Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/JVz7vz-E6_9bxVp9NfCKymj32G4.roa
File: JVz7vz-E6_9bxVp9NfCKymj32G4.roa (raw, json)
Hash identifier: 5tqphH2/3HLwCKIxONxQdX6zYr4FN2pFBpsY35fp314=
Subject key identifier: 25:5C:FB:BF:3F:84:EB:FF:5B:C5:5A:7D:35:F0:8A:CA:68:F7:D8:6E
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 019267A6A9F80DD2E9E6CAA890F323B5245C
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/JVz7vz-E6_9bxVp9NfCKymj32G4.roa
Signing time: Mon 07 Oct 2024 15:43:48 +0000
ROA not before: Mon 07 Oct 2024 15:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6205
IP address blocks: 185.73.128.0/24 maxlen: 24
185.73.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 14:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:a6:a9:f8:0d:d2:e9:e6:ca:a8:90:f3:23:b5:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Oct 7 15:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=255cfbbf3f84ebff5bc55a7d35f08aca68f7d86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:ca:53:f7:c9:c3:c5:cd:49:64:04:f9:83:
95:8b:41:3c:d0:7b:df:c0:11:02:81:d6:37:2f:76:
5c:83:fa:51:b0:65:7b:cd:92:ff:96:40:b6:89:e7:
be:52:7a:d7:21:52:6b:76:c2:a8:a7:3b:93:17:7d:
5f:99:d5:44:a5:88:d1:e3:bf:a7:2f:b8:a4:12:bd:
c0:9c:b6:6a:0c:2f:21:dc:c0:42:6b:5e:e5:fa:09:
b3:9e:09:fc:61:d6:91:62:e3:fb:05:1d:48:89:5f:
fe:b4:c5:be:74:81:f5:cb:b2:6f:10:43:cf:5a:e1:
d2:46:bc:53:40:cf:2f:3f:e8:66:2b:e5:f7:54:be:
12:b1:22:eb:f4:00:31:4f:bb:f8:8f:ae:e7:20:ef:
1f:22:22:89:dc:92:0f:4b:2f:81:1b:67:85:28:28:
18:cc:33:40:71:67:dd:67:26:35:bb:47:8d:a4:f8:
a5:be:c2:3e:3e:ec:e8:34:bd:38:a6:00:9f:99:27:
da:7e:9f:68:44:39:d0:17:e4:28:c1:01:d7:ae:3d:
e2:1d:a4:27:92:81:44:9a:ea:23:94:4d:6c:61:71:
47:c4:aa:79:61:1c:3e:7b:bf:7b:09:73:95:49:45:
ae:99:de:f0:86:fd:3f:c9:14:ab:7a:60:e9:be:10:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:FB:BF:3F:84:EB:FF:5B:C5:5A:7D:35:F0:8A:CA:68:F7:D8:6E
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/JVz7vz-E6_9bxVp9NfCKymj32G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.128.0/24
185.73.131.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:79:ce:39:87:46:19:10:43:ad:56:a4:ce:c8:93:21:48:95:
78:28:57:fa:35:ed:06:66:52:ee:9d:f0:13:66:b2:62:3e:f3:
be:e4:18:8b:8f:af:91:66:a4:be:92:c2:f4:4f:51:ad:52:f0:
83:6d:18:62:0b:08:ee:75:42:2b:7a:ca:ae:e5:8d:aa:94:a4:
e8:92:a7:92:69:f6:6e:ee:41:99:13:9d:c2:92:bd:05:81:b0:
0a:4b:aa:f2:f9:09:9d:e2:fc:9d:23:8d:db:71:07:a4:5f:0e:
c9:04:f5:1f:9c:93:57:dc:f5:81:8b:80:a3:02:31:cd:d3:14:
d9:17:20:97:27:2d:66:f9:10:7e:dd:af:53:50:79:ce:c5:8b:
e0:06:fd:26:f2:1f:48:e4:e8:04:c9:46:3c:99:ce:5d:b5:09:
b2:7d:e3:4f:0b:ed:d8:c0:97:a0:83:43:ac:46:93:b3:e8:de:
74:4c:b7:07:b8:54:d5:f6:5e:77:fe:eb:bb:06:bb:f5:7b:bd:
08:5a:39:db:dc:4f:31:2f:1d:dc:0e:e7:2f:c1:f2:e3:87:bd:
83:7c:2b:28:72:70:53:d7:00:75:52:d0:1f:f5:5d:f6:23:87:
1c:75:34:66:80:4d:10:7f:a1:c9:9c:fc:0a:67:d3:60:92:cb:
46:5e:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 20:56:09 2024 by rpki-client on console-fra.rpki-client.org