Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/tp5CnE7seLBnK2P8uYvYxeOLfcQ.roa
File: tp5CnE7seLBnK2P8uYvYxeOLfcQ.roa (raw, json)
Hash identifier: QXV7959LB9Ph1leJkJnEs0ypKmjIP7PsdPmL/ofEugo=
Subject key identifier: B6:9E:42:9C:4E:EC:78:B0:67:2B:63:FC:B9:8B:D8:C5:E3:8B:7D:C4
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 018CC726FA742E0D57094C504BE19CEB158E
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/tp5CnE7seLBnK2P8uYvYxeOLfcQ.roa
Signing time: Mon 01 Jan 2024 22:31:09 +0000
ROA not before: Mon 01 Jan 2024 22:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208943
IP address blocks: 213.108.131.0/24 maxlen: 32
185.229.110.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 08:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fa:74:2e:0d:57:09:4c:50:4b:e1:9c:eb:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Jan 1 22:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b69e429c4eec78b0672b63fcb98bd8c5e38b7dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:3d:86:77:56:ec:8d:1c:ce:1b:20:40:34:
15:ce:41:43:7c:8e:ad:6c:5e:15:51:82:8e:e2:a3:
06:3e:06:b9:50:d1:82:74:ab:8b:9b:c5:72:10:23:
df:ea:e1:13:bb:91:1b:11:36:88:34:96:4d:7b:a0:
57:c1:02:9f:2b:df:d7:15:d9:f1:cc:98:b3:4e:99:
ab:04:a6:ca:65:37:40:34:7d:61:0b:17:75:85:1c:
b7:53:b2:73:64:c9:8b:9c:bc:2e:84:c6:ac:6d:88:
de:a9:72:02:24:a6:4e:42:de:18:92:f6:2a:13:58:
43:48:6b:08:0e:43:52:3a:81:9e:12:c7:9c:38:d0:
28:00:06:49:1c:2f:c0:bd:09:a8:5e:ea:2e:44:df:
b1:9b:a7:e4:25:f1:98:bd:95:8c:2d:e9:31:41:74:
b3:8e:b7:b0:46:d3:7d:7d:cb:57:97:3e:4e:30:35:
55:3a:4c:26:eb:56:f1:54:b9:fa:12:c2:5a:42:dc:
11:c9:92:50:e4:b8:7c:f5:a2:97:b3:1e:55:22:d4:
c1:da:37:5e:40:9d:1d:4a:45:1b:2b:35:20:e2:1e:
3c:e3:6c:78:6a:0b:a8:8d:4e:47:22:a4:81:77:c5:
90:2d:eb:3d:8a:1b:6b:fb:e2:01:a6:93:f1:4b:c6:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9E:42:9C:4E:EC:78:B0:67:2B:63:FC:B9:8B:D8:C5:E3:8B:7D:C4
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/tp5CnE7seLBnK2P8uYvYxeOLfcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.110.0/24
213.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:24:c4:d4:62:1c:69:09:52:23:2d:b3:f0:c3:f2:0d:64:91:
bf:47:e0:d1:7f:91:76:5f:7f:e8:d9:a2:82:74:08:40:86:05:
c6:5d:80:bf:89:2d:88:94:ca:42:1b:8b:32:6c:3e:9a:35:2c:
77:a0:2b:f8:3c:79:6b:0e:7f:6c:d5:26:7e:5b:62:11:cb:2c:
52:24:b0:45:eb:21:ac:29:c6:7e:fe:a6:41:b9:be:6b:56:7f:
be:b1:d8:09:5d:54:b6:56:65:cc:c3:54:6e:3a:9f:e7:fb:3d:
18:1b:e5:cd:89:29:61:2c:4a:3a:d3:a4:4b:5f:fe:b1:00:91:
39:35:e7:13:e1:9c:f4:8b:8b:87:1d:64:a3:09:9b:53:c5:6c:
5b:d8:57:24:31:13:24:62:2c:d3:a8:1d:15:56:ee:ad:5b:96:
3e:1d:0e:d1:28:37:75:9c:d6:65:c4:19:56:d0:f1:27:85:ce:
72:31:d2:a3:b2:b3:b6:ed:9e:99:24:33:39:83:3d:34:7a:8b:
d3:ff:7a:f3:7b:44:2b:e7:c9:40:6f:fb:96:e5:80:d1:9d:09:
b2:d6:99:fe:8d:27:d3:34:e0:ca:ca:ef:a9:a7:f3:78:f5:12:
a4:68:e5:45:4f:42:d5:2f:10:dd:7b:f9:c5:77:ff:9b:22:45:
41:24:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 10:24:40 2024 by rpki-client on console-fra.rpki-client.org