Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/ecrdp1n3Q8S7GHvBnP_ZebsGuL8.roa
File: ecrdp1n3Q8S7GHvBnP_ZebsGuL8.roa (raw, json)
Hash identifier: RXMIICxAUJL1fXLB4UE4OJ/rLZCvFgjV1EBx8XlriYE=
Subject key identifier: 79:CA:DD:A7:59:F7:43:C4:BB:18:7B:C1:9C:FF:D9:79:BB:06:B8:BF
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0186BE656256F8DB83293C73B350EFAF4690
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/ecrdp1n3Q8S7GHvBnP_ZebsGuL8.roa
Signing time: Tue 07 Mar 2023 23:26:00 +0000
ROA not before: Tue 07 Mar 2023 23:26:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211064
IP address blocks: 185.236.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:65:62:56:f8:db:83:29:3c:73:b3:50:ef:af:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Mar 7 23:26:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79cadda759f743c4bb187bc19cffd979bb06b8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:cd:2e:78:bf:08:26:19:07:af:24:6e:4a:
29:13:92:7c:cb:f9:c0:9a:27:36:98:40:35:87:2b:
8c:db:6c:5f:dc:e6:34:9d:d6:f0:93:44:d1:f9:71:
1e:59:7c:51:eb:1f:6e:41:9b:f8:62:e5:76:e4:16:
84:c7:e0:03:38:94:9e:0c:91:c9:64:93:db:25:d3:
16:9c:6a:a9:0b:27:ed:36:eb:fd:2b:aa:4a:ab:60:
c1:4d:3e:7b:71:ac:94:12:86:aa:49:3c:5c:70:5b:
5f:fa:10:8e:ee:86:a1:2d:ab:00:bd:b6:48:32:6d:
ba:8f:3e:c4:6e:cc:02:e6:6e:96:88:69:81:cd:8b:
6a:cd:33:51:85:a2:fe:91:14:55:bc:ce:84:1c:ad:
bb:ea:ac:93:0a:53:55:30:06:34:f0:97:99:72:6c:
67:03:f9:b8:17:d1:b0:38:b7:3b:03:36:2e:1a:5a:
e3:46:60:c3:0d:d9:00:d7:77:4a:7b:ac:8d:98:95:
ad:bc:dd:ec:91:d0:d6:4c:64:03:77:e3:d0:12:35:
5c:18:3f:0c:21:49:15:1c:a5:08:e9:5d:62:12:19:
1b:ca:3a:bd:0f:fe:8f:03:4a:a8:7e:21:b6:bc:db:
ce:ee:f5:1e:e3:41:32:8a:ad:56:f8:38:66:c5:34:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:DD:A7:59:F7:43:C4:BB:18:7B:C1:9C:FF:D9:79:BB:06:B8:BF
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/ecrdp1n3Q8S7GHvBnP_ZebsGuL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.140.0/24
Signature Algorithm: sha256WithRSAEncryption
88:07:f6:15:bd:80:8f:12:1d:ce:86:5c:44:41:fc:3b:9c:21:
07:ae:60:31:35:33:55:fc:f6:3f:a0:91:5a:e1:fc:fb:67:56:
77:31:53:7f:f8:ab:82:f3:50:f4:61:18:d3:56:0d:a3:a5:2c:
71:09:da:b7:12:c5:10:c3:ae:eb:4d:55:9d:ed:7a:8d:df:e7:
3a:cc:dd:22:c3:49:0e:b4:ec:97:8f:71:cd:db:d0:40:06:ff:
be:f7:d8:a6:e0:3b:f4:04:96:7c:ff:08:9e:f4:24:4a:ff:43:
89:1e:8f:42:07:7d:bd:85:a3:13:e8:70:eb:dc:d1:1c:26:1b:
29:be:1b:93:3e:67:d2:ca:77:41:53:fa:1c:eb:18:2e:3f:5c:
b9:a4:07:18:96:db:5a:f6:c9:32:88:78:14:9d:12:1f:1c:ec:
c6:7b:81:a4:99:a0:b8:4b:e2:03:22:fc:48:17:6a:98:aa:41:
0d:ac:0d:bc:c7:8a:10:7a:2c:cc:82:cb:e2:90:27:b5:14:41:
c4:ad:9b:ff:36:5e:87:55:84:37:a0:28:70:6e:9c:55:79:61:
b9:a6:ae:07:c3:37:40:e0:73:7b:7a:23:08:d2:8a:45:59:a9:
8c:e9:86:8e:da:e5:ce:ee:03:3a:a5:13:ec:9d:e4:43:26:10:
7e:17:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:41 2024 by rpki-client on console-fra.rpki-client.org