Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/2EVIro5De-fFKZsENxRb9ySJ9zo.roa
File: 2EVIro5De-fFKZsENxRb9ySJ9zo.roa (raw, json)
Hash identifier: H8M6MHgLPD1dLJyvcCXQSma4OfFuJ4HGs+X2dp7PDZE=
Subject key identifier: D8:45:48:AE:8E:43:7B:E7:C5:29:9B:04:37:14:5B:F7:24:89:F7:3A
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01869DBF54CE2D7A468180810AA24006ED34
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/2EVIro5De-fFKZsENxRb9ySJ9zo.roa
Signing time: Wed 01 Mar 2023 15:16:47 +0000
ROA not before: Wed 01 Mar 2023 15:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.76.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:bf:54:ce:2d:7a:46:81:80:81:0a:a2:40:06:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Mar 1 15:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d84548ae8e437be7c5299b0437145bf72489f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:8e:cb:af:fa:ed:fa:3b:67:e6:75:f3:cc:
58:eb:a9:e0:cd:a7:38:f5:53:ee:2a:da:71:78:96:
62:5b:fa:bd:cc:15:55:d5:e5:b9:5e:0e:02:4e:eb:
65:df:9e:ad:06:59:58:fd:91:8c:fc:00:4f:79:2d:
5f:2d:84:a8:f9:a6:a1:6d:d5:c6:76:eb:fb:86:27:
95:e6:14:d5:a3:f0:00:5d:6c:9b:d9:6e:fa:90:6c:
13:c3:d3:8f:0c:f5:74:de:f9:f1:0f:c7:ba:fb:47:
85:ea:f3:0a:08:d7:86:b4:78:37:c5:5a:70:59:85:
2b:a7:c6:b0:2d:1c:d7:44:18:b6:72:d6:d2:f8:c9:
7b:09:73:69:05:37:7c:87:3f:fa:e4:87:15:90:e6:
42:d6:40:e8:06:45:86:07:5d:83:02:5b:35:7d:ff:
b0:77:33:bf:e2:fc:41:be:07:13:3f:93:c4:75:73:
51:9c:21:8d:44:ba:6c:f8:5b:21:ae:38:69:cb:de:
71:84:be:d7:04:ed:d0:3a:89:98:2b:5c:85:30:05:
61:21:dd:e0:26:63:e0:c9:0e:8e:8f:08:0d:15:1b:
6e:ec:77:75:93:8b:cc:a4:55:aa:d1:80:44:b0:8d:
f0:11:49:aa:4d:30:a3:21:5d:e5:7e:53:f5:95:98:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:48:AE:8E:43:7B:E7:C5:29:9B:04:37:14:5B:F7:24:89:F7:3A
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/2EVIro5De-fFKZsENxRb9ySJ9zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:71:78:cc:db:b5:3d:e6:33:e4:0c:00:9b:98:2a:9d:1b:20:
4c:6e:6a:8d:a4:39:c2:ac:14:31:d6:40:8e:ca:50:0d:c6:79:
ad:38:87:69:36:f3:6d:5f:4f:05:8c:f9:a0:89:08:e6:44:1e:
ea:4f:c3:84:b8:73:e0:3a:5b:a4:5f:d0:c5:df:7e:e2:43:c2:
fb:df:79:5d:c5:80:73:7e:c2:64:15:7f:ec:44:2d:d2:f8:aa:
ad:dc:0f:c6:a5:a8:29:1a:14:45:d1:a7:ac:4b:cf:b4:5e:9a:
9d:19:04:0c:ba:9d:2e:78:2c:4a:a3:8f:ca:af:d7:88:8d:b2:
1d:4e:f2:c4:cf:74:54:c7:06:ff:3f:8b:0a:67:b7:e9:fb:b9:
f2:e7:72:af:18:76:62:fe:f4:05:db:6e:ca:26:a3:f1:0e:59:
d0:4c:3f:b4:8c:26:ee:76:77:fe:cf:63:41:83:b7:2e:48:b7:
6a:3c:71:29:4d:46:4e:02:e5:58:5c:78:fa:51:ce:c7:09:bd:
60:dd:ed:f1:ca:eb:a3:af:a8:89:0c:eb:4b:54:9f:45:29:39:
33:41:91:de:aa:fd:4f:19:e4:f2:89:e7:65:4e:e8:d9:e1:89:
30:45:8d:1c:36:98:5c:d6:63:1a:18:b6:4a:66:61:e8:56:5f:
c1:56:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:10 2024 by rpki-client on console-ams.rpki-client.org