Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/E2q5HO1I1E1FyjQRJw9n4CXo-yQ.roa
File: E2q5HO1I1E1FyjQRJw9n4CXo-yQ.roa (raw, json)
Hash identifier: m8paSK8liBdDf/dAK5LHuqqBsUtKje8/2k5xk4n6dnY=
Subject key identifier: 13:6A:B9:1C:ED:48:D4:4D:45:CA:34:11:27:0F:67:E0:25:E8:FB:24
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0186CD194F688707EDCDF0F5653444AB97DA
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/E2q5HO1I1E1FyjQRJw9n4CXo-yQ.roa
Signing time: Fri 10 Mar 2023 19:57:13 +0000
ROA not before: Fri 10 Mar 2023 19:57:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 185.232.19.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 13:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:19:4f:68:87:07:ed:cd:f0:f5:65:34:44:ab:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Mar 10 19:57:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=136ab91ced48d44d45ca3411270f67e025e8fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:16:23:c5:df:49:94:c6:43:25:9e:10:16:
b9:3d:ab:11:97:9e:f3:cd:2b:9f:d7:4a:02:9f:86:
d1:f0:c4:5d:34:7a:b9:7c:cd:7f:26:4b:61:a9:40:
89:ce:7c:79:90:d1:55:a6:58:72:07:8d:fa:5d:df:
6e:d8:68:5c:58:e7:87:e7:9f:c5:1f:f2:54:fa:8f:
ae:98:13:cf:78:c6:a7:9c:03:85:e3:99:da:4e:20:
21:09:78:d7:be:65:50:1b:f5:9f:09:b0:76:17:43:
f7:d1:e2:e0:62:0b:a8:e6:2b:38:87:35:fb:cd:72:
a3:d3:52:58:b3:86:f3:89:d7:29:1e:dc:34:20:c6:
90:80:26:83:b4:2b:f7:c9:0e:f0:16:ee:8d:78:96:
2a:9e:0a:c3:c6:bb:a7:82:0a:e4:68:fb:67:c2:ed:
0c:42:dc:3a:d4:83:78:b8:25:f2:c8:24:35:f3:4b:
d9:8b:48:41:c9:c8:d1:bd:ca:d2:54:37:4c:de:10:
d1:41:3b:a7:43:da:eb:1e:31:75:59:91:9e:bd:5f:
4f:b0:9f:4a:ff:f0:6b:b3:77:7f:3d:14:09:7e:3a:
ae:fd:89:c7:f0:1f:a4:e1:48:c7:6f:7b:6c:fc:92:
fa:0c:04:b1:98:03:56:99:50:66:2e:c1:fa:97:1b:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:B9:1C:ED:48:D4:4D:45:CA:34:11:27:0F:67:E0:25:E8:FB:24
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/E2q5HO1I1E1FyjQRJw9n4CXo-yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.19.0/24
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:71:dd:c9:b3:a7:fa:2a:15:b1:c6:67:70:53:61:78:1a:95:
b3:87:66:8b:75:8f:ac:46:f6:8a:ca:8c:f4:f6:16:3b:4e:31:
04:e6:08:a0:90:09:86:1b:55:22:86:45:cc:c1:5d:ae:2c:e3:
62:8f:8c:32:cd:72:b1:b6:ef:bc:16:cc:1d:23:ba:0b:1f:0b:
bb:d0:4f:6c:e4:bb:2c:74:76:16:05:a0:8d:c2:d3:cb:bb:8e:
3a:50:5e:6c:33:2c:a4:7c:c4:6b:bd:b9:87:70:03:44:8a:6c:
e9:a3:57:99:5a:41:62:56:94:03:85:38:6d:84:34:4c:73:fc:
1b:c5:37:20:fa:a1:35:6c:f0:fb:8b:a6:9b:59:9b:78:3e:e8:
e6:7b:7f:c2:ac:93:0b:97:8d:4d:62:0d:73:24:19:71:2f:bd:
c3:01:07:6a:78:af:81:49:26:e4:a7:4c:d4:cd:ca:e6:d6:f1:
b6:cb:e0:3d:c7:fc:4b:bb:8a:bf:ca:b2:93:0b:ac:1f:43:e8:
fe:87:1f:f2:b7:10:f8:fc:72:ab:3f:6d:0e:1b:26:e3:73:8f:
2d:f7:17:1a:d7:9f:62:3a:d7:f5:ce:0d:e4:82:e9:ac:45:f0:
3c:4a:97:39:b9:27:a4:41:c6:74:fe:90:12:a5:a2:bb:92:ab:
0f:48:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org