Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/E24P1mEHt_YvMTmGC3XxlIQ-Zyc.roa
File: E24P1mEHt_YvMTmGC3XxlIQ-Zyc.roa (raw, json)
Hash identifier: 5jQdzoMFXMf9PQ7SMr54ienLsYEasptvic7Y6SqmWmk=
Subject key identifier: 13:6E:0F:D6:61:07:B7:F6:2F:31:39:86:0B:75:F1:94:84:3E:67:27
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 018DE5DC7A78E9431034F54815E400475D1C
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/E24P1mEHt_YvMTmGC3XxlIQ-Zyc.roa
Signing time: Mon 26 Feb 2024 14:40:48 +0000
ROA not before: Mon 26 Feb 2024 14:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208660
IP address blocks: 185.226.12.0/22 maxlen: 22
185.226.252.0/22 maxlen: 22
185.226.254.0/24 maxlen: 24
185.226.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 14:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:dc:7a:78:e9:43:10:34:f5:48:15:e4:00:47:5d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Feb 26 14:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=136e0fd66107b7f62f3139860b75f194843e6727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:9a:bb:dd:4f:f7:3f:89:11:87:6e:e7:68:
b4:01:53:fb:fd:de:76:4c:bb:29:f7:a0:ec:b4:a7:
15:e1:f8:66:0e:48:5a:c3:5d:81:28:c4:4f:6c:ac:
13:cb:6f:07:fc:34:e3:eb:18:99:fd:e8:47:02:22:
71:3b:1e:c5:fe:86:1e:b1:d7:42:a2:15:0b:b5:7d:
e3:1b:71:76:6e:15:23:5d:7c:87:46:d5:99:91:8a:
82:0f:92:35:87:b4:b2:57:01:52:03:a9:cd:80:60:
8d:b8:04:9a:00:00:ae:20:af:43:c4:8a:5c:58:0a:
8c:75:c6:22:3f:1c:41:b1:47:f6:71:90:2a:ed:62:
c9:7c:f8:be:55:4a:bf:d3:d3:31:dd:e6:66:22:e4:
fa:3b:7d:16:88:40:bf:32:e0:6b:53:a3:11:97:95:
d4:a7:31:e0:68:c2:f2:0e:49:c2:8d:8c:72:93:21:
29:5a:72:51:ee:8d:ec:25:49:51:77:ad:5f:10:e8:
79:74:57:b0:6a:f8:2b:8b:4b:53:e0:56:dd:3a:9a:
4f:31:7b:bb:61:c9:76:2c:9f:c2:c0:f1:16:2c:ba:
4f:76:89:8c:28:8c:83:88:50:e4:18:11:a2:b0:90:
43:06:95:2b:90:eb:9e:0a:14:cd:99:de:cc:99:a5:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:0F:D6:61:07:B7:F6:2F:31:39:86:0B:75:F1:94:84:3E:67:27
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/E24P1mEHt_YvMTmGC3XxlIQ-Zyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.12.0/22
185.226.252.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3e:b0:0a:03:10:0c:d9:32:eb:58:3c:55:57:0b:f9:0a:c3:
c7:e3:6f:4c:a8:0b:8d:fb:11:0e:8b:00:cf:a8:d2:37:c9:40:
c8:a5:29:21:75:68:ab:02:99:7a:2a:ea:30:30:a5:06:bc:10:
08:f9:be:17:4e:7a:bc:dd:7e:e4:ac:0e:5c:ca:16:0f:8e:3a:
82:e9:8c:18:40:67:7e:d7:01:63:4a:93:32:17:0a:81:86:a6:
b0:3c:51:ec:7d:d9:c9:ef:f8:ae:39:ac:dd:b5:5d:a9:58:40:
9d:bb:f0:a6:b6:ee:64:8b:10:e7:48:2f:0e:44:1f:92:a5:ec:
89:00:e1:d2:ab:45:2d:95:fe:30:27:26:63:ec:42:35:21:c4:
f9:f4:ee:26:d6:73:87:86:b0:ab:f2:67:7c:ee:3b:f9:06:32:
b9:37:4b:c1:f6:36:3f:f4:d7:08:79:95:4b:cf:9d:4d:4c:6a:
04:ea:7b:46:f3:c7:bd:b4:7e:dc:97:c6:a9:19:46:d9:ba:72:
90:ce:94:32:de:81:da:ef:52:0f:75:bc:6d:7a:60:36:f7:5c:
16:a3:be:b9:a8:98:9b:8d:fb:9a:00:ed:8f:64:a8:d3:90:7d:
af:6b:99:af:14:f3:90:1b:81:04:f6:76:f5:74:b8:4b:5f:92:
33:f8:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:20:41 2025 by rpki-client