Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/_xSmcvK0eDU2NjbsCkyqFkhsYL4.roa
File: _xSmcvK0eDU2NjbsCkyqFkhsYL4.roa (raw, json)
Hash identifier: lcUXDIV6/R+jmNhi8JpqlZMA0Hi1LcP4iEbMf+ctKEg=
Subject key identifier: FF:14:A6:72:F2:B4:78:35:36:36:36:EC:0A:4C:AA:16:48:6C:60:BE
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018DEF1316B6693F132451AB4745ADC1FB55
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/_xSmcvK0eDU2NjbsCkyqFkhsYL4.roa
Signing time: Wed 28 Feb 2024 09:37:02 +0000
ROA not before: Wed 28 Feb 2024 09:37:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15755
IP address blocks: 185.35.21.0/24 maxlen: 24
185.96.171.0/24 maxlen: 24
185.203.32.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 16:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:13:16:b6:69:3f:13:24:51:ab:47:45:ad:c1:fb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Feb 28 09:37:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff14a672f2b47835363636ec0a4caa16486c60be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:c1:3e:4b:f5:57:7c:d8:68:9b:b7:cc:08:
cd:7e:20:27:02:27:0e:9f:7d:e6:76:48:3d:bb:80:
c9:0d:e7:2f:aa:b7:89:db:09:1c:bb:0f:ca:a1:01:
47:97:dc:8d:d3:b5:a1:70:f2:4c:56:ea:db:d3:f1:
7b:4f:af:56:93:ff:93:7b:c9:9c:41:bb:a9:64:46:
7c:75:f4:10:87:be:fc:a0:92:c3:4b:40:41:7d:7e:
6a:e7:8a:d1:2e:ac:06:97:f0:7b:f8:d3:ca:fa:d5:
99:41:0f:77:ee:d5:47:e5:d8:12:67:52:0b:a3:93:
20:52:80:8c:b4:35:ce:f1:4e:f5:b5:98:fb:31:16:
7b:2b:05:ec:b8:c8:b1:22:6e:ae:44:42:c8:63:fc:
06:82:1f:7a:55:58:0f:3c:88:e7:54:37:c0:2b:9c:
1c:da:7f:29:f2:3c:26:9d:00:ac:fb:fe:21:05:25:
68:b7:da:cc:3c:8b:76:d5:4d:3c:67:e2:11:27:bd:
7b:09:d5:b5:fe:85:de:b2:e0:40:30:f3:14:8d:fc:
fd:61:61:75:3a:ce:44:1d:a0:f3:bf:a2:de:46:5c:
bf:f8:b2:11:c1:04:65:8d:41:08:bf:12:15:98:20:
14:62:6d:d8:78:07:cf:b9:2a:6f:e6:a7:02:f1:38:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:A6:72:F2:B4:78:35:36:36:36:EC:0A:4C:AA:16:48:6C:60:BE
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/_xSmcvK0eDU2NjbsCkyqFkhsYL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.21.0/24
185.96.171.0/24
185.203.32.0/24
185.203.34.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:2f:90:0d:8e:42:87:32:12:bd:2e:1c:90:c6:6a:0b:32:cb:
81:3f:4e:2f:17:65:b5:33:d9:a0:93:6d:31:d4:45:04:85:2d:
56:bf:84:69:eb:33:94:95:91:b0:c7:56:f4:1e:c9:9f:34:0d:
53:7f:53:ae:f8:cc:28:d9:99:22:8b:05:eb:17:6f:e2:b0:37:
e1:d9:59:30:f9:32:d4:79:d0:83:fc:50:ea:b2:fc:5e:b3:3a:
57:08:18:85:c6:1c:80:48:2e:62:b3:2e:82:b2:81:5a:bc:94:
0f:7f:a6:6f:f4:17:c1:33:e9:a9:95:f1:5c:79:d3:b0:23:03:
d6:64:a1:5a:41:cf:6a:66:83:1e:f6:bb:21:4c:f2:01:4b:6c:
98:cb:e3:8c:dc:3b:ff:78:5c:2c:80:50:f6:52:3a:92:47:21:
a6:63:4a:8a:ff:3f:4b:1c:e4:8f:5a:be:24:85:67:5f:28:ce:
60:58:f4:fb:7c:2c:e1:a3:f0:c9:90:89:c4:3f:0f:a8:1c:d5:
d5:36:74:a4:d4:e3:82:57:1f:8b:9a:2f:5d:dc:5e:ad:19:fc:
7b:4b:c4:a5:68:1e:7b:13:9f:fd:c7:fb:25:26:79:9e:f5:a8:
fc:fa:16:97:b6:c7:3b:02:f9:c4:8e:5c:82:08:4a:92:68:18:
7c:be:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 19:35:16 2024 by rpki-client on console-fra.rpki-client.org