Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EP2EG2pFd91rBPgPLBc3eGRBqZQ.roa
File: EP2EG2pFd91rBPgPLBc3eGRBqZQ.roa (raw, json)
Hash identifier: edGmlCwEJRVNfqVBz2RPM7oCqHWP4gb7QV7HSN9IS54=
Subject key identifier: 10:FD:84:1B:6A:45:77:DD:6B:04:F8:0F:2C:17:37:78:64:41:A9:94
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DADBE8A094CE8B39CC46F3FFB54E382B1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EP2EG2pFd91rBPgPLBc3eGRBqZQ.roa
Signing time: Thu 15 Feb 2024 17:09:21 +0000
ROA not before: Thu 15 Feb 2024 17:09:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27176
IP address blocks: 193.142.242.0/24 maxlen: 24
193.142.249.0/24 maxlen: 24
193.192.1.0/24 maxlen: 24
193.192.15.0/24 maxlen: 24
213.170.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 26 Feb 2024 18:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:be:8a:09:4c:e8:b3:9c:c4:6f:3f:fb:54:e3:82:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 15 17:09:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10fd841b6a4577dd6b04f80f2c1737786441a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:45:3b:59:56:b5:d4:4d:4f:29:77:5f:d3:
7c:98:6e:04:c9:08:43:b5:f4:4b:b1:18:37:54:dd:
ec:a6:8b:41:bd:23:1e:53:c5:a9:c4:57:ec:13:9f:
8e:97:a0:1c:82:83:de:c4:7c:a4:b5:71:cd:81:ab:
4e:ec:b5:78:d6:3f:a0:f2:f2:a8:3b:13:c0:63:5f:
81:3b:c8:4c:82:dd:92:b2:5b:3a:56:9a:b8:65:12:
2a:b2:a0:7e:43:4a:5c:43:b4:38:41:1d:e4:52:ea:
87:0f:ea:79:87:01:72:08:a7:88:0a:09:75:50:31:
08:7d:af:34:c7:ad:5f:db:41:aa:21:d2:88:21:87:
c8:35:b0:19:4d:e7:b4:22:9c:b6:4a:71:77:c3:62:
d2:f7:18:0f:36:e4:c7:3b:d2:49:e3:c8:40:d2:51:
78:83:02:e6:b7:36:d5:e1:0c:67:5f:d3:30:ae:3a:
24:f9:b1:57:1f:2e:00:ae:e4:45:99:81:75:eb:59:
fd:97:14:a3:36:34:ae:0f:16:b5:19:e0:74:16:53:
38:ad:cb:21:8a:8c:af:02:49:b2:79:f3:87:12:76:
e7:98:8d:0e:a4:02:e9:69:09:96:e5:f2:f1:1f:6d:
69:f0:22:74:01:85:b4:8d:8e:4c:c7:38:b1:26:48:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:84:1B:6A:45:77:DD:6B:04:F8:0F:2C:17:37:78:64:41:A9:94
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EP2EG2pFd91rBPgPLBc3eGRBqZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.242.0/24
193.142.249.0/24
193.192.1.0/24
193.192.15.0/24
213.170.192.0/22
Signature Algorithm: sha256WithRSAEncryption
46:76:8b:aa:84:48:72:fe:11:78:15:a0:5c:7c:10:8c:db:da:
24:40:97:9b:80:63:13:7f:5d:8c:20:6b:02:a3:d8:de:cc:e2:
e8:45:40:fb:49:0c:50:a9:2d:26:a3:7c:26:d0:71:25:9e:70:
3b:a3:07:9e:6c:71:cf:a3:7c:78:ff:58:ec:ea:ab:ba:94:5f:
7b:9d:2b:4a:ba:c9:46:aa:f6:6f:74:56:47:8d:e5:15:b4:bf:
cf:79:eb:21:43:da:d5:56:da:7a:3e:92:2e:1e:2c:64:3c:dc:
79:9f:26:6f:5a:73:3d:33:03:89:2d:38:24:4e:47:50:8f:53:
a5:c4:5c:e2:fc:19:39:9b:b3:82:64:b8:1a:fd:9e:72:4e:da:
d7:02:9d:e2:00:33:64:21:5e:92:8d:05:88:5c:5e:21:54:e5:
76:d8:0d:d5:4e:2b:8c:67:99:14:7e:80:b4:3f:8b:47:c5:12:
e3:22:d2:4a:9e:5d:55:ac:b0:67:b1:27:97:d0:b8:88:76:12:
75:86:71:92:66:0e:6c:29:b0:a1:92:fe:0d:07:e7:fd:1b:df:
3a:70:8e:64:cb:29:7e:17:d8:07:b7:87:9a:57:23:1f:1d:12:
eb:2f:9f:3e:aa:94:33:80:e7:75:35:2f:41:fd:1d:86:5c:87:
9f:32:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:30 2024 by rpki-client on console-ams.rpki-client.org