Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/DEydEmRhhKqQPLjcIkiiKMq1ty4.roa
File: DEydEmRhhKqQPLjcIkiiKMq1ty4.roa (raw, json)
Hash identifier: ol3Sk929WEoS/7jmQ3yOkmq90RcxyKhLPPwqHe/4Bks=
Subject key identifier: 0C:4C:9D:12:64:61:84:AA:90:3C:B8:DC:22:48:A2:28:CA:B5:B7:2E
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018E60F7B81ECEC12949207B89A7A6CFCF47
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/DEydEmRhhKqQPLjcIkiiKMq1ty4.roa
Signing time: Thu 21 Mar 2024 12:23:51 +0000
ROA not before: Thu 21 Mar 2024 12:23:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3262
IP address blocks: 185.177.40.0/24 maxlen: 24
185.177.41.0/24 maxlen: 24
185.220.164.0/24 maxlen: 24
185.220.165.0/24 maxlen: 24
185.220.166.0/24 maxlen: 24
185.220.167.0/24 maxlen: 24
185.226.229.0/24 maxlen: 24
185.232.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 06:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:f7:b8:1e:ce:c1:29:49:20:7b:89:a7:a6:cf:cf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Mar 21 12:23:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4c9d12646184aa903cb8dc2248a228cab5b72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:7e:fd:db:67:e7:39:f8:d8:06:2b:5f:cf:
57:07:3d:0f:65:e9:b0:5d:59:47:be:fc:6e:eb:09:
72:9b:64:ef:37:6b:a7:3e:5b:b7:5b:b8:d0:84:97:
d3:8c:c8:73:64:99:4a:f7:a9:b0:cc:96:8f:dd:f7:
4c:40:7c:bb:b5:b5:64:46:15:74:6e:50:f8:db:94:
81:cc:32:07:5f:61:9c:af:16:22:e0:da:f9:d1:2d:
4d:4e:91:dd:27:1c:c4:9c:e2:00:34:28:cd:d7:d8:
d7:61:20:4a:f6:ea:c6:b3:7b:8b:41:1d:98:a8:e1:
be:cc:ac:d0:42:a9:20:4b:3a:2e:7a:d7:84:be:83:
c5:16:b4:e0:fc:5d:18:a9:ac:41:87:22:99:bb:8f:
c1:5d:89:80:1b:30:34:77:9d:7d:cf:db:90:b3:09:
58:e1:fd:cd:d8:f0:3b:c6:ff:9f:c6:64:21:98:52:
1c:d0:a2:af:15:5a:d6:a1:2f:12:a5:eb:08:db:05:
a1:89:be:78:02:67:6e:f7:bb:fb:b9:0e:9a:63:72:
13:d4:98:f4:32:42:a0:16:81:6a:5a:18:6d:37:9a:
af:53:45:d5:d3:c9:02:25:f4:ea:9d:92:76:f2:e4:
f6:a1:c3:26:b3:9c:c5:4a:a9:16:0e:bd:47:88:1b:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4C:9D:12:64:61:84:AA:90:3C:B8:DC:22:48:A2:28:CA:B5:B7:2E
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/DEydEmRhhKqQPLjcIkiiKMq1ty4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.40.0/23
185.220.164.0/22
185.226.229.0/24
185.232.132.0/24
Signature Algorithm: sha256WithRSAEncryption
62:04:19:0b:92:ef:d5:08:ae:88:be:10:97:09:8d:92:80:7c:
b9:74:15:9c:25:88:8b:71:d8:79:69:80:d7:c6:e5:19:ae:0d:
11:49:f9:53:cf:d6:71:c7:60:db:59:e9:f3:81:e0:0f:83:12:
68:26:c2:c4:4d:d7:8b:94:b0:cf:cd:b4:29:32:62:91:c9:e1:
b6:50:e9:61:e3:50:50:97:92:31:5a:79:df:e5:f4:df:cb:d4:
66:a2:c0:66:6e:ab:00:94:08:db:e3:f0:9d:18:3b:94:5b:a5:
0b:6e:12:8a:82:80:4f:0c:b7:18:30:cf:fe:ca:be:a6:3b:3f:
02:75:47:aa:35:cf:48:5b:b7:cb:b8:de:90:6f:ca:8b:59:8f:
b2:77:ce:40:4c:c4:a3:9a:dc:27:ca:f3:35:37:00:ed:62:49:
95:e4:bb:39:6e:7c:be:4c:7c:6a:1e:fc:b9:78:0f:cd:03:15:
30:99:93:58:76:a9:29:6f:24:19:0c:9e:16:63:61:0f:e8:0d:
37:ae:6e:aa:ba:33:1f:94:8c:dc:04:8a:9d:73:56:8e:a0:39:
34:55:6a:d2:6e:d6:b2:4c:01:58:6f:ae:dc:9c:92:01:97:46:
2a:94:a4:1e:6e:c0:6b:97:a6:26:56:33:cf:5d:26:d0:9a:ac:
0b:77:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:02 2024 by rpki-client on console-fra.rpki-client.org