Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/1C5ew7bslfQga_8UxCgPbHLxeu8.roa
File: 1C5ew7bslfQga_8UxCgPbHLxeu8.roa (raw, json)
Hash identifier: Zv0mqth+azgy3NveNVcu+cmHc8Nl/f0eGGt0lKaSYf0=
Subject key identifier: D4:2E:5E:C3:B6:EC:95:F4:20:6B:FF:14:C4:28:0F:6C:72:F1:7A:EF
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 01857082D49876004FE2EB3642BE51492E65
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/1C5ew7bslfQga_8UxCgPbHLxeu8.roa
Signing time: Mon 02 Jan 2023 03:25:00 +0000
ROA not before: Mon 02 Jan 2023 03:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208002
IP address blocks: 185.137.213.0/24 maxlen: 24
185.137.212.0/24 maxlen: 24
185.137.214.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:d4:98:76:00:4f:e2:eb:36:42:be:51:49:2e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 2 03:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d42e5ec3b6ec95f4206bff14c4280f6c72f17aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:aa:9b:0c:bb:df:4f:3b:d2:e1:d1:99:00:
59:3e:03:19:3c:51:29:90:70:cb:65:b6:d2:be:88:
c9:4c:bf:ef:d8:1c:fa:bc:d6:de:06:da:b4:bd:16:
54:3e:6d:22:d9:5b:c4:ab:3a:a9:b5:1d:2d:f5:4d:
08:44:5c:22:f8:61:56:7d:4a:b7:1d:2e:1c:6d:b3:
1e:06:01:10:cb:c9:b6:24:67:66:c4:6c:7b:42:dc:
e3:64:0a:1c:53:fe:9e:25:54:3e:00:c2:18:4a:1b:
d0:5d:d5:da:43:17:66:2b:4d:ba:79:87:77:61:48:
f9:fe:ea:fa:ca:9a:34:25:5b:d1:d1:4a:cd:02:32:
e0:e7:9f:76:d5:b2:7e:3e:a4:7d:46:a5:64:cb:14:
02:e1:cd:dd:c1:f6:e3:7b:e2:4e:f7:f7:87:f3:a6:
a3:49:b3:5f:84:29:f8:c7:c5:e6:5d:d7:1a:cf:92:
ad:58:54:c0:f2:37:1e:16:6e:80:af:6a:87:e2:55:
22:e1:84:85:9b:08:e7:52:fa:e6:de:b9:10:c6:5b:
b3:09:dd:33:5a:74:0f:16:ab:27:da:8f:63:3a:a9:
7b:d5:b1:35:98:12:6f:90:07:f3:c2:c0:5a:96:48:
64:55:b6:eb:5f:d7:b2:74:a9:4b:28:08:5f:d7:ba:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:5E:C3:B6:EC:95:F4:20:6B:FF:14:C4:28:0F:6C:72:F1:7A:EF
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/1C5ew7bslfQga_8UxCgPbHLxeu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.212.0/22
Signature Algorithm: sha256WithRSAEncryption
59:b1:62:8d:e9:f3:37:86:b0:80:f8:a9:12:3b:51:d1:21:18:
8b:a8:f8:a3:c0:78:73:15:64:89:0c:9d:57:b2:00:35:43:e6:
5b:c6:ff:02:94:69:4f:90:72:c4:8a:56:41:87:8d:46:8b:fd:
d3:32:6e:df:02:e4:f5:b1:9c:ec:2c:a0:73:d9:2f:84:3e:df:
d2:bc:0e:67:68:a8:a7:1b:61:72:5d:6b:06:7e:cd:d9:9f:3a:
e1:8f:19:3f:c1:bf:e5:61:da:33:35:43:f5:1e:dc:68:a2:bf:
39:42:84:cb:93:1c:1c:83:03:0a:3d:a4:0b:1a:4c:41:30:74:
8d:c6:6b:63:5a:bc:98:b7:a5:0f:bb:a4:c9:2f:33:c6:b9:c8:
40:43:79:5b:16:5b:28:b6:0b:28:06:94:2d:aa:74:64:c3:4c:
10:84:31:b7:ec:3a:4b:cf:4b:5c:1f:2f:39:f1:d7:00:d5:d6:
04:ff:7d:df:ad:f4:b5:52:86:bd:e1:08:04:62:5c:6b:65:7d:
7c:83:80:5a:a7:7c:bb:dd:70:5c:8d:f1:83:47:06:ba:f4:f9:
71:91:76:52:82:c1:ec:3b:40:7a:4e:b5:ec:59:5d:71:d4:89:
e7:07:af:b1:06:72:df:77:57:2d:ad:fe:23:30:10:50:0f:80:
4a:d5:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org