Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rEdtMcpSN_G2gdEeRAsHslHP1EM.roa
File: rEdtMcpSN_G2gdEeRAsHslHP1EM.roa (raw, json)
Hash identifier: 5TQ8BHQsyPtDqE6NmINaXqq+P0pP8PZTem/0RfNEloA=
Subject key identifier: AC:47:6D:31:CA:52:37:F1:B6:81:D1:1E:44:0B:07:B2:51:CF:D4:43
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0187D93EC9E95F2A5105F6A06BE476AF45A5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rEdtMcpSN_G2gdEeRAsHslHP1EM.roa
Signing time: Mon 01 May 2023 21:36:23 +0000
ROA not before: Mon 01 May 2023 21:36:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 185.244.31.0/24 maxlen: 24
185.244.26.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.99.0/24 maxlen: 24
87.237.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:3e:c9:e9:5f:2a:51:05:f6:a0:6b:e4:76:af:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: May 1 21:36:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac476d31ca5237f1b681d11e440b07b251cfd443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:45:6b:5c:08:a5:10:87:3d:b6:19:dc:40:
97:5b:2c:ff:f5:f9:1b:ef:e2:a4:2a:fa:af:5f:de:
fd:da:1c:5d:01:5e:57:71:ec:ad:7b:8f:2b:2b:7c:
2b:f5:a6:4f:09:5a:cd:0f:0c:0d:f8:be:22:49:37:
d3:a5:44:86:6f:26:73:a4:61:eb:c7:8d:f0:ba:44:
99:f4:fb:01:23:84:10:b5:5d:2e:b1:17:c9:fe:e7:
c6:e3:bf:6c:6d:b6:e5:89:a0:82:3a:da:15:f1:83:
56:92:6e:5e:9e:09:1c:2d:0b:7c:e1:29:f0:fc:0a:
8d:1b:03:31:bd:64:50:41:7b:b9:9f:6e:4d:bd:d5:
e2:f0:4a:00:c7:df:6e:21:9f:12:a2:c0:f8:17:83:
fc:fb:eb:e5:3f:bb:e4:60:c5:03:50:af:e5:0d:a4:
10:e6:3a:60:5d:4c:74:2b:24:b1:df:70:15:ea:4c:
b8:1f:cc:0a:ba:f9:ba:34:56:8a:94:89:fd:a2:f1:
2e:6a:b9:8e:e9:e4:7b:6a:7a:6b:df:ce:ad:78:99:
9b:7d:67:79:0a:3d:80:3b:2a:0d:81:37:e3:99:41:
99:44:b4:61:a6:88:18:b6:de:45:32:83:7e:21:f3:
2c:a7:60:7c:ad:72:84:68:4f:69:2b:85:8d:b2:4e:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:6D:31:CA:52:37:F1:B6:81:D1:1E:44:0B:07:B2:51:CF:D4:43
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rEdtMcpSN_G2gdEeRAsHslHP1EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
185.244.26.0/24
185.244.31.0/24
194.5.97.0/24
194.5.99.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2e:00:78:d3:42:e9:27:2b:e4:bc:ec:a9:73:19:33:b0:94:
dd:b0:97:ee:2a:47:84:92:6f:d3:13:f9:33:73:ba:ec:ac:a4:
65:c4:d4:7a:4d:2c:fb:e2:f6:18:ba:7f:d3:d4:68:f4:e9:cf:
91:35:b7:f7:8d:10:3d:6a:e8:13:9f:2f:2e:7e:e4:da:86:3c:
f4:16:de:99:aa:d9:1e:ed:53:ce:eb:ea:94:e7:df:f1:23:95:
de:1e:1d:b4:d9:bb:4c:f5:9f:5e:f5:70:65:f2:86:a6:52:3a:
44:39:52:7e:62:e3:86:70:0e:b5:67:0d:e8:d1:4f:81:dd:c8:
83:f7:16:8d:5b:09:7a:58:94:f5:6e:2d:9f:a0:fc:12:a5:b2:
b0:d8:ad:8d:75:b8:0c:4a:85:a5:5b:13:00:6b:9a:7c:9a:b5:
57:6a:19:c4:79:92:9a:01:26:1f:3b:f4:91:e6:e5:c1:43:52:
ac:9d:d4:1e:06:1c:f0:61:10:51:de:b4:8e:f8:7c:67:8a:6b:
02:58:7e:3c:42:8e:9f:d8:15:1c:d4:ff:09:1d:dd:94:13:63:
39:e5:d2:8e:a3:82:71:08:bd:ec:f7:a2:18:fe:3c:c4:25:b6:
f7:79:47:d5:8c:65:fc:dd:b2:4d:90:1c:69:ec:e5:f9:ab:06:
75:90:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 14:14:02 2023 by rpki-client on console-ams.rpki-client.org