Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/SOrh_uhcbZ9aGfO5zc01iLfnVn8.roa
File: SOrh_uhcbZ9aGfO5zc01iLfnVn8.roa (raw, json)
Hash identifier: AOqTW1X5xjbs7BL48rS12mJUJndhSBmPXRnXW+QjD+c=
Subject key identifier: 48:EA:E1:FE:E8:5C:6D:9F:5A:19:F3:B9:CD:CD:35:88:B7:E7:56:7F
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 018E7C7EA66DECFF601745A0664B2C68602C
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/SOrh_uhcbZ9aGfO5zc01iLfnVn8.roa
Signing time: Tue 26 Mar 2024 20:40:58 +0000
ROA not before: Tue 26 Mar 2024 20:40:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 185.224.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 06:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:7e:a6:6d:ec:ff:60:17:45:a0:66:4b:2c:68:60:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Mar 26 20:40:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48eae1fee85c6d9f5a19f3b9cdcd3588b7e7567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:8f:9e:7f:ce:a4:fe:1f:8a:5e:9f:bb:a7:
8e:2c:82:1c:ad:90:31:24:30:45:68:8d:71:1e:74:
67:ab:f7:c8:4f:c2:29:9a:ce:34:04:bf:49:5d:b1:
68:d3:bb:e2:64:ef:21:89:74:29:23:35:da:fc:eb:
96:aa:d8:16:92:f1:28:4c:dc:d2:a6:57:0e:19:f1:
02:e3:92:a8:4e:84:28:42:c8:5d:10:6a:95:6b:c8:
92:49:dd:ad:31:0e:08:52:d7:b3:f7:40:cf:56:3b:
3e:b0:fb:9e:5c:b5:fa:3d:1f:d2:3b:80:2c:22:b9:
f2:13:73:33:5e:8c:36:60:36:0a:ed:99:ae:a6:52:
5a:04:e0:31:aa:0d:1b:e0:fe:cb:5a:3c:ad:4f:6e:
65:95:53:1f:3e:91:d8:76:89:46:e9:6a:2b:f0:39:
20:c4:1c:13:6c:54:60:3b:eb:64:df:8e:24:32:a8:
63:7a:81:c7:dd:84:df:2f:b9:31:d0:49:e3:a9:4c:
04:8f:74:e0:92:d8:07:67:a5:ab:06:e5:a9:12:84:
21:ec:9a:f4:80:08:5f:89:93:b2:fd:0c:76:59:fe:
20:45:8b:46:f0:ad:44:b6:2b:a5:1e:4b:c7:ac:a5:
c3:6b:8a:a3:17:44:be:de:fd:1c:44:cc:79:17:8b:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EA:E1:FE:E8:5C:6D:9F:5A:19:F3:B9:CD:CD:35:88:B7:E7:56:7F
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/SOrh_uhcbZ9aGfO5zc01iLfnVn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9c:d3:76:42:84:65:76:45:36:b9:73:72:86:d7:ff:42:da:
2e:68:a7:42:b2:f5:c0:c1:ae:44:6e:5d:3b:5a:bc:ac:09:2e:
00:2b:98:ee:f0:26:86:ff:9b:36:9a:50:f5:ce:9e:b6:fb:47:
14:e1:13:35:31:a4:2d:8f:8f:00:c7:bb:1b:5b:c3:26:c7:dc:
cc:1d:c1:6c:0e:b1:09:3e:c1:24:81:26:83:25:a2:ca:47:01:
a0:3d:10:cf:1d:2d:1b:95:a5:73:3b:82:a5:1f:7b:72:17:71:
8c:17:96:44:25:14:96:ad:b0:00:18:d5:41:ff:23:ba:75:73:
43:c7:8c:fc:b6:13:74:c5:4e:55:52:b4:bf:39:cd:f7:81:f2:
55:b6:28:ca:39:04:2c:ff:36:a2:1b:5e:2e:56:8a:95:8d:0e:
4a:ac:4b:ec:8e:5a:ad:a6:f0:53:0c:49:b6:48:5b:58:7e:0c:
eb:60:4c:1f:e9:4e:ff:36:7c:83:e9:a2:8c:96:81:28:69:a2:
f8:c9:1c:49:5c:fc:93:70:64:93:39:fb:46:1f:c7:1a:b2:9d:
4b:fe:3e:9c:58:81:b8:83:3f:fb:57:04:81:a6:12:06:d4:da:
be:bc:11:04:0f:aa:74:68:7d:f5:6a:0f:3b:bb:c1:f3:0a:94:
8d:21:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:50 2024 by rpki-client on console-fra.rpki-client.org