Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EjGqDMkHsOOYjMb7skrdHMwA0HI.roa
File: EjGqDMkHsOOYjMb7skrdHMwA0HI.roa (raw, json)
Hash identifier: yNnRqqYnaeEhdHZelB00DkEb37c+pBpPvhWyZiNKuP8=
Subject key identifier: 12:31:AA:0C:C9:07:B0:E3:98:8C:C6:FB:B2:4A:DD:1C:CC:00:D0:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C1AD64EEDA299E290122EBA8A11640961
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EjGqDMkHsOOYjMb7skrdHMwA0HI.roa
Signing time: Wed 29 Nov 2023 11:28:21 +0000
ROA not before: Wed 29 Nov 2023 11:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.170.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 11:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:d6:4e:ed:a2:99:e2:90:12:2e:ba:8a:11:64:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 11:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1231aa0cc907b0e3988cc6fbb24add1ccc00d072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:88:e0:49:65:77:de:11:f9:f9:95:c7:2b:
66:de:78:38:0d:fe:f4:82:fd:4a:30:fe:28:70:da:
90:82:d9:68:05:7c:42:b4:f5:ff:7c:e2:7f:b9:26:
b8:0c:25:63:51:d1:55:cf:62:02:ae:03:cc:c7:6a:
35:e8:0a:21:fb:d5:e2:83:bf:25:70:ab:d8:0d:b2:
8e:9c:cb:54:48:12:08:47:46:ff:db:16:93:b7:77:
10:cd:68:cf:18:66:d2:0f:25:1b:22:85:3e:96:b6:
be:48:3f:9d:90:f1:d3:4c:ad:f3:85:1b:3c:f7:16:
e8:46:be:29:b2:d4:53:b0:33:68:f5:46:59:28:56:
03:7d:75:f9:45:bb:58:03:0e:b3:e2:8e:b3:f4:79:
a7:80:7c:4b:f8:ec:13:7f:a1:dc:0b:e8:78:35:91:
6d:c9:ab:9a:9d:7b:5b:f6:8d:14:60:cd:a5:9a:11:
48:98:e3:0c:e3:96:ed:99:41:5d:5b:ec:dc:f2:2f:
0d:70:98:a2:b5:b1:17:22:57:cb:18:15:d5:3b:e1:
bb:bd:a5:de:55:f8:19:a2:b6:6c:7e:39:85:23:01:
81:bb:e0:54:7f:15:f0:f2:0d:65:96:e3:15:0a:87:
9e:43:83:92:38:79:1d:83:db:a4:80:a8:0d:08:6d:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:AA:0C:C9:07:B0:E3:98:8C:C6:FB:B2:4A:DD:1C:CC:00:D0:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EjGqDMkHsOOYjMb7skrdHMwA0HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.170.0/24
192.124.172.0/24
192.124.183.0/24
212.192.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:14:f8:51:a0:34:f7:a0:84:59:5f:2c:ac:c4:d5:58:b1:ca:
61:f6:a1:75:60:ba:5e:9a:61:3a:f9:d1:29:aa:61:35:75:70:
60:cb:7e:f7:60:88:c3:d9:d6:d8:47:f8:77:01:53:ba:55:21:
56:ce:2b:92:a2:81:40:e9:57:05:81:b8:b1:db:9b:ea:2f:3d:
a2:ad:85:84:23:ff:17:37:11:74:c0:76:e1:37:51:f3:41:5b:
7c:4b:d7:58:e1:38:9f:ff:8d:84:3b:a3:7d:b1:aa:0b:4f:cf:
ed:d5:81:0d:3a:e5:e3:f5:fb:4c:6c:e7:9d:c3:aa:72:6a:81:
14:29:3a:73:5d:64:c8:36:2e:60:09:3c:9f:5a:e4:00:a4:f6:
51:c0:64:28:e4:7d:63:99:63:a0:5a:9d:35:a1:98:05:84:d7:
32:35:a0:55:3f:07:2d:c1:4f:bf:62:06:a4:55:dd:6c:68:ff:
7f:da:c6:c9:54:d0:98:54:46:dc:9e:ce:0d:17:b3:ad:c8:07:
13:0e:2f:e6:42:bb:d5:20:49:48:23:9d:3f:96:0d:6a:56:cc:
b7:6f:b0:e1:2c:8e:38:b7:dd:1b:77:71:8f:f3:5b:90:1f:b9:
2a:19:8e:b6:cd:d5:85:06:b7:35:6e:94:e6:9c:92:f6:7f:e9:
1d:2f:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org