Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/6bPJLwyE2JgWwd7eKpDPnIgv7cA.roa
File: 6bPJLwyE2JgWwd7eKpDPnIgv7cA.roa (raw, json)
Hash identifier: HjczwBa4aRYR/zlMOV6nHJuvqL8XMCRCuowbWCOH5jA=
Subject key identifier: E9:B3:C9:2F:0C:84:D8:98:16:C1:DE:DE:2A:90:CF:9C:88:2F:ED:C0
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 018572B4143BE259937340C3FA0A22467D4D
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/6bPJLwyE2JgWwd7eKpDPnIgv7cA.roa
Signing time: Mon 02 Jan 2023 13:38:02 +0000
ROA not before: Mon 02 Jan 2023 13:38:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39591
IP address blocks: 185.133.88.0/22 maxlen: 22
188.116.45.0/24 maxlen: 24
185.117.226.0/24 maxlen: 24
212.11.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:14:3b:e2:59:93:73:40:c3:fa:0a:22:46:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jan 2 13:38:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b3c92f0c84d89816c1dede2a90cf9c882fedc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:c0:83:bf:f5:1c:4d:2c:13:4d:0a:a8:97:
15:44:97:14:81:2e:e4:40:73:5a:d8:d6:9c:b0:0f:
5f:8e:89:81:7e:a8:40:12:79:a1:a4:f0:82:1f:95:
86:43:ee:dd:4e:3c:ae:f5:3c:bb:94:ee:a7:9c:ee:
1d:99:9c:43:1d:6a:78:86:6a:9f:2d:c7:a0:e7:d6:
3e:b1:82:ea:88:ce:43:3a:64:70:0f:c5:ef:2b:03:
45:78:c6:25:73:d7:39:ce:93:14:f9:34:fc:12:09:
fb:68:05:b8:65:74:04:7a:50:dd:3a:7a:d6:2e:02:
f5:b3:6e:c9:f9:98:5e:95:82:4b:eb:d8:22:e5:d3:
dd:ec:87:c3:17:1b:f1:74:ff:a5:69:b9:77:ea:0c:
44:2a:9e:53:c7:d4:44:4d:f2:81:e9:5e:fd:a7:2b:
b5:d4:51:28:3f:60:9c:05:a3:7e:b0:72:ee:f2:7a:
44:2e:72:ba:4c:1e:2c:6f:e9:c0:64:1c:3b:e6:c9:
c2:01:10:c4:83:86:f4:16:67:01:d1:69:50:17:4d:
6c:1c:2d:f5:ba:b8:8c:01:19:50:50:6a:60:e8:20:
d6:1d:e9:8e:38:6d:e6:34:fc:5c:25:74:1c:93:94:
52:de:e5:54:25:c9:0f:c8:0a:e9:06:7d:c6:36:72:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:C9:2F:0C:84:D8:98:16:C1:DE:DE:2A:90:CF:9C:88:2F:ED:C0
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/6bPJLwyE2JgWwd7eKpDPnIgv7cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.226.0/24
185.133.88.0/22
188.116.45.0/24
212.11.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:39:f1:55:42:72:a9:57:ea:77:23:41:63:1e:a5:f9:32:a2:
17:00:66:1c:9b:7b:37:d1:44:8e:ab:ab:e6:3a:34:7c:b1:f2:
da:1e:a3:4b:c4:25:c2:19:3a:39:a4:ce:ec:b4:a4:61:71:8c:
e0:a1:5c:18:e5:e0:79:a9:38:ce:a1:e8:5a:35:e0:85:0c:b3:
3c:aa:20:7b:12:3d:8a:b4:3a:7e:96:dd:2c:20:eb:66:51:1a:
dc:86:8b:0a:93:71:4a:e3:74:b6:ac:3a:8c:da:1b:38:48:24:
ae:de:7d:db:34:cb:c4:69:08:11:31:62:ca:cc:9c:e2:2d:8b:
f0:13:c8:3f:42:c5:b0:50:b0:e3:e6:01:c6:b1:f1:c9:ef:8b:
eb:25:f2:77:79:f6:c6:22:e7:60:57:1c:a9:0b:a2:ac:b6:d6:
c4:3c:56:ba:0e:b7:ad:7a:1f:11:1f:a2:66:e7:1c:d3:9f:91:
25:a3:63:6f:e8:be:b8:7e:50:a6:ae:f4:d9:60:6a:af:fa:af:
51:11:20:35:50:1f:25:57:cb:9f:a4:37:21:46:08:e0:52:f0:
7a:c8:e3:8f:c6:4d:3e:71:dc:60:b6:8c:a0:28:cd:d7:93:18:
c0:cd:e9:b5:5e:fc:00:d6:e4:43:97:93:23:7c:ea:23:63:6f:
fb:75:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org