Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/gE2hXfPmnnCevlVt90JPgCfu1L8.roa
File: gE2hXfPmnnCevlVt90JPgCfu1L8.roa (raw, json)
Hash identifier: eyl7SAUPnMe5bGI4uxnHI4AEKSFlr0L4GJA29HhOG7Q=
Subject key identifier: 80:4D:A1:5D:F3:E6:9E:70:9E:BE:55:6D:F7:42:4F:80:27:EE:D4:BF
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 01856FE6FE908390A72D045EFE34E4074830
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/gE2hXfPmnnCevlVt90JPgCfu1L8.roa
Signing time: Mon 02 Jan 2023 00:34:47 +0000
ROA not before: Mon 02 Jan 2023 00:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199562
IP address blocks: 185.207.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:fe:90:83:90:a7:2d:04:5e:fe:34:e4:07:48:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jan 2 00:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804da15df3e69e709ebe556df7424f8027eed4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:35:29:b3:a5:e8:1c:5a:dc:98:8e:d5:66:
21:ab:01:63:77:2c:7d:d6:81:f9:ab:69:ee:a7:5f:
70:76:ab:9a:fd:01:b4:a2:67:3a:0d:36:6e:d4:b8:
d5:47:04:a9:ba:f9:41:90:24:69:8b:24:11:16:0d:
7d:f9:02:98:48:72:77:00:4a:fb:e1:f6:b6:df:e5:
69:fe:19:69:71:93:19:f8:a5:d6:74:82:8d:8e:0a:
db:87:6a:a5:17:2b:6e:82:52:6c:4a:78:d9:0c:c8:
d1:fe:cb:80:07:dc:56:79:09:56:6c:db:16:8e:e3:
8e:20:ad:94:ef:d4:3f:33:d7:4c:95:bd:dd:76:07:
9a:9f:de:37:73:2a:76:67:bc:f4:df:f6:71:f3:fe:
0a:c1:05:2f:40:7d:a8:f9:17:31:a9:6c:d4:76:e1:
e6:95:4f:46:14:f0:a3:70:68:93:d7:6d:66:b3:9e:
31:4f:59:18:50:71:c0:af:8d:bf:4e:56:4b:9f:7e:
8d:cf:57:7e:e0:0e:e5:0b:5e:72:9d:05:a9:ea:03:
64:2b:8c:fa:61:96:cd:b3:cf:3f:a5:df:e1:58:24:
36:a8:43:6d:4a:33:c3:54:b7:41:9b:1e:78:c9:ed:
ec:f1:9a:ef:29:1b:94:e6:9f:3c:b1:ab:29:1e:af:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:A1:5D:F3:E6:9E:70:9E:BE:55:6D:F7:42:4F:80:27:EE:D4:BF
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/gE2hXfPmnnCevlVt90JPgCfu1L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.215.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a1:68:80:6a:2e:09:a7:8d:d4:3d:eb:b5:69:29:b9:d3:92:
76:90:48:bb:ec:16:83:b2:02:91:6a:fa:50:9e:ff:b1:15:13:
a3:07:67:1a:f3:0a:8f:98:38:5f:5a:d4:66:06:9d:dc:92:c8:
fd:8b:9f:68:cf:79:c6:df:92:c1:49:18:0e:a4:51:93:92:19:
84:7a:d1:a0:40:5e:d7:64:66:38:ed:d7:b1:ff:3b:16:89:24:
bc:dd:c7:e0:71:68:e1:37:8f:a2:01:87:2b:e1:73:7a:4b:19:
48:3c:2b:aa:d5:40:f3:05:81:89:03:6b:19:1c:e5:39:40:d0:
fe:a9:73:8b:d3:0e:88:8e:97:15:c4:41:cb:1d:6a:57:e0:99:
7b:bc:c8:d3:3b:77:e5:81:c3:bd:02:df:f5:01:6b:0b:c8:fb:
4c:b9:69:55:1b:c3:18:d4:01:6b:58:da:f9:f1:71:12:3f:ed:
09:e7:49:5d:71:d3:e7:a6:c7:5c:8e:f7:c9:da:e2:62:94:68:
e4:0b:28:41:c0:5e:16:3f:af:97:32:42:b1:56:20:54:bd:3a:
23:c5:f4:dc:fa:a6:d4:40:d6:fc:ca:47:4a:77:48:c5:c6:16:
15:da:c5:c0:02:75:30:e1:45:36:38:94:b5:b6:74:5d:94:ed:
1d:20:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:50 2024 by rpki-client on console-ams.rpki-client.org