Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/Ehxo5D5Ykeq_znmMYkMvCVWKuuk.roa
File: Ehxo5D5Ykeq_znmMYkMvCVWKuuk.roa (raw, json)
Hash identifier: A+n4IbBDhUwY02IPvilfTbxUdeS1Wr0YhNgvre7SN9U=
Subject key identifier: 12:1C:68:E4:3E:58:91:EA:BF:CE:79:8C:62:43:2F:09:55:8A:BA:E9
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 01872737672C4F65806B630E4A83149FC13A
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/Ehxo5D5Ykeq_znmMYkMvCVWKuuk.roa
Signing time: Tue 28 Mar 2023 07:55:54 +0000
ROA not before: Tue 28 Mar 2023 07:55:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208887
IP address blocks: 185.242.192.0/22 maxlen: 22
185.242.192.0/23 maxlen: 23
185.242.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:37:67:2c:4f:65:80:6b:63:0e:4a:83:14:9f:c1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Mar 28 07:55:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=121c68e43e5891eabfce798c62432f09558abae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:d0:ff:20:1b:88:44:dd:ac:7c:24:39:9b:
fc:37:66:75:f3:08:65:34:29:31:81:70:79:27:69:
00:92:f3:40:30:b5:ab:73:52:e3:f0:24:25:13:47:
dc:7e:45:4a:1d:c5:b9:41:bd:52:e7:9f:08:2f:58:
92:4b:91:92:1c:d5:f2:2a:6f:e8:ba:d8:e0:a9:21:
48:1c:f9:d7:58:2c:80:57:0b:fd:2f:4d:95:8f:41:
17:68:eb:46:68:88:f2:d8:a0:68:1a:ef:fa:89:86:
27:70:6e:fb:25:ce:dd:ea:e7:81:e3:c0:d9:59:38:
b9:76:e1:18:b4:54:a1:ea:8f:99:98:74:5b:b3:c1:
66:42:61:07:98:af:a5:6a:86:92:72:2d:df:70:f7:
6f:12:c3:bf:c1:18:0f:73:14:b0:53:98:14:29:08:
96:2b:8a:ee:0a:ea:36:ba:1d:c2:a7:30:2f:ca:a0:
7c:3e:ef:3f:ed:37:48:8f:4a:83:dd:9b:d4:4c:ac:
ba:df:01:0e:84:57:49:83:9a:a3:a2:8d:e7:1f:d6:
79:7a:23:bb:5e:c8:26:ca:58:8e:4b:61:6a:84:1d:
84:55:1b:53:72:84:20:8f:58:cb:27:39:ce:22:33:
bf:22:ba:8c:cc:b5:cb:5a:da:e1:e0:33:8d:23:aa:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:68:E4:3E:58:91:EA:BF:CE:79:8C:62:43:2F:09:55:8A:BA:E9
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/Ehxo5D5Ykeq_znmMYkMvCVWKuuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.192.0/22
Signature Algorithm: sha256WithRSAEncryption
50:3e:8e:ca:ea:af:04:bc:42:72:75:78:2e:3a:3d:f7:14:a2:
6c:59:4c:64:76:d1:a7:aa:f0:bb:f9:ee:5a:8c:c1:26:9a:22:
a7:54:4e:09:48:e8:ea:62:d2:c8:41:21:2f:31:ad:fa:3d:5e:
cf:0d:7a:5c:2d:3e:d6:35:7a:f0:a9:47:12:82:50:b4:bb:cf:
57:f0:c3:e9:48:0c:c3:09:f2:65:11:8e:1f:fb:28:50:a7:af:
44:1a:cc:cd:48:16:e8:44:bf:30:e7:38:5d:cf:4b:c1:cd:9b:
55:13:8c:7d:65:3c:a7:bb:71:09:62:76:9e:71:e0:70:48:12:
17:5e:6f:b3:32:59:44:68:7a:ad:b1:fe:37:64:f0:84:35:4b:
db:84:45:d9:11:c4:a5:f1:85:f9:96:4d:1e:7c:86:c9:8b:1c:
aa:e1:3b:f3:e6:22:09:3f:34:3b:6a:9a:9b:38:97:21:22:6f:
08:b7:7a:fd:f0:74:58:86:d5:4c:40:a3:47:67:ee:17:63:7b:
08:d7:88:02:86:1d:a5:2f:b8:83:79:65:84:52:c1:bc:86:57:
f1:8c:9b:9b:f7:08:c0:ba:09:62:fa:17:eb:36:f2:ba:79:a0:
6e:37:fd:90:0f:be:a6:1b:19:8c:6a:45:87:2a:48:94:19:06:
52:17:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:23 2024 by rpki-client on console-fra.rpki-client.org