Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/EukQUlIBWPlK8DM7biCfL3YBXc4.roa
File: EukQUlIBWPlK8DM7biCfL3YBXc4.roa (raw, json)
Hash identifier: uXaDrqtmQr5Pt6BM8RkX0xqPNq1ELcvupWw+bbsrcWk=
Subject key identifier: 12:E9:10:52:52:01:58:F9:4A:F0:33:3B:6E:20:9F:2F:76:01:5D:CE
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 01857079A59BA405671359CF4F9936C9612B
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/EukQUlIBWPlK8DM7biCfL3YBXc4.roa
Signing time: Mon 02 Jan 2023 03:14:58 +0000
ROA not before: Mon 02 Jan 2023 03:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205800
IP address blocks: 185.206.125.0/24 maxlen: 24
185.206.124.0/24 maxlen: 24
185.206.126.0/24 maxlen: 24
185.206.127.0/24 maxlen: 24
2a0b:d3c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:a5:9b:a4:05:67:13:59:cf:4f:99:36:c9:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jan 2 03:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e91052520158f94af0333b6e209f2f76015dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:11:11:c6:e9:4d:42:af:ca:df:d8:bd:f1:
2b:68:32:36:20:9a:48:e4:36:68:eb:95:77:ea:7f:
b4:c4:54:aa:7f:be:41:47:33:7a:7b:d6:ab:48:e2:
e0:93:0b:67:1c:da:a4:ab:e0:85:d8:d9:f6:8a:6d:
8e:c8:79:0e:b8:40:6e:b9:08:08:cb:0c:29:f3:93:
f0:b2:d0:8b:a9:03:1d:70:a6:c0:d2:d7:4d:9f:cb:
e9:b9:bb:5a:85:d6:ae:10:8b:49:5c:3f:42:58:b2:
0a:85:ba:ec:d4:e7:36:9e:0b:cb:aa:c3:08:f8:ed:
0a:4e:fe:31:d9:06:a5:c5:70:33:9a:ad:a7:ad:09:
fb:21:93:44:45:a7:ed:8b:f4:c5:c6:d2:7f:73:8a:
f2:12:ab:e3:d4:63:70:51:be:da:09:7b:6b:33:a6:
61:55:2b:9e:42:93:25:4f:eb:6e:44:19:9b:d7:72:
3e:08:50:a3:c0:2d:9e:ca:b0:0c:79:ba:cf:14:90:
60:95:7b:fd:7f:c0:63:43:5e:93:88:66:e2:8a:f0:
90:ed:5e:83:e8:68:6b:ee:d6:8c:83:26:75:46:58:
5b:8b:38:63:5a:3f:72:b5:9d:2b:c0:dd:fd:63:b5:
fa:5d:d5:08:73:c6:0f:25:90:af:af:ca:6c:82:8b:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:10:52:52:01:58:F9:4A:F0:33:3B:6E:20:9F:2F:76:01:5D:CE
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/EukQUlIBWPlK8DM7biCfL3YBXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.124.0/22
IPv6:
2a0b:d3c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:db:7c:26:3f:fc:5c:de:f1:de:43:c0:2d:55:c8:2c:b6:7c:
49:89:79:8d:4d:b7:ff:55:78:f5:2b:63:5d:1d:91:ef:20:3f:
d2:35:0a:e5:4b:84:95:84:03:33:58:56:a6:24:65:a5:e4:f5:
14:7f:a9:2f:23:0a:70:26:34:85:87:71:8a:f1:4c:60:70:d0:
b2:05:a9:7c:eb:0a:bf:97:27:63:00:9b:ee:18:f7:cd:ab:de:
33:9e:a5:55:85:88:8d:2f:6a:e2:e7:2c:7d:29:32:b9:b8:fb:
f1:4e:51:d1:e6:e8:c6:3d:cf:bc:50:4f:51:1b:46:59:00:47:
c2:1e:e8:13:c7:8a:6a:d1:06:70:d4:72:79:ef:88:6d:72:8c:
d4:f5:4a:0d:04:2c:7f:63:a4:2f:da:23:33:73:66:0e:75:4a:
d8:77:5d:31:99:58:b7:d0:0d:a2:f0:9f:8b:d7:55:be:b1:02:
53:7c:b5:3d:18:07:05:1d:ed:c9:a5:a0:be:70:ee:2d:06:59:
e0:df:79:15:ab:bd:f5:b1:cb:5c:71:af:2b:ec:90:56:f1:ee:
2e:3e:c7:54:03:9f:78:b2:49:e8:79:7f:11:9e:97:e7:ae:b4:
62:5b:1a:6f:c8:ff:31:b9:5c:73:e0:b5:9e:7c:55:97:19:2e:
9c:a5:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:16 2024 by rpki-client on console-fra.rpki-client.org