Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/dOEmpn6JQia3KJf5hUyDVvX4_ic.roa
File: dOEmpn6JQia3KJf5hUyDVvX4_ic.roa (raw, json)
Hash identifier: lX6nnizuFzqf1OzOVMFwPwrd90rZUD7JNLPNf/YCATg=
Subject key identifier: 74:E1:26:A6:7E:89:42:26:B7:28:97:F9:85:4C:83:56:F5:F8:FE:27
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018EA00DA48C69C14AA756D987527E73103C
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/dOEmpn6JQia3KJf5hUyDVvX4_ic.roa
Signing time: Tue 02 Apr 2024 18:23:52 +0000
ROA not before: Tue 02 Apr 2024 18:23:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201670
IP address blocks: 185.191.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:0d:a4:8c:69:c1:4a:a7:56:d9:87:52:7e:73:10:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Apr 2 18:23:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e126a67e894226b72897f9854c8356f5f8fe27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:8e:08:9c:40:73:9c:cb:02:5a:73:59:4c:
0c:c5:9f:dd:89:01:73:1a:ff:5f:97:8d:32:7b:2a:
55:9d:0c:5c:9d:7c:a1:4e:db:4d:01:90:c9:06:3d:
ce:96:7a:15:8e:87:ec:c0:94:06:d2:b5:a6:86:6d:
91:73:65:5e:73:31:ac:18:2f:98:eb:4c:35:63:a2:
01:8e:49:2e:68:f3:ea:bf:a9:72:69:08:e9:be:2a:
9d:55:50:96:2d:75:4d:4b:d2:c5:d1:83:0e:92:29:
13:a6:df:7e:90:f5:53:f0:7e:5c:e1:ee:41:96:93:
27:a0:56:d6:e7:48:0f:f8:71:ee:b8:18:6f:e3:af:
9a:40:cf:2f:38:02:e1:04:e6:8a:27:a0:9d:9e:e3:
42:8d:49:d7:b2:16:fc:a3:48:75:e9:38:70:fe:97:
a3:1a:8c:de:f5:fe:25:05:5c:93:6f:72:6f:b8:75:
ef:57:25:4d:0c:92:f3:bc:09:1a:97:62:2f:d0:1a:
c4:64:81:be:4e:dd:d0:92:60:f2:77:97:ff:45:97:
88:1a:31:1e:3c:1e:39:40:7a:f6:2f:88:8f:b9:a1:
24:c6:84:bd:a0:cc:67:89:63:09:69:d1:da:8c:52:
e1:e7:c3:7a:be:78:74:61:02:d3:6e:d9:52:87:b1:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:26:A6:7E:89:42:26:B7:28:97:F9:85:4C:83:56:F5:F8:FE:27
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/dOEmpn6JQia3KJf5hUyDVvX4_ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1a:5f:75:a7:ac:b1:65:95:b4:15:be:f9:1e:61:53:f4:8f:
04:3a:98:5a:64:e2:e6:ad:b9:97:49:55:c9:69:3b:e5:dd:cc:
de:10:01:a7:85:66:07:31:2f:42:d2:50:9a:d8:4b:0e:26:74:
c2:b7:4d:fd:9c:06:c4:7e:a7:60:cf:f3:ed:ab:43:67:73:ee:
46:1a:b4:53:7e:1b:16:3a:84:53:30:13:30:ae:f9:2a:05:d7:
b9:98:76:9f:e1:f4:ca:0e:12:28:31:b6:56:5d:ba:b9:29:2a:
f6:93:59:1f:3e:82:f8:2f:06:19:30:92:76:61:90:e9:1a:10:
20:ec:a7:90:15:91:3d:29:5b:3a:9d:9f:27:97:9a:e5:3a:ef:
40:dc:70:d1:d8:3d:c1:b8:5a:e7:c3:68:1d:a7:ab:14:82:73:
a2:8e:ce:11:50:9d:eb:7b:a9:e3:25:ad:1d:eb:d1:ba:9c:ca:
cd:c5:fb:20:0a:d6:c8:37:0c:b8:f4:37:f6:2b:f7:38:53:7c:
63:1c:0f:81:fe:c7:e5:a0:e2:2a:2f:ef:4d:8b:38:3f:c8:b1:
16:cd:18:3d:b7:03:a3:91:b2:d3:99:9d:70:90:31:2c:c7:ee:
f8:9c:26:5d:f3:c7:5d:08:50:39:20:db:b5:ab:53:72:ac:fd:
b3:06:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org