Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/k5RmkXNdF8nuZgqmyxmpwsRRmhw.roa
File: k5RmkXNdF8nuZgqmyxmpwsRRmhw.roa (raw, json)
Hash identifier: jaNz3LE8gaGDaVmIMde4M+gIB8iwXUuxmX3fH4q9rI8=
Subject key identifier: 93:94:66:91:73:5D:17:C9:EE:66:0A:A6:CB:19:A9:C2:C4:51:9A:1C
Certificate issuer: /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial: 0185723A402DAC9EC23178423FC1B60F5A87
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/k5RmkXNdF8nuZgqmyxmpwsRRmhw.roa
Signing time: Mon 02 Jan 2023 11:24:58 +0000
ROA not before: Mon 02 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212579
IP address blocks: 185.19.224.0/22 maxlen: 24
185.243.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:40:2d:ac:9e:c2:31:78:42:3f:c1:b6:0f:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Validity
Not Before: Jan 2 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93946691735d17c9ee660aa6cb19a9c2c4519a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:13:5c:81:08:a2:09:4c:0e:02:b9:0d:ab:
0a:f1:5f:1c:ae:2e:cb:33:7f:83:98:e9:2a:70:50:
b6:be:b5:1f:7c:6f:24:ac:0d:bd:01:b7:1f:1d:c8:
dc:bc:7e:c1:9d:b7:8b:06:e7:9e:ad:2d:97:78:1a:
2d:eb:c8:2b:19:79:d8:c8:fa:f5:72:b9:d7:f7:30:
8e:f0:6d:b3:d9:ed:c1:92:c1:8a:70:b3:2b:73:1d:
f5:84:d1:01:ba:ff:2f:ef:87:34:23:86:84:f8:d8:
39:0c:74:d5:39:62:77:88:36:3f:ef:79:89:ae:31:
46:73:49:a5:66:35:3a:9f:90:75:d6:ae:53:c2:ca:
f9:93:f7:d8:bd:ae:74:25:c4:7d:d2:61:32:90:bc:
e8:95:7b:fc:6c:1a:94:48:35:bf:71:83:b9:47:85:
3f:93:ac:fc:63:c5:bc:47:55:f6:b4:1b:22:a1:0c:
01:d6:bd:cf:30:90:3c:01:95:fd:ea:b5:00:33:f8:
54:52:19:07:71:af:b5:e3:03:23:36:49:e3:ce:fa:
8a:7e:84:d9:49:d9:50:c4:23:c6:58:43:d4:21:ec:
56:08:2e:3c:01:26:9c:6c:60:11:48:ff:31:2e:48:
e6:a9:7d:33:49:6d:92:7f:e4:02:d5:ec:81:35:aa:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:66:91:73:5D:17:C9:EE:66:0A:A6:CB:19:A9:C2:C4:51:9A:1C
X509v3 Authority Key Identifier:
keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/k5RmkXNdF8nuZgqmyxmpwsRRmhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.224.0/22
185.243.16.0/22
Signature Algorithm: sha256WithRSAEncryption
05:74:ba:a4:22:3c:f3:26:51:63:33:25:c8:55:18:e1:d3:7e:
c6:85:df:8e:19:ea:7a:fd:aa:a0:5f:af:50:96:4c:14:b1:9a:
17:31:05:23:2c:aa:fd:06:ee:a4:31:5d:df:07:3c:ce:cc:7b:
67:d5:6b:a7:b1:05:f6:9e:e2:84:5d:6a:cf:1c:79:ed:07:c9:
4a:56:98:63:e2:49:13:b6:e4:b1:c9:70:d2:72:fe:7c:d8:9b:
d4:8c:c1:96:df:77:11:be:56:87:c0:46:6d:2c:5e:d8:13:70:
5f:be:53:a6:ac:1c:e3:88:f7:11:31:6e:a4:f7:5d:10:48:8b:
12:b8:b5:b7:fa:28:62:f9:fb:a3:db:bd:96:e9:0b:3f:1f:dd:
27:6c:36:dd:99:cb:71:6c:32:37:a5:5f:d8:44:63:21:2d:14:
88:ba:de:f0:28:7f:40:f1:b1:86:05:f3:86:21:fd:37:ee:b5:
d4:23:db:ef:de:6d:96:83:a7:36:a8:72:55:97:18:47:37:55:
6c:bb:9a:48:69:56:6d:8c:b6:ce:4c:76:76:40:45:25:4e:9e:
1a:d3:30:b3:93:14:d7:33:62:fd:a3:d1:88:a8:f3:f3:b9:89:
79:15:b5:eb:19:ae:ac:da:1e:c8:93:fd:de:f3:ce:e8:65:8c:
88:34:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:29 2024 by rpki-client on console-fra.rpki-client.org