Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/eRe5PREtCXaY7Bu_i0PiDMUsFUQ.roa
File: eRe5PREtCXaY7Bu_i0PiDMUsFUQ.roa (raw, json)
Hash identifier: KVQSgDOwzGKW0+8YsTb+/y6xowuWGwtL9S05ZoWQ12s=
Subject key identifier: 79:17:B9:3D:11:2D:09:76:98:EC:1B:BF:8B:43:E2:0C:C5:2C:15:44
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0189B6B93532FA80C0151D151DD38EC36765
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/eRe5PREtCXaY7Bu_i0PiDMUsFUQ.roa
Signing time: Wed 02 Aug 2023 14:48:58 +0000
ROA not before: Wed 02 Aug 2023 14:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 185.188.141.0/24 maxlen: 24
185.121.224.0/22 maxlen: 22
185.121.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 05:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:b9:35:32:fa:80:c0:15:1d:15:1d:d3:8e:c3:67:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 2 14:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7917b93d112d097698ec1bbf8b43e20cc52c1544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:97:5e:ff:93:ed:23:f9:4e:0a:d3:d6:01:
f3:6f:8b:10:7c:d1:50:6f:f3:aa:d5:d9:5d:12:1f:
3b:91:e0:95:f5:20:8f:a7:da:c9:30:ab:80:66:16:
4c:09:16:7b:67:3e:99:b0:2f:8c:5b:95:83:5a:6c:
dc:be:60:cb:d6:40:1d:20:c0:76:ac:b2:39:ad:69:
ca:20:6f:ed:7e:32:6f:ac:93:65:e2:72:ee:ef:96:
25:20:66:04:06:45:df:6a:7d:9c:26:1f:38:bc:0e:
ef:dd:3b:14:eb:59:1e:f9:d2:18:59:c0:c2:eb:af:
35:64:c9:69:a1:5a:cc:d8:21:15:f4:a2:5e:f7:f8:
bd:9d:b5:f5:88:f7:89:eb:1e:86:23:26:a4:9f:61:
33:2e:6d:f0:28:88:06:b1:60:f9:56:97:1c:5c:8d:
d0:24:93:bc:d4:48:04:8f:11:a0:0b:ba:c3:ea:38:
29:52:90:4a:6f:08:54:36:ca:b1:66:ed:ca:8e:d6:
7a:84:cf:9e:17:0a:8d:62:df:5b:91:59:f0:ce:53:
a9:8d:ed:00:c6:98:0f:42:90:8d:90:6f:d1:b2:63:
f7:f1:3f:be:7c:6d:4a:b9:a7:88:a6:12:4c:92:fd:
4a:a8:9f:d0:ac:16:de:fe:9c:dd:84:9b:74:e3:bc:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:17:B9:3D:11:2D:09:76:98:EC:1B:BF:8B:43:E2:0C:C5:2C:15:44
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/eRe5PREtCXaY7Bu_i0PiDMUsFUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/22
185.188.141.0/24
Signature Algorithm: sha256WithRSAEncryption
90:75:8b:f4:a6:f0:a7:ab:f2:86:af:33:b2:95:db:67:34:0d:
eb:1d:4a:1c:70:cc:46:c6:0a:25:64:66:7d:25:a9:1a:80:f5:
ad:79:69:21:d3:36:f4:a2:0a:70:20:01:6d:83:be:77:73:8f:
70:f2:43:74:20:fd:3e:49:18:73:6d:ee:d5:19:83:f6:8e:7a:
4c:f8:f8:00:d2:d9:af:74:0d:2b:11:9e:53:d7:5a:40:d4:33:
6e:03:df:0b:b8:df:a0:51:24:49:35:60:ed:fe:68:21:f1:0b:
e3:de:64:35:da:09:95:8f:71:d5:26:00:02:1f:68:9b:7a:84:
89:6f:05:e9:3e:08:d6:56:5f:70:2c:2b:f5:20:d2:59:0c:f4:
66:21:66:ab:b8:c8:9e:57:b4:48:08:74:0e:de:c1:1e:56:7c:
22:3c:04:be:27:01:f5:30:a5:f8:f2:25:51:60:5a:81:28:fc:
20:c9:44:fb:ba:75:30:23:91:ed:3b:21:92:ba:dc:47:3c:e8:
6b:d9:6b:2a:f0:ee:a0:3d:52:ea:72:59:27:bc:ab:c6:38:40:
b9:2d:5f:1a:dd:c8:17:a9:97:bc:86:a6:b3:81:51:dd:47:fe:
4a:5e:ad:bf:6a:b5:b9:29:b5:48:05:4c:fd:f0:5c:c6:7d:66:
9f:96:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:54 2024 by rpki-client on console-fra.rpki-client.org