Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ezh_kCoDZEmnrGsWQjFe_FrOFCg.roa
File: ezh_kCoDZEmnrGsWQjFe_FrOFCg.roa (raw, json)
Hash identifier: YY07U/4V9Iyi50GnZ19vZe2FtTxA1Yyv7AXKeKAZ4oo=
Subject key identifier: 7B:38:7F:90:2A:03:64:49:A7:AC:6B:16:42:31:5E:FC:5A:CE:14:28
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A6EF2EA8F3075931CDE5F30F4715B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ezh_kCoDZEmnrGsWQjFe_FrOFCg.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 212.192.221.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 15:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6e:f2:ea:8f:30:75:93:1c:de:5f:30:f4:71:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b387f902a036449a7ac6b1642315efc5ace1428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:1c:8f:b0:7e:03:f8:7d:a2:e2:0a:76:f5:
2f:ea:89:a0:8f:c0:cf:c5:62:1f:bc:2c:5a:a7:84:
4f:40:8e:7e:f4:92:0a:52:26:67:e6:4e:79:b5:df:
96:94:27:d8:7d:73:95:e6:86:8e:5a:90:e8:14:7f:
49:44:42:96:05:dd:ef:27:3f:18:b8:e1:77:0c:36:
80:e6:40:f1:cb:fc:4b:2f:d9:0b:c2:8e:df:d9:32:
07:3f:90:3e:2c:2f:fd:1b:26:73:46:52:10:d1:c9:
a5:33:63:eb:b6:ad:59:3d:70:12:ff:6d:19:48:8c:
d9:0a:16:e7:f4:c4:a8:02:eb:e5:68:4a:90:be:79:
f6:45:7a:88:e0:a1:0b:e6:db:09:22:3d:fe:1b:be:
59:ca:eb:30:14:2f:40:65:ca:3b:46:a0:88:6e:e2:
1d:76:50:37:c8:db:20:4d:7c:51:74:17:7d:65:d9:
40:9a:06:19:89:af:da:f6:59:44:30:e5:a2:be:1c:
49:07:07:95:ba:12:5d:a4:3f:26:df:7a:d1:43:e7:
49:ae:60:f5:82:0a:dc:50:0d:74:b9:72:44:0e:7c:
0c:c8:10:f7:f2:7b:ad:da:6b:07:0c:f9:43:50:ce:
c6:bb:ea:e5:7e:6d:4d:83:60:57:f0:13:ee:48:ec:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:7F:90:2A:03:64:49:A7:AC:6B:16:42:31:5E:FC:5A:CE:14:28
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ezh_kCoDZEmnrGsWQjFe_FrOFCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0-192.124.182.255
192.124.188.0/24
192.124.190.0/23
192.124.209.0/24
212.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1c:9e:01:f6:03:82:ca:51:da:14:04:3a:84:82:11:6f:16:
c9:f8:b0:16:52:6f:40:c4:3b:3f:62:c5:5c:1a:f1:b9:15:be:
f5:b8:40:e3:a1:97:a9:6e:43:f9:1f:b1:05:da:9c:a8:de:63:
91:3c:66:d9:dd:95:d0:75:29:cd:dc:9e:d9:02:27:9b:e4:9a:
b7:bb:d2:9a:65:29:f4:6b:79:a9:9d:c2:c4:ba:62:b9:80:34:
aa:eb:fd:05:e8:7e:fb:a2:68:87:c7:95:0a:ee:2f:9f:8f:d6:
0d:f1:9e:da:55:3e:2b:63:48:e8:c0:34:83:0b:1c:a5:25:4d:
7b:c2:c8:a0:62:7f:2a:10:1b:bb:be:65:4d:b2:e7:6c:ef:bc:
35:0f:df:e4:ff:63:cc:ac:5b:13:57:af:6f:b1:17:b5:ff:72:
e6:2d:e6:0b:2e:69:36:5c:83:35:5f:90:fd:ee:06:23:e6:9b:
86:f3:c5:4b:ed:dd:08:be:46:39:cd:9c:23:f7:08:d5:30:12:
0c:98:31:65:3d:40:c8:07:20:5e:9b:dd:7e:66:eb:bd:07:e2:
16:cf:3b:ac:2c:9a:30:40:3f:79:bf:55:70:46:15:e3:35:0a:
49:10:ef:fb:36:d2:d8:d4:fd:08:af:90:19:ec:59:fd:9f:a6:
bc:30:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org