Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/EXWQIhxUGv1JJ1nXGPeATJ6rI1E.roa
File: EXWQIhxUGv1JJ1nXGPeATJ6rI1E.roa (raw, json)
Hash identifier: 9zMaOrO0jTtJ3/EKk1VCE20tSQhJrjxGxpSdpHiS2aI=
Subject key identifier: 11:75:90:22:1C:54:1A:FD:49:27:59:D7:18:F7:80:4C:9E:AB:23:51
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 018BF2090DF8D9C3EF3FEAB1E69EF455BCAA
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/EXWQIhxUGv1JJ1nXGPeATJ6rI1E.roa
Signing time: Tue 21 Nov 2023 13:19:21 +0000
ROA not before: Tue 21 Nov 2023 13:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 185.69.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:09:0d:f8:d9:c3:ef:3f:ea:b1:e6:9e:f4:55:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Nov 21 13:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=117590221c541afd492759d718f7804c9eab2351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:68:5c:42:9b:9d:a4:ec:15:d4:c2:c4:1b:
51:7a:ab:86:89:8d:95:9b:8e:d7:dc:2c:20:35:14:
61:f8:06:20:a5:af:22:67:bf:e0:7e:ed:13:c4:54:
48:1b:cc:96:3b:40:17:57:78:bc:46:13:a6:48:9a:
42:0f:a1:2e:ba:35:37:cc:be:7d:c3:7b:99:cc:90:
f0:ff:74:52:c4:49:5a:55:9f:98:34:01:94:bb:15:
50:3b:c1:79:f4:04:40:3e:5c:5c:b8:c2:d4:d3:c2:
ef:4e:7d:e9:1b:39:03:06:15:08:0f:b5:64:86:4b:
9b:57:10:41:8f:0b:d3:c1:01:48:9f:a0:b7:f6:fc:
da:70:cb:d6:c3:46:f0:92:88:94:13:8a:8d:7e:cb:
9b:31:8e:c8:8f:fc:6a:e0:20:ec:3b:3c:89:f6:5d:
59:5a:58:48:4f:9f:fe:e2:65:bc:94:f2:24:8c:7d:
03:47:f7:76:1b:05:51:8b:3d:2d:bd:65:e8:64:b9:
34:3c:cf:b5:86:90:b3:95:5e:92:3d:77:9f:c0:c6:
30:f8:72:74:94:45:0d:67:fb:d8:1a:e9:b4:f3:b1:
73:7c:21:6e:5e:45:d4:13:ec:0f:a7:c9:df:28:3e:
4b:8d:5b:a4:37:b6:d3:fe:03:de:89:c2:1a:3c:dd:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:75:90:22:1C:54:1A:FD:49:27:59:D7:18:F7:80:4C:9E:AB:23:51
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/EXWQIhxUGv1JJ1nXGPeATJ6rI1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7d:43:ca:2c:88:94:9b:e7:2a:c0:e8:8f:16:be:9c:d4:7e:
f6:0c:9f:c3:36:19:6b:64:36:12:87:9a:ec:c8:d3:57:19:a8:
a5:ea:e7:da:b2:1d:9b:8a:ec:c2:06:93:01:cb:d8:e9:03:ae:
e0:d9:c0:7c:8c:f5:a8:d3:3c:f4:55:26:24:a2:ba:0e:2f:e5:
36:c0:50:50:03:de:24:42:45:a0:00:fd:31:42:52:8f:f1:cc:
9d:26:79:d1:b1:3e:d6:ae:b6:b1:b6:03:dc:e0:44:c5:ca:79:
d4:b6:76:88:56:7b:d4:71:97:47:38:03:0d:58:b3:ab:27:f4:
0b:af:08:87:bb:46:bc:ea:29:f5:c5:8a:8e:04:4d:f9:0c:18:
a0:3b:bd:05:4a:c3:96:15:fa:17:04:9e:86:d1:62:e2:2a:04:
28:60:c4:8b:6d:f5:83:49:1f:67:b7:6a:18:25:75:0d:36:7a:
ff:37:8d:c4:c3:42:fd:d7:a0:3e:ba:d4:5d:d7:9e:16:05:71:
62:b7:93:c9:5d:0b:9b:e1:88:3f:44:1f:1c:cd:cc:23:b4:5b:
1b:36:a0:5b:b6:60:c9:9c:00:54:82:74:cb:6d:8c:23:a8:6a:
e6:10:b0:74:e4:ec:7c:96:86:88:77:8c:ee:78:35:e5:09:af:
00:97:45:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvyCQ342cPvP+qx5p70VbyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjMxMTIxMTMxOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTc1OTAyMjFjNTQxYWZkNDkyNzU5ZDcxOGY3ODA0YzllYWIyMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFtoXEKbnaTsFdTCxBtRequGiY2V
m47X3CwgNRRh+AYgpa8iZ7/gfu0TxFRIG8yWO0AXV3i8RhOmSJpCD6EuujU3zL59
w3uZzJDw/3RSxElaVZ+YNAGUuxVQO8F59ARAPlxcuMLU08LvTn3pGzkDBhUID7Vk
hkubVxBBjwvTwQFIn6C39vzacMvWw0bwkoiUE4qNfsubMY7Ij/xq4CDsOzyJ9l1Z
WlhIT5/+4mW8lPIkjH0DR/d2GwVRiz0tvWXoZLk0PM+1hpCzlV6SPXefwMYw+HJ0
lEUNZ/vYGum087FzfCFuXkXUE+wPp8nfKD5LjVukN7bT/gPeicIaPN1L4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBF1kCIcVBr9SSdZ1xj3gEyeqyNRMB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvRVhXUUloeFVHdjFKSjFuWEdQZUFUSjZySTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXWMA0G
CSqGSIb3DQEBCwUAA4IBAQBNfUPKLIiUm+cqwOiPFr6c1H72DJ/DNhlrZDYSh5rs
yNNXGail6ufash2biuzCBpMBy9jpA67g2cB8jPWo0zz0VSYkoroOL+U2wFBQA94k
QkWgAP0xQlKP8cydJnnRsT7WrraxtgPc4ETFynnUtnaIVnvUcZdHOAMNWLOrJ/QL
rwiHu0a86in1xYqOBE35DBigO70FSsOWFfoXBJ6G0WLiKgQoYMSLbfWDSR9nt2oY
JXUNNnr/N43Ew0L916A+utRd154WBXFit5PJXQub4Yg/RB8czcwjtFsbNqBbtmDJ
nABUgnTLbYwjqGrmELB05Ox8loaId4zueDXlCa8Al0Wn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:24 2024 by rpki-client on console-ams.rpki-client.org