Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/E57y-NG731mMD5GqU14JO1_eG_M.roa
File: E57y-NG731mMD5GqU14JO1_eG_M.roa (raw, json)
Hash identifier: sb+MTVM6N9+aT3XijvC/nqsPi6G7EyAumkhcwiHzjVY=
Subject key identifier: 13:9E:F2:F8:D1:BB:DF:59:8C:0F:91:AA:53:5E:09:3B:5F:DE:1B:F3
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801DF9FF9E5DD3818C71F649D384A64
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/E57y-NG731mMD5GqU14JO1_eG_M.roa
Signing time: Tue 02 Jan 2024 02:30:15 +0000
ROA not before: Tue 02 Jan 2024 02:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 178.22.26.0/24 maxlen: 24
213.232.239.0/24 maxlen: 24
193.17.91.0/24 maxlen: 24
79.110.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 01:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:df:9f:f9:e5:dd:38:18:c7:1f:64:9d:38:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=139ef2f8d1bbdf598c0f91aa535e093b5fde1bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:a0:be:b5:7f:3e:a9:a0:ff:7e:d1:8c:e6:
a9:fe:57:70:d1:0f:5e:0e:24:83:82:ed:f4:fe:74:
9d:a2:fc:84:ec:a6:84:ab:5b:3d:d7:ac:62:f2:cd:
22:2f:d4:03:f1:d5:c0:21:34:14:b5:e5:9d:4f:42:
3a:78:6f:9f:eb:1c:7d:36:89:14:4c:ab:8d:2b:6e:
fc:f9:8d:0b:7c:6c:33:cb:39:8c:43:58:94:51:76:
ef:e8:4a:65:93:4c:5f:6f:9d:d1:02:d3:92:32:38:
92:36:31:24:e2:82:68:30:e3:ea:4a:3b:47:1d:2b:
3f:86:e2:a6:3a:e6:de:41:89:c4:e0:ff:85:b9:ab:
ff:01:72:4c:7a:f7:41:f9:26:4a:51:5f:2d:43:36:
25:32:c3:86:ad:bb:5f:9c:26:2b:65:e1:0e:81:7b:
0e:da:22:80:cd:26:c1:2b:a9:71:a3:97:5c:a6:77:
f0:17:18:e0:6c:a1:d7:73:e3:1a:c6:5d:51:05:9f:
31:c3:64:e5:94:17:c4:9a:80:05:8b:90:f6:87:de:
ad:8e:61:eb:05:fe:81:f0:31:d5:27:c1:7d:08:ab:
a2:9b:73:96:bb:de:c3:dc:13:ba:24:17:f6:d8:90:
28:de:ef:f0:f8:d2:5c:fe:92:8b:2a:59:37:e9:6e:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9E:F2:F8:D1:BB:DF:59:8C:0F:91:AA:53:5E:09:3B:5F:DE:1B:F3
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/E57y-NG731mMD5GqU14JO1_eG_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
178.22.26.0/24
193.17.91.0/24
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4e:6a:38:24:ee:6b:ca:3f:76:b0:a9:a7:dc:86:67:6c:02:
ed:e1:ab:bc:18:1d:44:15:91:31:b1:b8:8a:86:1f:4f:38:17:
1d:4f:a8:8b:0b:42:86:d6:80:43:47:3a:b6:6a:c7:18:bf:e2:
21:23:73:a7:3b:5b:1b:2d:a8:a5:c2:6b:0f:2e:c9:47:d1:6f:
67:4a:8c:47:1b:3c:cc:5d:c4:d8:d4:f1:2e:63:5e:c4:de:64:
ad:2c:d8:ef:29:dc:35:2c:fe:ed:2d:6b:f3:60:1b:bd:fe:b5:
76:bf:3e:3e:39:9d:07:41:c0:0f:23:6a:ab:ef:13:d7:e3:ac:
4b:d8:95:de:53:9f:26:26:21:95:51:27:b6:e5:1f:e5:b4:7c:
69:fb:93:f5:6f:66:e9:ce:69:94:38:da:9e:c9:83:05:73:c0:
ac:f9:2b:0d:76:ae:fa:1f:31:71:bd:f7:0e:a2:db:49:76:4f:
d1:40:f2:0b:54:53:13:79:8e:b0:56:ce:ff:30:93:ce:a6:93:
7b:03:e1:2b:a4:1a:c5:4f:4c:64:80:45:65:9a:ab:e3:e6:b4:
54:48:1b:dc:95:9d:36:89:f0:f3:32:2a:e3:d1:74:70:38:46:
8e:ea:6b:eb:8e:78:99:5f:7a:c5:49:19:da:14:49:fe:94:9d:
2c:2e:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:18:09 2024 by rpki-client on console-fra.rpki-client.org