Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/cjlCgQTviwX4PhY68WCHmqz_TnU.roa
File: cjlCgQTviwX4PhY68WCHmqz_TnU.roa (raw, json)
Hash identifier: XHIJqiUSuSOJzo87vkSnO2AEV/FK+xECcHxrAv74H9M=
Subject key identifier: 72:39:42:81:04:EF:8B:05:F8:3E:16:3A:F1:60:87:9A:AC:FF:4E:75
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 018A0DB42894ACE420FFF336283B92196E36
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/cjlCgQTviwX4PhY68WCHmqz_TnU.roa
Signing time: Sat 19 Aug 2023 12:10:25 +0000
ROA not before: Sat 19 Aug 2023 12:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57717
IP address blocks: 185.237.100.0/24 maxlen: 24
185.225.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:b4:28:94:ac:e4:20:ff:f3:36:28:3b:92:19:6e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Aug 19 12:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7239428104ef8b05f83e163af160879aacff4e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:5f:1c:b1:54:bc:25:1e:c0:f3:c5:b4:6e:
cb:5f:a1:d4:68:b4:b8:b3:f7:90:e2:01:6e:24:53:
11:11:f5:42:91:56:37:2f:ba:d5:ab:a5:d5:6d:e3:
ee:55:fe:b7:a2:1c:c0:23:24:93:dc:a9:f4:3d:64:
59:4f:3a:81:cf:ae:d3:f8:77:81:12:89:98:57:13:
c3:15:79:97:16:b4:bd:34:08:5a:46:bb:d3:40:c5:
68:83:b0:48:3c:7f:61:af:a7:5b:17:83:85:f6:cd:
f6:69:fe:84:b8:5f:5e:b3:4a:e5:bf:e8:af:48:dc:
0f:e1:c8:24:fe:fb:77:e0:6a:03:d1:da:60:fc:11:
16:4a:61:f3:fe:f8:d4:4c:64:e9:7f:d6:72:38:7b:
73:17:52:54:2b:10:52:df:9f:1f:bf:b7:86:66:e9:
da:45:14:54:4b:cd:5f:37:81:b2:16:dc:67:eb:dd:
08:f0:15:70:98:dc:85:35:11:91:c7:cb:2e:43:22:
24:80:28:f0:72:6d:ed:d2:ae:70:aa:c7:f3:17:3d:
c1:6a:77:b6:f5:9d:68:40:93:14:b1:f8:bc:8f:a7:
38:a1:09:9d:89:af:3d:f7:30:71:c5:93:f4:92:04:
e8:3e:b8:5b:03:3d:9e:68:c0:60:7d:af:ce:f4:f1:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:42:81:04:EF:8B:05:F8:3E:16:3A:F1:60:87:9A:AC:FF:4E:75
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/cjlCgQTviwX4PhY68WCHmqz_TnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.112.0/24
185.237.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:86:12:9f:a0:94:ac:e5:9c:69:fc:c4:b2:ee:e6:d4:47:1f:
ca:75:24:7e:a6:65:16:ca:68:9c:98:a5:a8:76:a8:08:a6:de:
d3:a7:56:13:fa:5a:0d:54:fc:1a:62:7f:a0:33:ea:8a:32:2b:
50:4d:d4:c4:ca:6c:f8:7e:47:4e:0f:b1:38:d4:8a:67:69:06:
8c:ec:0b:50:51:8b:21:04:9a:6d:ca:e4:77:0e:89:3f:94:19:
05:59:2c:c6:1b:a1:2f:ae:6c:c5:a4:ea:bf:64:2e:55:fd:c2:
8d:5a:53:47:57:bd:d2:ed:da:af:29:04:c4:f8:9b:7a:41:e0:
10:ca:5b:a6:59:69:ba:19:6d:60:09:e2:6e:ed:c7:5c:4b:ee:
03:fc:9d:e9:68:e4:25:ea:ca:32:96:ef:b3:25:51:7f:77:55:
dc:8d:98:cf:bd:fe:e9:dd:3e:4c:9d:b2:c1:71:53:c9:cc:64:
d5:5f:e5:f4:29:5f:23:28:0a:13:7b:9b:f2:2c:4f:6b:5d:b4:
7a:01:4a:d4:3a:f4:93:d6:c8:41:67:e9:fc:18:2e:63:bd:c4:
2e:c0:7d:bd:71:83:95:4e:dd:f9:53:bf:4f:3d:ff:99:27:3e:
71:b7:ca:d3:38:8d:1e:09:19:6e:21:6d:54:0e:ed:48:21:4e:
e6:c9:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:03 2024 by rpki-client on console-fra.rpki-client.org