Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/E_T9d3TSl2xn88zUC53WoLtKL2E.roa
File: E_T9d3TSl2xn88zUC53WoLtKL2E.roa (raw, json)
Hash identifier: KUcdGd6dWatpp3I9PoFs7I8EwsgLpsEEpS0P/Im8Grg=
Subject key identifier: 13:F4:FD:77:74:D2:97:6C:67:F3:CC:D4:0B:9D:D6:A0:BB:4A:2F:61
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01856D81AE5BA68926D86873629318AB5F1B
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/E_T9d3TSl2xn88zUC53WoLtKL2E.roa
Signing time: Sun 01 Jan 2023 13:24:53 +0000
ROA not before: Sun 01 Jan 2023 13:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209746
IP address blocks: 185.7.119.0/24 maxlen: 24
185.5.142.0/24 maxlen: 24
188.68.84.0/22 maxlen: 24
188.68.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ae:5b:a6:89:26:d8:68:73:62:93:18:ab:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 1 13:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13f4fd7774d2976c67f3ccd40b9dd6a0bb4a2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:20:c3:3f:5e:3a:14:d6:88:c5:b2:01:0b:
6d:93:fd:e4:b1:22:58:ea:f5:0a:8d:cf:80:da:2e:
8b:cb:47:cb:a5:33:96:0d:79:a7:7f:58:9b:00:09:
28:d8:63:ee:1b:3e:1c:43:72:6d:d2:ef:c5:cb:d3:
bf:cd:65:93:0d:2a:ba:72:c7:32:ba:3f:5b:30:b1:
ca:d7:19:f5:3e:75:de:9e:b9:d0:75:94:6f:4d:cc:
cd:c1:d6:d1:21:ae:44:60:30:06:7e:54:db:fb:54:
2c:d1:00:88:09:f2:5b:46:1b:ed:0a:ad:3d:e2:df:
38:34:81:6a:eb:3a:da:01:62:8d:6e:da:1d:3b:81:
1b:98:4b:a6:5b:ae:2f:e1:2c:ec:f5:1a:b1:43:cc:
ab:5f:b8:1f:f3:2f:f2:74:55:e1:bf:82:b7:7c:46:
21:1f:2b:46:f6:39:61:3b:fe:70:d9:52:45:b4:64:
4e:49:54:c5:77:19:ea:1b:82:8c:25:95:64:19:41:
78:4f:71:6d:40:91:6e:f1:a5:f3:a7:be:ed:63:0e:
64:de:c0:1f:3e:0d:7c:25:2f:54:f7:2e:20:e2:6d:
57:80:38:c9:0e:bf:2b:c5:bc:ac:84:11:6d:e6:08:
45:0b:91:b6:b0:80:dc:3b:e5:57:52:db:fd:17:2a:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F4:FD:77:74:D2:97:6C:67:F3:CC:D4:0B:9D:D6:A0:BB:4A:2F:61
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/E_T9d3TSl2xn88zUC53WoLtKL2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.142.0/24
185.7.119.0/24
188.68.84.0/22
188.68.94.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2c:2c:dc:2e:07:26:ad:59:dd:74:ab:d3:10:ff:67:0c:a2:
44:71:32:4c:2b:78:96:02:5f:66:d2:77:91:23:9b:d2:3f:cc:
07:f0:26:25:a6:f9:d6:08:7a:ac:4c:76:5c:19:4f:e5:37:c2:
ea:b4:1a:15:98:77:90:32:9a:b0:de:4c:93:0c:93:15:f9:36:
06:58:67:23:b5:98:2f:df:2f:ef:da:26:0c:cf:78:f4:51:dc:
e4:7a:9d:df:a1:00:a0:66:15:cc:11:2b:ff:b8:65:d6:3f:f2:
54:6c:fc:0a:17:25:53:2d:8c:89:ca:9c:e7:4c:e7:2e:ed:c1:
53:d4:76:db:42:33:43:18:e5:c8:9c:3f:73:85:90:c9:c1:1c:
eb:af:29:cb:c9:38:49:88:fa:3b:a4:c6:59:2e:7a:7b:11:33:
09:29:96:48:ab:0c:e4:a9:49:82:41:8b:94:73:ef:c8:30:d2:
4a:c2:25:6f:c5:48:ec:83:2e:61:51:20:db:75:cf:60:09:5e:
68:95:ec:ea:40:39:9e:8c:ff:9e:f4:bb:6d:a5:4f:df:61:33:
d4:da:cd:95:79:86:7a:06:0f:8d:e9:c3:b8:ed:5c:af:79:b2:
8c:31:b7:8a:ba:af:73:bc:f1:46:d3:f5:28:05:28:c4:3f:c1:
eb:0d:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-fra.rpki-client.org