Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/rnve-L25pux0qgDS9ChVO5edrIA.roa
File: rnve-L25pux0qgDS9ChVO5edrIA.roa (raw, json)
Hash identifier: BUUj2oIIJODfwFEu2AdrHEo1KIYNUaVikzAjPjh5UQY=
Subject key identifier: AE:7B:DE:F8:BD:B9:A6:EC:74:AA:00:D2:F4:28:55:3B:97:9D:AC:80
Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial: 01857295CE506B2F14A914737C52987A8CC4
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/rnve-L25pux0qgDS9ChVO5edrIA.roa
Signing time: Mon 02 Jan 2023 13:04:58 +0000
ROA not before: Mon 02 Jan 2023 13:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200485
IP address blocks: 185.104.156.0/24 maxlen: 24
185.104.159.0/24 maxlen: 24
185.104.158.0/24 maxlen: 24
185.104.157.0/24 maxlen: 24
2a06:4200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 07 Jun 2023 19:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ce:50:6b:2f:14:a9:14:73:7c:52:98:7a:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Validity
Not Before: Jan 2 13:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae7bdef8bdb9a6ec74aa00d2f428553b979dac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:39:c3:a4:d9:e1:14:d8:f9:31:54:fa:26:
1b:29:77:f6:6f:ef:8e:ca:8b:76:b7:77:ab:c8:25:
75:e3:e5:76:fe:05:78:29:99:1a:e5:b8:3e:f6:de:
ac:9f:06:0b:bf:3d:f8:ca:e1:b0:20:ed:9d:bb:f6:
e7:f3:e4:d8:99:c5:4e:81:24:57:eb:3e:7d:3c:f5:
5c:ec:8a:c3:fc:0e:4f:ec:2d:75:88:91:3d:1f:86:
99:90:84:ce:4e:f7:9e:74:81:b5:d3:57:07:84:41:
db:ec:cf:d9:73:c4:a3:50:fd:ac:5c:32:0e:21:d2:
a7:2d:4f:0c:ae:ad:09:39:c0:15:5f:8e:3f:08:6d:
16:b0:86:ee:d3:fd:c1:b1:c7:a1:f8:c6:00:b1:19:
27:47:3c:1b:52:af:23:39:c1:53:79:17:dd:ba:92:
1c:b9:b1:27:3c:eb:70:10:1e:94:2c:aa:54:80:58:
41:b0:6b:9d:d0:25:29:ea:99:ea:30:0b:a9:f3:f8:
da:12:1b:bb:c2:39:54:a7:8f:35:0d:9f:0d:18:48:
88:3d:05:41:4f:dc:8d:04:d8:04:8a:2d:e4:79:e3:
ad:5f:32:80:a6:1b:eb:6c:58:d7:a7:c7:91:25:c8:
ed:83:61:42:f0:4c:aa:cd:a6:45:d7:a1:ed:77:89:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:DE:F8:BD:B9:A6:EC:74:AA:00:D2:F4:28:55:3B:97:9D:AC:80
X509v3 Authority Key Identifier:
keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/rnve-L25pux0qgDS9ChVO5edrIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.156.0/22
IPv6:
2a06:4200::/29
Signature Algorithm: sha256WithRSAEncryption
7e:5b:c6:ff:e0:76:90:c0:5e:43:99:40:b7:9f:f0:1c:83:5e:
ba:20:e2:c5:c3:6e:95:cb:70:b3:2c:a8:bf:99:9b:f4:ee:a6:
bf:20:d9:3b:1d:54:cb:a8:29:d8:ce:62:83:af:c4:b4:c8:f8:
b9:cf:56:47:bf:f3:ff:fb:bb:ec:e1:cc:65:13:c5:f7:08:4b:
55:91:b2:73:c9:45:0a:4b:ee:b8:a1:89:f7:0a:56:a1:1b:9f:
46:66:b5:6e:58:9b:8a:e1:5b:a2:fe:1d:cb:db:2c:d8:d8:d0:
11:85:e1:df:54:ee:32:4c:02:ae:ea:86:19:e2:b0:7f:da:d8:
f7:84:8c:a5:16:6e:ab:cd:14:69:14:61:43:2c:02:1e:de:5d:
6b:23:31:40:06:fe:d5:5d:7f:cf:4b:48:1e:0a:fa:c0:43:77:
9d:d4:49:ec:05:3a:79:be:8f:bb:7e:4f:46:6e:90:cc:96:1f:
e4:2f:a2:07:d5:dc:d0:be:a0:75:31:7f:3b:9c:4c:f8:44:01:
88:a1:9d:54:82:e8:c7:76:3b:97:c4:18:3e:fa:5d:c6:a8:31:
08:cf:66:b0:bc:f7:46:38:38:67:dd:7b:b3:18:4e:f7:23:f4:
d9:65:9f:31:af:38:c2:0e:ad:a9:37:70:3e:84:d8:0b:a3:7d:
a1:72:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org