Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/e0yHZIo229EyQAnqtkgn1ilvlLI.roa
File: e0yHZIo229EyQAnqtkgn1ilvlLI.roa (raw, json)
Hash identifier: Ih330t7kpWVRoHiY4IgXk7XvZ2sboNbo2+RXyzYGqUE=
Subject key identifier: 7B:4C:87:64:8A:36:DB:D1:32:40:09:EA:B6:48:27:D6:29:6F:94:B2
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 01856F797DB5963BBE41303CF85BB05757C0
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/e0yHZIo229EyQAnqtkgn1ilvlLI.roa
Signing time: Sun 01 Jan 2023 22:35:11 +0000
ROA not before: Sun 01 Jan 2023 22:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.122.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:7d:b5:96:3b:be:41:30:3c:f8:5b:b0:57:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jan 1 22:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b4c87648a36dbd1324009eab64827d6296f94b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:67:3c:3d:95:5e:c5:00:38:85:17:70:7d:
28:ec:0c:f1:9f:49:1c:44:4a:0c:3e:87:6b:c8:82:
cf:f8:4d:fc:05:dc:7f:2a:c8:ad:66:e2:10:27:c8:
dd:0e:d8:33:40:7e:0d:2c:94:74:36:29:b0:cc:07:
ea:e1:9c:9f:d9:81:0f:bf:bc:f4:b5:f7:eb:f5:91:
44:1d:55:11:1e:f0:fd:bc:03:8d:53:43:ae:8f:8b:
c9:93:ab:0c:83:82:bc:11:66:f5:1b:12:58:62:cc:
db:23:d3:c3:3a:4a:a1:39:96:23:d9:97:91:02:e3:
fc:4b:18:cf:43:5e:36:09:05:80:f8:85:75:7f:af:
d1:c2:f9:c8:55:47:34:1a:46:34:a8:dd:85:67:2d:
31:7a:b5:3b:78:8a:fb:1a:12:52:fc:67:f4:07:fc:
ed:30:96:89:a6:bd:89:3e:03:64:a4:2a:68:2f:1c:
63:18:2e:d4:17:36:9b:b2:5f:60:51:e4:c6:21:3a:
70:8a:09:ec:f6:38:27:3c:08:01:95:ce:f8:1c:5f:
b2:73:2c:74:bb:72:2f:cf:10:6f:cc:fd:ac:34:af:
ea:7d:65:2b:5d:5b:32:c2:2a:b1:29:4c:3d:74:2b:
2d:b6:6d:20:8c:6b:dc:d1:32:ea:74:f7:dc:f7:59:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:87:64:8A:36:DB:D1:32:40:09:EA:B6:48:27:D6:29:6F:94:B2
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/e0yHZIo229EyQAnqtkgn1ilvlLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b7:d7:48:1d:f4:20:d1:1f:1b:5c:f2:d5:51:73:a3:8c:2d:
57:f4:fd:3c:dc:6c:7a:0c:64:86:e0:16:21:c2:23:fe:00:d3:
8e:ea:a1:72:1c:06:65:2b:5e:ca:93:63:bc:df:fe:df:48:53:
32:4f:0f:26:2f:15:72:d0:41:81:cb:85:a4:20:ca:15:51:1c:
20:26:4e:62:61:de:14:91:87:f1:1d:a5:df:f1:c7:a7:fa:73:
b7:13:6d:d8:ac:e2:b0:5b:92:b1:9f:85:46:d6:89:e1:ca:23:
40:1e:f1:be:d3:30:da:95:5a:84:09:c3:c2:93:55:07:4e:e0:
72:d5:f0:61:98:5a:de:13:56:f8:62:36:3c:73:89:0f:0e:0a:
19:27:f1:41:92:a8:1e:8c:89:aa:88:75:b2:4c:e5:2c:40:78:
3c:3c:45:89:b4:65:f8:b7:dd:db:e0:a6:1b:af:40:ea:3b:b7:
3a:5d:b4:f5:58:45:26:cf:c2:f0:cf:64:e8:58:6b:bf:24:59:
0e:b8:24:e8:6b:1d:12:23:73:db:66:a6:66:cb:8d:10:2c:c9:
52:d7:01:78:86:53:fd:7a:4f:29:c6:e2:3f:aa:74:0c:4f:3c:
9f:41:34:a6:3d:83:5f:f3:03:46:0e:a7:7c:15:dd:fa:24:2f:
f7:0f:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:47 2024 by rpki-client on console-fra.rpki-client.org