Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EXi6u1_66spqjEgFE2sb190nWFU.roa
File: EXi6u1_66spqjEgFE2sb190nWFU.roa (raw, json)
Hash identifier: Rj7y5QQ2TZqM6tnGZPbsJ3Rc4BXCIexpH+rnf569tQM=
Subject key identifier: 11:78:BA:BB:5F:FA:EA:CA:6A:8C:48:05:13:6B:1B:D7:DD:27:58:55
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018BC83A2C4E910067E0E2120D4BF33DC475
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EXi6u1_66spqjEgFE2sb190nWFU.roa
Signing time: Mon 13 Nov 2023 10:28:57 +0000
ROA not before: Mon 13 Nov 2023 10:28:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50214
IP address blocks: 185.12.124.0/24 maxlen: 24
185.12.125.0/24 maxlen: 24
185.12.126.0/24 maxlen: 24
185.12.127.0/24 maxlen: 24
95.181.150.0/24 maxlen: 24
95.181.152.0/24 maxlen: 24
95.181.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:3a:2c:4e:91:00:67:e0:e2:12:0d:4b:f3:3d:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Nov 13 10:28:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1178babb5ffaeaca6a8c4805136b1bd7dd275855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:6a:c6:d8:24:30:e2:86:1a:71:01:51:1a:
67:cf:ef:46:b9:a1:a9:f9:8b:f1:1c:30:c9:30:a7:
b4:90:60:f3:c3:6f:6b:58:38:0b:ba:a9:86:af:43:
75:83:43:c3:0c:c1:81:d2:29:21:ce:5e:32:5e:c6:
55:39:62:67:51:1f:f9:c4:9c:24:bf:49:7d:1b:8d:
0e:1f:2a:3e:cd:07:21:b3:42:8d:1d:bc:87:ab:90:
79:40:43:33:ae:a0:55:35:e4:f7:72:82:dd:ad:25:
de:93:0e:29:c9:e7:16:d4:62:41:a8:38:1d:10:b2:
f2:23:13:97:38:bf:45:85:6b:c6:c4:86:76:48:25:
b4:dd:58:57:44:42:fa:3a:8c:a6:4a:8f:fc:ea:82:
63:e8:59:48:07:70:91:27:e6:01:12:61:c4:4a:f5:
db:ff:05:93:83:50:a6:c2:36:fe:b4:eb:7d:f6:b9:
d8:bf:b6:e0:20:ce:c8:2c:89:78:33:f7:5d:15:1a:
c4:dc:3c:dd:95:ba:ac:75:ce:c1:d1:cc:50:17:5e:
fa:7b:71:94:62:93:2f:41:6b:42:83:26:91:55:79:
45:6b:5d:d6:b7:ff:a3:98:62:cc:f3:93:94:d6:39:
cc:f2:8a:e8:b6:2a:42:6b:d2:66:e0:2f:b2:19:f9:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:BA:BB:5F:FA:EA:CA:6A:8C:48:05:13:6B:1B:D7:DD:27:58:55
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EXi6u1_66spqjEgFE2sb190nWFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.150.0/24
95.181.152.0/24
95.181.171.0/24
185.12.124.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d7:17:20:0a:7c:a6:79:15:3e:be:1b:f5:69:fc:af:51:b7:
27:f9:85:49:3a:e7:66:d9:f7:45:17:3e:0f:fd:c8:c1:62:0a:
5b:b3:65:48:48:9a:b8:81:62:72:ae:cd:44:52:10:0d:2b:f2:
db:66:0c:59:15:d4:24:2b:4b:11:25:58:99:c3:64:b3:29:88:
1c:01:1d:c3:9c:f7:a2:b7:2b:46:c5:ea:06:a3:b8:c5:55:19:
cc:cf:16:05:a5:07:9f:92:3f:3e:9b:a1:c9:79:a0:d0:18:4b:
19:59:36:29:d9:80:30:13:26:4b:79:fa:d9:ca:f6:34:33:61:
58:a4:ba:36:04:85:d6:74:b8:21:7f:e2:50:53:8a:f2:50:8b:
f9:9d:00:d2:40:5a:b9:0c:2f:02:78:9f:7d:86:ac:6c:56:b0:
a0:8b:d5:f3:8a:27:dd:a9:8f:48:02:d8:c2:27:0a:e5:d8:4b:
bc:95:e6:70:3e:36:e6:cb:15:70:ba:79:63:10:27:0f:1c:6e:
b0:af:d9:70:e2:8b:78:de:e7:da:42:3b:33:fa:36:8d:99:29:
dc:b6:43:28:62:58:e1:9f:6f:28:19:4d:a7:6c:a9:4f:f6:3c:
74:bc:ca:b1:86:12:04:f1:73:60:04:b7:d0:23:b4:40:32:28:
0a:e2:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:35 2024 by rpki-client on console-ams.rpki-client.org