c:7b:
e7:de:50:6d:32:3b:72:4a:4d:9c:ea:5c:d3:a9:1f:d0:7e:ac:
7a:df:aa:57:5a:59:21:37:a5:71:e3:0f:49:cb:3a:65:5a:fc:
4b:95:2e:51:52:1c:8d:88:12:33:f7:2d:23:29:44:27:5d:0b:
ad:20:76:7c:57:8d:41:9e:27:29:72:39:56:7a:de:27:16:df:
dc:a0:fa:dc:ba:02:72:24:63:62:f1:06:06:4f:6e:6f:ab:fa:
b5:1f:ff:e7:e6:71:79:13:be:d9:d0:1e:06:7a:4b:95:2a:97:
f3:d2:c1:d8:8d:79:db:b8:26:e8:6e:0f:30:6a:1a:80:28:91:
36:a4:60:1f:c9:ec:55:7c:25:ef:2c:4d:73:10:72:af:9e:21:
ea:0f:2c:59:eb:61:8f:7b:58:06:d1:a5:2a:3c:8e:55:30:5e:
ce:11:3d:83:c2:0d:d4:9e:0e:6e:f3:20:be:69:2f:cc:44:c6:
13:36:66:5f:63:93:f5:02:c7:b3:0d:f6:7e:b9:81:04:4e:59:
97:d3:8e:c8:67:2c:b7:27:87:7c:12:b6:6f:19:4e:be:b3:bd:
95:3d:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org