Route Origin Authorization
$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
File: 3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier: 1/DaRsl2xqF+SOVMjPAIsnq14XaKYZrQR5utrfkxckU=
Subject key identifier: EC:25:A1:8B:4D:BE:CF:BA:0C:0A:79:08:0E:A2:73:F6:B3:11:32:99
Certificate issuer: /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial: 73B940C139BE2787731AE90E5365CCDFE0BDED9A
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
Signing time: Sat 10 Aug 2024 12:10:48 +0000
ROA not before: Sat 10 Aug 2024 12:05:48 +0000
ROA not after: Sat 09 Aug 2025 12:10:48 +0000
asID: 212795
IP address blocks: 158.220.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 08:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b9:40:c1:39:be:27:87:73:1a:e9:0e:53:65:cc:df:e0:bd:ed:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Validity
Not Before: Aug 10 12:05:48 2024 GMT
Not After : Aug 9 12:10:48 2025 GMT
Subject: CN=EC25A18B4DBECFBA0C0A79080EA273F6B3113299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:36:8c:2c:a1:71:e3:f6:a5:97:72:a8:f1:
c4:e0:17:40:df:4d:43:d6:67:df:fe:10:61:80:8e:
e2:d4:78:ed:a3:5a:22:fd:a3:f0:d7:1f:5e:57:ca:
12:4a:39:1a:96:df:47:5e:75:e4:de:60:e0:6b:e1:
28:4f:84:77:a1:89:04:72:3d:54:c0:77:09:f7:4c:
79:7a:d5:ae:b7:81:75:84:f3:e1:32:a0:c0:04:ec:
ee:16:e3:07:43:e4:41:10:6b:85:61:3f:93:d8:48:
2f:de:4c:bb:b4:45:df:ce:56:3e:84:aa:91:90:dd:
17:71:78:b6:ed:a7:a5:46:54:e0:fb:2c:4f:2a:32:
c7:ec:1c:df:b6:27:30:2a:cf:3c:47:5e:fa:2a:64:
e3:c8:79:9d:4f:9d:86:62:c0:23:06:c2:0c:5b:da:
44:3a:0c:c0:e1:9b:5a:68:39:79:fb:23:6c:db:87:
73:5d:77:77:a1:59:91:ac:8d:c5:7f:c2:ed:4b:71:
6f:a8:34:60:2e:95:a9:34:4a:6b:38:52:ab:c7:6a:
a9:68:8c:7f:7c:0b:9e:8b:ed:f5:14:84:5f:de:60:
5d:4d:18:d7:80:a3:ff:1c:80:ce:04:4a:93:bc:bc:
92:ca:06:c8:ee:1d:48:44:d4:fd:98:27:68:14:0d:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:A1:8B:4D:BE:CF:BA:0C:0A:79:08:0E:A2:73:F6:B3:11:32:99
X509v3 Authority Key Identifier:
keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d4:4b:ea:a0:19:f3:f2:02:fe:33:53:e6:2d:42:85:aa:d0:
88:ad:b5:bd:eb:66:db:8a:45:0f:f3:e2:88:97:51:fe:22:e3:
f5:fb:96:3e:c7:76:09:e8:2d:91:ad:14:01:a5:ea:41:21:e7:
a7:73:e8:c1:16:b7:d3:26:d9:50:8c:46:19:41:d8:8b:24:48:
af:05:0a:dc:2a:59:eb:a7:17:6b:8c:e2:8d:df:87:20:6a:73:
ac:29:47:ce:29:be:cf:8b:57:7a:a7:8d:43:6d:c0:65:e9:ea:
1c:14:2d:e6:eb:86:08:20:24:f7:1b:c8:48:96:2d:ff:c1:da:
08:26:5a:fe:e5:08:88:03:dc:bc:83:80:a0:3a:b4:89:b6:59:
db:d5:be:bb:54:47:6f:02:12:e4:c9:06:6b:82:30:d0:7c:e2:
88:ce:f8:43:6d:ee:71:be:23:1c:0d:ff:3a:6a:ab:6d:e1:ca:
58:6f:13:cf:81:40:93:95:9f:d0:1a:99:bb:65:bf:84:f3:6b:
59:05:b0:e4:58:71:c9:16:a5:42:4b:e6:2b:a0:d9:26:79:95:
f1:56:e4:70:8a:b8:30:9e:00:a8:cd:40:c3:99:d6:00:07:f7:
a9:da:0a:78:c3:40:38:ff:5e:8f:6d:0c:9c:85:37:7d:37:5a:
6e:94:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:00 2024 by rpki-client on console-fra.rpki-client.org