Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/1eqKYuvfSolGiceHw4U9HJnpNeE.roa
File: 1eqKYuvfSolGiceHw4U9HJnpNeE.roa (raw, json)
Hash identifier: z464lIB9wMTdvh5RhpqH1sKNFv/5s6NsSKBK+GxBbOQ=
Subject key identifier: D5:EA:8A:62:EB:DF:4A:89:46:89:C7:87:C3:85:3D:1C:99:E9:35:E1
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 018CC3B6AD8E822A54BB1C7B3A321F44217F
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/1eqKYuvfSolGiceHw4U9HJnpNeE.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21385
IP address blocks: 185.55.120.0/22 maxlen: 22
86.110.64.0/19 maxlen: 19
81.92.160.0/20 maxlen: 20
212.82.160.0/19 maxlen: 19
217.151.80.0/20 maxlen: 20
193.110.24.0/22 maxlen: 22
2001:1b18::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 20 Mar 2024 07:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ad:8e:82:2a:54:bb:1c:7b:3a:32:1f:44:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5ea8a62ebdf4a894689c787c3853d1c99e935e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:5e:1e:63:a2:3e:6d:63:65:1d:27:a6:9b:
d9:44:3b:29:37:ff:17:44:e4:8f:7f:31:94:93:da:
e9:7d:82:ed:58:56:e8:d9:41:04:6a:16:67:f2:f7:
61:62:5f:5a:7b:4d:a6:aa:27:91:9c:fa:8e:5d:b1:
4d:e2:2a:92:5d:61:5a:8a:ec:f2:25:1e:09:20:0d:
bd:ce:83:cb:ac:33:4b:f2:7f:a1:1c:13:80:bf:84:
bf:16:5a:b9:40:c0:c9:18:c4:7e:62:2a:9a:02:33:
fe:98:27:0f:a7:c4:4a:cd:07:7d:9d:0c:03:26:48:
6d:d8:84:2c:75:e4:a7:56:f0:82:c0:c1:cb:1f:9c:
38:61:27:03:c1:59:15:91:83:7a:2b:18:29:f7:66:
ea:3e:34:76:5b:12:53:22:14:a6:4e:df:4d:00:64:
78:f4:e2:21:ee:ba:cd:61:55:25:3d:a4:08:07:d9:
c0:9d:6c:d4:7d:e1:1a:1b:93:1d:08:e3:06:92:f1:
e5:a7:bc:d3:4e:9b:95:b8:a0:6a:70:23:62:75:ef:
b0:8c:53:34:72:8d:08:e3:3b:82:5e:c7:48:88:d1:
6b:7a:03:76:21:63:68:8e:a9:12:7f:07:0a:bf:8d:
c6:72:58:1e:fc:b8:68:24:e3:b4:82:89:dc:14:99:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:8A:62:EB:DF:4A:89:46:89:C7:87:C3:85:3D:1C:99:E9:35:E1
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/1eqKYuvfSolGiceHw4U9HJnpNeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.160.0/20
86.110.64.0/19
185.55.120.0/22
193.110.24.0/22
212.82.160.0/19
217.151.80.0/20
IPv6:
2001:1b18::/32
Signature Algorithm: sha256WithRSAEncryption
89:dd:f2:36:56:e6:8e:33:92:5e:26:5a:3f:6f:19:b0:ab:53:
4c:3e:d5:f2:c2:bf:b3:a8:b4:3a:e9:a9:50:0f:19:88:61:f3:
5a:5f:b3:49:a9:68:0c:2a:fb:28:5b:a3:3c:54:6b:b3:d8:3f:
f4:59:81:be:44:e8:2b:ec:49:31:58:66:27:c6:bd:16:9c:0d:
c5:b2:8d:65:84:c8:56:cf:72:12:87:68:e5:33:3b:b3:7e:65:
f5:4c:88:af:5a:d5:9a:7a:be:46:82:e8:9f:10:79:3f:82:12:
fd:82:97:11:76:f8:e5:5e:d0:7f:2d:51:67:0a:a2:79:f0:76:
aa:a2:11:0e:16:25:65:39:f3:4d:5f:a6:23:ec:fd:8a:9e:4e:
ab:5e:52:35:7d:a1:f4:10:30:58:24:f9:60:3a:be:e2:25:ab:
a2:20:4c:41:21:08:20:85:5d:1c:d3:99:5b:06:5b:2a:e6:bf:
5c:f9:f6:d7:79:ba:6e:38:bd:de:29:ec:e5:8f:ff:e6:15:9b:
69:6e:a9:20:77:bd:0b:c6:6e:16:2b:3b:18:b7:84:11:c6:68:
65:6d:39:cd:bd:b9:f2:17:90:2c:54:13:a2:e3:70:e6:5a:44:
45:f9:11:21:4e:60:2a:b5:d3:f8:b7:86:22:af:95:58:00:e1:
6c:8b:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 11:55:08 2024 by rpki-client on console-ams.rpki-client.org