Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xD58lN3W6Ez79p8VrZ67XJGVXOg.roa
File: xD58lN3W6Ez79p8VrZ67XJGVXOg.roa (raw, json)
Hash identifier: TEVK2M4n2IzzJMNkW+AfskwpmMJtQ0kRK6iTSnj76nM=
Subject key identifier: C4:3E:7C:94:DD:D6:E8:4C:FB:F6:9F:15:AD:9E:BB:5C:91:95:5C:E8
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA962B7991A3C6C0D0501187AF9CB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xD58lN3W6Ez79p8VrZ67XJGVXOg.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150706
IP address blocks: 185.233.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 05:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a9:62:b7:99:1a:3c:6c:0d:05:01:18:7a:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c43e7c94ddd6e84cfbf69f15ad9ebb5c91955ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:4f:56:90:47:5a:59:0f:a4:fa:78:06:6c:
a4:a7:5b:99:33:d0:b4:30:41:f9:d0:9f:47:2d:11:
6d:0e:35:68:91:44:22:5c:56:64:b6:0f:e7:a8:21:
55:56:85:21:5b:e7:ab:8c:4f:5b:eb:49:66:ef:e3:
50:ce:24:e3:83:de:81:94:20:69:bc:bb:69:3e:52:
00:eb:43:6f:c1:5e:af:6c:cd:97:15:82:e9:67:68:
50:ae:36:20:ba:05:9c:e3:59:d0:da:79:80:22:89:
12:6d:60:c9:94:1e:d3:ea:ee:3c:7b:05:eb:1b:6d:
34:6e:54:9d:6a:65:0d:38:65:92:0a:f5:21:d7:e0:
66:1b:65:5d:70:2e:34:3a:1e:86:42:21:fd:93:b2:
9f:bf:6d:da:42:9b:99:e0:ec:bb:cc:31:ba:d7:e8:
e3:c5:8f:6c:14:33:5b:cb:aa:82:9b:70:9b:62:0e:
41:fd:ea:c6:df:df:8d:22:15:70:a5:68:0d:9a:d5:
42:19:a2:a0:be:43:13:a1:e5:a8:21:36:e7:9f:fe:
ee:0d:bb:42:b8:7b:0f:2f:19:41:a8:46:7b:40:39:
45:53:d0:d7:4a:93:55:d7:dc:cc:93:79:52:d6:7e:
c6:bf:69:12:ed:df:4b:b6:5e:f6:a0:e9:f2:5a:69:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:7C:94:DD:D6:E8:4C:FB:F6:9F:15:AD:9E:BB:5C:91:95:5C:E8
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xD58lN3W6Ez79p8VrZ67XJGVXOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fe:1b:83:f5:8a:6a:1f:8f:bb:6a:e5:a8:ee:00:72:48:19:
36:ae:1a:3d:95:9d:94:fa:bf:25:b1:f0:83:0e:27:15:e2:16:
1b:54:10:b7:12:ee:dc:b6:cd:48:95:75:d6:cf:40:c6:d1:bf:
86:b5:73:d0:8b:f4:f7:6d:7f:28:7e:de:e0:28:b1:d6:28:d0:
ec:9d:b0:98:86:77:cf:9c:ce:1f:f4:73:c0:d2:56:18:cf:bd:
99:77:fe:20:c4:6f:0e:6e:7d:88:e8:2c:73:31:69:e2:1d:90:
75:8c:a7:8d:3d:b6:2e:75:69:42:ca:87:38:4c:ba:2a:47:b8:
a8:37:28:ca:e4:ee:03:8e:3c:00:d7:4b:a2:44:de:c5:31:61:
39:40:51:97:71:8f:8b:ec:7a:14:ce:a4:ac:14:97:bf:92:1c:
13:82:ef:b4:2b:47:52:39:d0:8d:68:37:75:af:a4:61:e0:2b:
d2:31:e4:26:24:6d:1d:28:e1:f4:32:aa:b1:43:49:bf:61:3b:
87:96:54:ac:6f:b3:54:37:24:71:3d:18:42:b7:9c:4a:1d:50:
1a:69:5d:f2:86:16:12:b0:c9:df:94:ee:c1:c5:34:9c:fa:66:
17:2f:f5:55:03:06:f2:07:e7:2c:b9:23:ba:94:d5:11:ec:a6:
40:d6:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 08:59:43 2024 by rpki-client on console-fra.rpki-client.org