Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/pEk9w0UFWV-2YyGS1Oe0oE6rkDk.roa
File: pEk9w0UFWV-2YyGS1Oe0oE6rkDk.roa (raw, json)
Hash identifier: 0N24lltck1qbUPC+xiVlldN2LH57pH94g5q6xpffLEk=
Subject key identifier: A4:49:3D:C3:45:05:59:5F:B6:63:21:92:D4:E7:B4:A0:4E:AB:90:39
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 018B9B40C8FE65CD8B722D460625C4CCA520
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/pEk9w0UFWV-2YyGS1Oe0oE6rkDk.roa
Signing time: Sat 04 Nov 2023 16:53:16 +0000
ROA not before: Sat 04 Nov 2023 16:53:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196724
IP address blocks: 195.182.36.0/24 maxlen: 24
185.208.214.0/24 maxlen: 24
178.23.176.0/21 maxlen: 21
2a00:1cf0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:40:c8:fe:65:cd:8b:72:2d:46:06:25:c4:cc:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Nov 4 16:53:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4493dc34505595fb6632192d4e7b4a04eab9039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:bd:7b:da:c8:98:51:dc:64:82:7e:bb:74:
e0:d2:8a:e9:28:22:b8:aa:5c:4f:9d:89:9c:bd:a2:
24:43:8f:9f:67:eb:46:0b:c3:7c:ea:52:e3:5a:53:
b8:20:0e:83:9e:71:a4:9d:eb:13:6e:ec:f0:a8:f9:
99:a9:63:5f:0a:e1:ab:a6:a5:bd:b5:ce:e9:d3:c7:
2f:8c:c2:20:79:0a:0d:ca:3e:77:0f:3e:7d:46:d6:
9c:c3:89:b4:40:e9:a7:15:f8:4b:47:1b:43:d6:b3:
8e:7c:5b:c8:77:35:2f:39:e3:58:52:bc:24:b6:7b:
dd:9c:25:a1:d0:2c:26:2e:f4:1e:57:8a:b3:72:61:
63:1b:a1:ea:01:05:5c:8b:66:4a:7f:c8:2c:b8:bb:
64:83:3d:4a:a3:c6:82:76:f7:69:e6:8e:fa:89:78:
66:6e:74:0e:b5:fe:4a:aa:45:ed:13:10:97:c0:93:
3b:e0:25:64:f2:ad:93:1e:7a:3c:e9:29:cf:c2:ae:
30:4d:42:e8:30:a2:9f:86:17:72:ff:d0:59:f8:7e:
13:7e:0c:16:a1:d8:d1:9f:6e:84:ba:b5:78:39:b2:
39:cc:ef:ea:44:be:1a:7b:73:d3:cd:e0:01:a0:b0:
10:66:b1:4c:b0:54:40:3f:43:46:ae:8d:5b:8e:67:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:49:3D:C3:45:05:59:5F:B6:63:21:92:D4:E7:B4:A0:4E:AB:90:39
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/pEk9w0UFWV-2YyGS1Oe0oE6rkDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.176.0/21
185.208.214.0/24
195.182.36.0/24
IPv6:
2a00:1cf0::/32
Signature Algorithm: sha256WithRSAEncryption
09:f4:9b:e7:5c:a6:82:b6:81:b8:92:9e:46:41:28:20:9b:24:
9b:26:7a:93:ab:c9:58:f5:a0:02:d2:6c:3f:e5:2e:13:c9:09:
23:48:2d:e8:0b:9b:48:58:90:ed:f2:f5:59:a7:2a:5b:29:9c:
07:f7:1a:98:5d:a1:3c:0b:42:d3:7f:65:09:9b:30:93:f6:9c:
9d:fd:29:47:41:c8:21:c7:e9:90:e5:b6:8e:9e:fb:61:03:52:
4a:a1:36:4a:6f:95:82:7b:13:a7:2b:cf:6b:e6:a8:8b:a3:34:
43:9b:8b:03:5f:66:39:b7:12:3a:82:a8:62:0c:61:30:ce:e1:
81:29:8e:70:99:b7:4b:5c:73:28:65:18:fd:57:e1:c0:c9:f1:
77:8b:24:15:d0:3d:6d:6d:67:bf:84:7f:52:ae:5e:07:61:ae:
2a:e9:11:53:60:cc:b1:0f:81:55:84:7c:3c:16:e6:f6:28:dc:
29:99:cc:65:93:a6:bd:8b:5b:84:1c:ae:07:64:96:17:45:34:
46:0a:f5:9e:1b:ca:1f:f2:b7:d3:f2:d1:be:4a:47:10:9b:3d:
1f:23:6e:69:28:26:5e:b4:5f:9a:d0:18:ca:a5:b1:2f:bc:02:
07:b7:30:19:57:8d:cd:26:f1:94:9e:62:02:9d:8d:9e:36:f6:
e1:14:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org