Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/4XaCyOIeynZVANZmhfmEX6wnu58.roa
File: 4XaCyOIeynZVANZmhfmEX6wnu58.roa (raw, json)
Hash identifier: CB6+xGS7boLodUiZYksFS55wsuHoKO+5XAqqe1y5GCE=
Subject key identifier: E1:76:82:C8:E2:1E:CA:76:55:00:D6:66:85:F9:84:5F:AC:27:BB:9F
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 018573561785D3C8627464042CDF29548A89
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/4XaCyOIeynZVANZmhfmEX6wnu58.roa
Signing time: Mon 02 Jan 2023 16:34:59 +0000
ROA not before: Mon 02 Jan 2023 16:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30762
IP address blocks: 185.236.124.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:17:85:d3:c8:62:74:64:04:2c:df:29:54:8a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jan 2 16:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17682c8e21eca765500d66685f9845fac27bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:63:d6:ff:66:f2:68:94:3c:29:69:9b:ab:
d6:7a:7e:7d:f9:ce:9a:80:55:f1:a1:95:23:4c:2f:
67:4d:29:c3:fd:76:ef:b0:47:5f:18:ab:a7:82:a4:
36:b5:22:32:3f:58:7a:0c:f7:dc:67:31:86:93:86:
d5:bf:4f:64:d5:e3:c1:a0:6d:af:0c:03:03:cc:66:
55:ae:64:a9:e6:83:b6:df:20:93:2d:57:ca:1b:c5:
e8:5e:72:e6:da:53:b8:6b:a3:03:56:37:65:68:10:
b9:8b:15:fb:f6:78:64:8a:e7:3c:a2:fc:a4:7f:fe:
23:47:62:da:4b:15:01:10:f9:6f:e5:c7:c5:3d:85:
cb:60:e6:1f:b2:b7:43:73:bd:26:37:bf:f5:3a:81:
44:b1:64:f2:d6:e9:7e:dc:a7:df:1c:dd:35:93:3d:
15:8c:55:ba:22:97:90:80:38:16:1f:a2:80:f3:0c:
4d:7c:a0:a1:6d:3f:4a:18:6d:ef:d2:f7:7e:f5:5a:
f8:8f:8c:48:cf:f6:6b:f4:aa:55:67:a5:66:48:84:
82:26:08:7e:5a:02:18:a6:81:72:50:91:8f:58:d0:
08:c7:77:35:d7:61:77:53:8a:d5:55:ff:63:53:8d:
ca:e0:9c:95:15:1f:b9:f2:4e:4a:81:ec:48:e5:b8:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:82:C8:E2:1E:CA:76:55:00:D6:66:85:F9:84:5F:AC:27:BB:9F
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/4XaCyOIeynZVANZmhfmEX6wnu58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
48:70:f7:5b:11:00:71:f0:a5:c8:a0:e1:61:66:4f:37:4a:c0:
56:f1:e8:b0:d4:59:60:64:ca:11:06:dd:00:04:6c:45:b7:30:
74:ae:03:82:9e:f4:14:e6:2b:a0:8b:9e:30:4d:05:13:14:ae:
a5:53:3a:04:30:60:6c:80:f2:a6:0d:cd:cc:63:dd:53:0e:4a:
21:77:7a:ab:18:b7:b6:a7:35:fe:69:47:dc:74:c3:e5:8a:8a:
6a:f7:c2:e9:58:91:e1:ab:a9:91:d2:14:f5:6c:07:ed:13:55:
1e:c9:0f:6f:88:42:77:93:b8:1b:a0:72:f8:be:65:6c:7b:3e:
de:df:26:70:36:f7:33:11:f7:86:b1:bc:ce:fd:af:49:3f:0c:
8e:22:8a:f1:95:6b:a0:0d:64:54:92:fc:79:36:2d:1b:1c:6a:
b5:8a:94:49:d1:51:c0:7e:43:1f:bc:73:ad:65:fb:76:e6:6c:
39:ca:b5:17:2b:2b:84:f3:7c:b8:d3:d0:d8:94:dc:9c:6a:30:
db:31:44:75:f9:e2:f1:00:04:a7:b1:1d:3e:77:cd:1e:1f:14:
43:d4:3e:1f:0f:a7:2d:0e:19:ad:83:00:bb:a6:90:6b:d5:79:
cb:57:aa:11:55:a8:3d:d9:36:93:f8:4d:04:51:54:c4:07:9d:
5b:bd:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org