Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/j16S5GNF8vpEHhn_E0_9ZDLfh70.roa
File: j16S5GNF8vpEHhn_E0_9ZDLfh70.roa (raw, json)
Hash identifier: m+tIiu/ODqSFyxgh4zDVd7pdLt2302azJZ2K7TmNQtQ=
Subject key identifier: 8F:5E:92:E4:63:45:F2:FA:44:1E:19:FF:13:4F:FD:64:32:DF:87:BD
Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial: 018A3A8835B334BB790E859B7631E66E3033
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/j16S5GNF8vpEHhn_E0_9ZDLfh70.roa
Signing time: Mon 28 Aug 2023 05:05:19 +0000
ROA not before: Mon 28 Aug 2023 05:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212965
IP address blocks: 185.238.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:88:35:b3:34:bb:79:0e:85:9b:76:31:e6:6e:30:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Validity
Not Before: Aug 28 05:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f5e92e46345f2fa441e19ff134ffd6432df87bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:40:a0:39:7c:fc:ca:b2:fa:31:58:78:48:
d0:ee:8e:d5:c4:73:da:ce:88:52:94:23:26:9f:7d:
e2:cd:50:ac:43:f2:dd:62:ea:b8:59:58:91:41:95:
76:50:87:34:05:91:85:4a:bd:a9:51:6c:1e:15:a9:
7c:82:de:75:48:e8:4d:0d:b0:7f:f9:ad:16:9c:59:
4e:5c:9f:b7:61:40:d5:95:18:38:f1:a7:92:43:5c:
57:45:5d:fa:9e:17:b1:2d:bf:e0:0c:0e:40:1b:ae:
28:0d:df:15:49:e4:8f:14:ab:9f:20:6a:78:0c:33:
3b:3f:44:c2:dd:53:31:0c:84:3a:e0:ab:9e:97:34:
ed:5b:f2:ba:24:79:b9:68:4b:ea:d7:88:e0:5c:82:
2e:ce:5d:a7:df:19:1e:37:f3:1a:42:69:cf:05:86:
28:c2:a6:c8:60:e1:c2:f0:ea:2b:e0:02:07:ba:bf:
5b:53:99:c7:b5:34:d6:15:d5:5c:ff:bf:cf:52:5b:
92:8c:80:e8:9f:9f:b4:c8:0d:de:a0:2f:b1:51:89:
80:e1:49:09:69:10:5e:76:96:fb:fd:73:3f:d5:87:
c3:f9:8b:3d:fb:a8:e3:d9:a4:36:14:88:bb:34:86:
b9:4f:d8:04:f0:6c:51:3b:61:6f:e7:79:76:14:6f:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5E:92:E4:63:45:F2:FA:44:1E:19:FF:13:4F:FD:64:32:DF:87:BD
X509v3 Authority Key Identifier:
keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/j16S5GNF8vpEHhn_E0_9ZDLfh70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:21:60:e1:95:c6:2f:b3:60:6f:05:d7:1d:70:f1:e1:b7:d5:
35:1c:54:6d:49:d7:9c:6a:ef:60:35:78:80:90:51:36:a9:ad:
11:fa:d2:6d:0c:70:41:3f:d3:9f:52:30:d5:a1:0c:61:54:8c:
a4:b6:1a:cd:48:ca:44:82:b4:a2:19:83:b5:c1:a7:e9:5a:6d:
ce:4f:63:98:94:fd:ec:f7:a3:cd:9a:66:3c:00:8f:16:32:25:
6c:b2:a7:15:85:96:72:0b:87:8d:68:51:ad:a5:a7:93:bc:d6:
b6:33:3c:d0:0f:39:44:62:9b:56:a3:77:07:81:4d:a8:18:08:
ef:38:74:ff:0b:59:91:a6:53:c6:a4:e8:32:a6:91:b7:74:3d:
63:71:14:45:0d:ea:67:a0:ca:22:21:5d:da:32:13:40:b1:42:
0b:9d:ee:db:da:36:48:9a:24:37:f0:49:70:58:27:64:44:19:
bd:f2:65:dd:7c:17:26:e4:2b:c5:0e:41:62:8c:a3:47:64:1f:
8a:62:cf:b4:62:bb:0c:ad:b6:65:74:6f:9e:e6:d7:db:f4:cd:
78:9d:bd:b9:55:99:e3:e7:77:6e:b0:71:d8:40:23:07:65:04:
f7:4e:68:b2:99:e5:eb:fe:c9:ee:b8:db:ee:14:7f:f6:d7:93:
6e:c2:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org