Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/pEMGa7DAFpr8klZ2bgEgzBkUARg.roa
File: pEMGa7DAFpr8klZ2bgEgzBkUARg.roa (raw, json)
Hash identifier: KyA1G8+tbdVweqpJHj9U+kYPm7kBPti29C5kpKchB5E=
Subject key identifier: A4:43:06:6B:B0:C0:16:9A:FC:92:56:76:6E:01:20:CC:19:14:01:18
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 0187D6FC76EEDF8A74754A50FCA9C578F48A
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/pEMGa7DAFpr8klZ2bgEgzBkUARg.roa
Signing time: Mon 01 May 2023 11:04:42 +0000
ROA not before: Mon 01 May 2023 11:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205538
IP address blocks: 185.214.89.0/24 maxlen: 24
185.214.90.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:fc:76:ee:df:8a:74:75:4a:50:fc:a9:c5:78:f4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: May 1 11:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a443066bb0c0169afc9256766e0120cc19140118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:db:e7:18:a3:2c:a7:59:f6:31:5c:ed:d7:
6b:81:e9:72:2e:45:cd:2e:93:03:d4:d1:13:0c:13:
c7:c6:33:b8:5c:3b:21:d3:f8:49:81:c4:3f:a4:59:
bb:2e:be:4f:df:b5:bb:be:fa:f0:13:a7:1f:ac:6b:
08:2d:40:d6:77:de:d2:7c:51:7d:7a:21:2a:33:7c:
c8:96:af:a1:92:1e:b5:75:1d:c6:58:f2:d5:b3:03:
de:41:cb:b7:d1:38:21:03:cc:40:96:42:42:12:21:
59:aa:c1:e4:35:ad:f5:1d:31:d8:00:62:8d:d9:81:
a0:67:87:a1:92:dc:5a:70:3d:fe:f1:4c:5e:9a:56:
f3:e8:ae:53:9a:dc:1c:63:29:27:fc:74:0d:2e:eb:
15:db:21:72:da:bf:4c:57:45:84:57:dd:6b:23:81:
25:ec:86:9d:6c:90:50:a0:94:85:d4:cf:cc:98:8a:
d8:4f:f7:09:20:d8:a9:66:dc:6d:9a:7e:7d:40:b0:
08:a6:19:30:d9:88:4c:42:99:9a:19:8a:b7:9f:84:
76:7e:75:65:13:d1:b0:54:e8:cd:2b:0a:1a:2d:85:
51:88:03:34:69:8a:9a:98:80:ee:45:79:b2:9a:25:
09:e7:b6:07:9a:15:29:14:e6:11:73:92:15:38:71:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:06:6B:B0:C0:16:9A:FC:92:56:76:6E:01:20:CC:19:14:01:18
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/pEMGa7DAFpr8klZ2bgEgzBkUARg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.89.0-185.214.91.255
Signature Algorithm: sha256WithRSAEncryption
84:c4:49:e8:a5:45:01:09:a4:82:ad:fc:c0:5c:06:d1:71:2c:
24:dc:bc:12:0f:47:73:a2:e9:57:26:5d:81:6d:86:27:47:d4:
ee:03:01:34:a0:a0:64:c1:ba:84:ba:39:f3:78:c0:d5:bc:30:
21:dc:2f:4d:e4:77:27:6a:60:ec:17:a4:64:f3:51:d8:0c:93:
aa:a7:15:fd:88:37:ba:14:97:48:c6:00:c8:9e:0a:c5:a4:d4:
5c:df:ed:7a:e4:a2:f5:3f:fd:11:c8:62:60:26:c4:42:75:f6:
c6:e6:19:00:f0:f6:42:ab:f7:3f:e4:fb:2a:f6:76:08:78:3d:
d1:36:e4:d4:c3:f5:dc:01:fa:b4:50:c3:e1:85:e2:3a:6a:f4:
32:71:28:e1:b1:34:a8:81:82:32:8a:ec:87:82:fe:ea:e3:30:
24:8a:f6:0b:29:0e:ea:68:94:e9:3e:e2:d8:f0:2d:e1:cb:c8:
47:2c:70:5e:93:d6:c9:ee:32:ef:a9:dd:a0:e2:62:82:b0:9d:
e4:07:51:e7:88:4d:00:4a:90:62:ba:73:45:2f:d8:07:71:b8:
8d:0c:31:3a:f1:82:96:49:cb:1c:43:85:b9:24:38:bc:fb:87:
05:12:0b:30:d4:2b:57:89:67:19:ca:6e:c4:cd:8c:f6:e4:a3:
1a:a3:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org