Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/a5Rgxiep-Q4aw6yd7iIjYbhlYZU.roa
File: a5Rgxiep-Q4aw6yd7iIjYbhlYZU.roa (raw, json)
Hash identifier: WM9OYLmntMxDqTReqPm4UFJ6umEAvyV/o0Y95hJHjMk=
Subject key identifier: 6B:94:60:C6:27:A9:F9:0E:1A:C3:AC:9D:EE:22:23:61:B8:65:61:95
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 01904E7D909CA3BE953321AA68D375303725
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/a5Rgxiep-Q4aw6yd7iIjYbhlYZU.roa
Signing time: Tue 25 Jun 2024 08:22:50 +0000
ROA not before: Tue 25 Jun 2024 08:22:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201584
IP address blocks: 185.199.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 09:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:7d:90:9c:a3:be:95:33:21:aa:68:d3:75:30:37:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Jun 25 08:22:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b9460c627a9f90e1ac3ac9dee222361b8656195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:9d:a8:9e:7e:cf:61:12:45:63:12:17:fb:
9c:d1:4a:06:91:d2:9c:3d:e1:ed:d2:71:65:8e:80:
6c:09:b4:dc:73:94:c9:99:f8:f7:b6:8b:09:0c:05:
7d:e9:e4:d9:a6:1a:cb:0f:9c:ce:09:05:57:1b:e7:
e2:10:6f:1d:5e:6c:be:0f:77:4c:6a:47:11:22:34:
f1:d3:a4:14:b5:74:07:b7:6e:57:85:17:18:23:bd:
16:ac:a1:fb:15:c3:68:c4:09:1f:75:33:90:93:db:
fb:70:78:2e:97:ab:06:99:d1:ac:19:61:16:38:88:
ec:91:3c:aa:fa:d5:0f:59:49:16:6a:fe:9b:37:99:
d8:35:35:a6:5c:eb:a6:79:98:91:b1:8b:65:89:38:
31:7b:a5:d1:a1:b3:d5:65:7a:70:b9:c9:e2:c6:bf:
7a:cd:21:82:20:5f:09:48:b8:10:48:3b:95:6e:b7:
6c:23:3e:4c:e2:17:85:c1:d9:4f:84:ee:c7:05:d5:
8d:2c:24:b0:9d:85:c7:0b:f0:e1:83:a9:24:7b:fe:
09:6b:b9:72:a1:4e:66:a1:b5:0d:a3:96:1b:c4:1a:
27:86:d9:8a:c5:94:b6:d1:b6:c7:6d:36:10:77:bd:
f7:82:6b:b6:58:5b:8c:b5:72:14:7c:35:b5:e7:80:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:94:60:C6:27:A9:F9:0E:1A:C3:AC:9D:EE:22:23:61:B8:65:61:95
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/a5Rgxiep-Q4aw6yd7iIjYbhlYZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
86:08:a5:7b:b4:81:60:0f:c2:40:0f:a1:2a:ce:c6:ce:8d:81:
88:2d:9b:b4:ef:21:25:60:7a:f3:41:dc:22:54:3b:f1:07:6a:
77:90:b8:0d:b5:07:04:1a:53:13:df:40:06:02:a0:16:b1:b2:
ed:ee:51:21:fa:e1:ee:d1:f5:8e:8f:a0:45:0f:e5:e6:a2:70:
5e:f8:e2:2e:7e:bc:83:02:26:39:2e:85:cb:b7:09:e9:5c:a8:
69:a9:93:b0:4a:51:60:72:59:cc:57:21:3c:ee:70:bd:8e:d8:
24:67:f2:b5:98:dc:e3:6d:b1:7e:65:d8:cd:eb:de:b9:42:05:
4b:a9:78:14:18:4d:4c:ae:51:d2:02:3a:c4:0e:2d:68:b1:78:
3c:82:ae:04:4b:2d:78:18:4f:02:f5:30:bf:57:55:dd:ca:9a:
2f:f0:b0:1e:0d:69:67:cc:a2:d8:fc:56:2b:72:ec:44:44:6b:
5d:56:e5:51:88:06:40:ac:7a:96:84:2d:55:ff:72:be:3d:52:
5a:3c:12:db:ba:e7:33:ac:9a:1a:f2:4c:fb:58:7c:e8:70:f3:
00:d3:15:68:ee:aa:97:16:aa:e3:22:31:56:85:7d:bc:0d:11:
f2:71:b6:c5:29:79:45:36:1b:3d:fc:16:b7:03:1f:88:97:6b:
eb:d3:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:22:52 2024 by rpki-client on console-ams.rpki-client.org