Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Epl1FqfhKaT1iI2NEuA1Wk8rj6g.roa
File: Epl1FqfhKaT1iI2NEuA1Wk8rj6g.roa (raw, json)
Hash identifier: 2OfcsTe7JnRD2k3c5GrM7DLimcJBK0eeXz1Fq2DKJtg=
Subject key identifier: 12:99:75:16:A7:E1:29:A4:F5:88:8D:8D:12:E0:35:5A:4F:2B:8F:A8
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01869EE4F1F685404705E16B61EDC005C76F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Epl1FqfhKaT1iI2NEuA1Wk8rj6g.roa
Signing time: Wed 01 Mar 2023 20:37:29 +0000
ROA not before: Wed 01 Mar 2023 20:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212598
IP address blocks: 194.62.54.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:e4:f1:f6:85:40:47:05:e1:6b:61:ed:c0:05:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 1 20:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12997516a7e129a4f5888d8d12e0355a4f2b8fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:6a:32:1e:85:dd:28:15:dd:fd:cc:c4:dd:
f3:1b:32:1a:57:a0:5d:77:f6:c5:60:f1:8c:a9:ac:
a2:0e:7a:d2:9f:cf:6b:0e:56:86:86:aa:34:d0:d9:
4c:87:0f:b2:6c:f3:03:16:42:0b:bb:7f:0a:5f:26:
16:04:36:41:ad:9e:e8:6e:bc:11:5e:64:b1:a7:bc:
98:d6:b4:05:c7:4f:04:44:64:68:7a:c7:36:34:01:
52:6c:11:ad:af:08:86:06:1b:3d:f3:bf:f5:af:d4:
68:bf:26:cb:1b:33:aa:85:0f:95:30:fb:fa:8b:48:
43:30:fb:c0:d3:74:5a:8d:4f:71:ce:58:d1:d5:62:
51:2d:4f:c6:84:4d:4e:94:ad:fd:3e:72:7d:13:96:
6f:a0:51:db:4b:55:82:3c:4c:d1:69:d5:16:8c:53:
22:e4:07:56:13:b7:55:25:69:fe:e3:7e:66:e2:ac:
53:10:23:88:24:c3:73:a9:fc:f2:16:7a:b9:16:a8:
32:d5:d6:17:9b:3a:b5:91:12:17:d9:8c:00:74:9a:
51:5f:2b:6e:25:ed:1b:6e:44:24:d6:9a:5e:4c:fa:
02:07:50:0a:94:ee:69:54:fa:83:8f:de:d5:44:7d:
8f:82:79:f7:45:ff:0c:50:96:f5:4e:8e:e9:3a:51:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:75:16:A7:E1:29:A4:F5:88:8D:8D:12:E0:35:5A:4F:2B:8F:A8
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Epl1FqfhKaT1iI2NEuA1Wk8rj6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.236.0/24
185.254.239.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:55:4e:95:67:85:0c:dc:8c:d1:bd:42:4e:34:b8:45:df:82:
99:57:15:15:ab:6c:d4:b3:66:b6:4b:62:89:b2:99:59:3f:8c:
ab:9e:f3:31:9e:74:e7:5c:a8:e3:e8:d0:d9:18:f9:5b:18:1b:
da:a2:2f:c1:42:36:eb:b8:45:89:10:cf:0f:ab:60:8d:e2:35:
9f:79:0c:b6:7e:ba:5e:f4:81:99:4c:b2:8c:98:6a:dd:12:2d:
18:84:11:76:26:ab:d7:40:78:6d:28:d2:1a:c8:ed:96:7d:a2:
7e:86:39:da:bb:dc:26:81:07:61:33:b6:60:a1:fa:80:ca:9a:
e0:d3:c6:ae:47:31:fa:5a:2c:2c:d3:da:0d:a8:57:d9:ab:8d:
97:c2:92:64:0d:6b:c4:9d:e5:e0:4a:57:06:0b:da:ae:10:20:
2f:c6:a2:14:6c:6c:54:86:86:3e:91:63:05:b3:8e:84:98:e6:
1b:68:a9:5d:18:8d:fe:63:45:db:75:a3:a2:65:7e:4d:cb:f5:
86:75:b9:ee:2d:78:44:ab:52:03:24:78:6b:b4:98:04:f6:1b:
6e:0f:b3:b8:db:cb:39:a5:66:05:cd:6d:af:34:e7:5e:f7:d7:
de:36:77:5b:ab:b1:46:8a:a9:52:ee:2e:11:be:93:b2:a1:b1:
a5:d4:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org