Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Ehj--BLN_7DAMr9YBWkuMVvUrIM.roa
File: Ehj--BLN_7DAMr9YBWkuMVvUrIM.roa (raw, json)
Hash identifier: eCrUd7CCEbOwIwPlrR0QxeqiHdTgXXxwpChbT092ib0=
Subject key identifier: 12:18:FE:F8:12:CD:FF:B0:C0:32:BF:58:05:69:2E:31:5B:D4:AC:83
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 0189B60C2B75EE177B55F68729C81D249A80
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Ehj--BLN_7DAMr9YBWkuMVvUrIM.roa
Signing time: Wed 02 Aug 2023 11:39:58 +0000
ROA not before: Wed 02 Aug 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136258
IP address blocks: 185.192.124.0/24 maxlen: 24
185.90.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 07:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:0c:2b:75:ee:17:7b:55:f6:87:29:c8:1d:24:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Aug 2 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1218fef812cdffb0c032bf5805692e315bd4ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:94:6f:b3:83:68:95:63:87:e0:23:8c:52:
5e:57:cb:42:6e:91:d3:20:b2:d0:98:fc:0c:40:44:
a1:4d:ae:ad:96:7c:e5:20:d3:e2:19:ff:6a:0b:39:
66:e8:34:f0:71:90:51:c7:4d:ed:84:c5:10:ac:72:
25:3f:75:c6:4b:e3:0f:6f:e0:b4:a0:84:45:6a:50:
03:f9:9b:18:9f:28:a5:c1:70:01:c8:7c:97:b6:b7:
59:b5:bf:9d:49:10:f4:73:a6:72:85:a7:18:5f:76:
78:53:3a:e0:dc:b4:cf:3c:05:1e:f2:9f:cc:79:1f:
d1:80:6a:ff:ae:8e:b3:7d:76:72:c0:0e:ad:45:93:
84:4e:1a:89:bc:4e:1f:8d:7b:5b:25:c2:a4:6b:9e:
3b:5e:56:74:97:38:54:fc:86:94:53:4c:38:f5:e8:
52:51:13:d2:b2:8b:04:91:a0:1a:5c:03:1d:62:21:
9d:84:c1:eb:96:7e:9b:5d:d6:d2:50:86:f5:d5:ef:
fe:54:04:97:b7:d2:d4:c6:12:93:04:99:95:4d:fb:
1a:51:15:c6:21:0f:4c:bb:6e:84:ce:ff:59:b6:65:
4b:75:38:ad:b3:d4:69:a3:0a:55:95:8c:e7:0d:97:
a2:2c:0e:ae:8d:ca:79:97:30:19:a5:47:95:7c:cc:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:FE:F8:12:CD:FF:B0:C0:32:BF:58:05:69:2E:31:5B:D4:AC:83
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/Ehj--BLN_7DAMr9YBWkuMVvUrIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.61.0/24
185.192.124.0/24
Signature Algorithm: sha256WithRSAEncryption
af:97:3d:33:79:83:04:53:48:4b:38:30:03:6d:9d:4d:0c:de:
0e:da:57:a5:cc:ce:b3:5a:66:58:a6:eb:67:f5:b4:ea:6d:5f:
e1:6a:12:c4:fd:b5:f4:68:0e:59:af:81:d1:76:e7:75:dc:ac:
c4:ec:9d:20:b7:fe:e2:45:46:97:07:ef:4e:87:25:eb:cb:f6:
b3:6a:1d:b9:c0:27:16:8e:fa:53:94:b8:c4:e2:82:9d:e4:06:
f0:b9:80:f6:0b:72:67:a1:9a:7c:02:9a:45:58:72:1d:e5:b2:
31:60:e0:c5:cf:6e:cc:2e:31:f7:b2:9b:14:57:fd:70:3e:11:
f1:57:e9:33:1b:5c:bb:54:61:3d:b0:a3:2e:58:f7:09:18:cb:
b2:5f:e9:43:69:4d:74:39:04:ee:16:01:1b:9b:23:8f:cb:c2:
87:a3:31:ff:81:4a:34:76:2c:0f:24:e3:84:17:90:3f:69:26:
d5:fd:9a:ef:d9:72:db:11:42:a9:9b:fb:a8:87:c4:6d:3b:b9:
96:d7:0c:86:e8:1b:9b:af:dd:92:ff:5e:a3:ac:fb:88:38:f2:
7c:65:e6:92:79:51:1c:06:bc:92:2e:6f:3b:1d:dd:c9:60:7c:
38:0a:4b:98:ed:e8:a0:db:2e:95:ea:3b:cf:d2:23:2d:68:19:
69:87:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:37 2024 by rpki-client on console-ams.rpki-client.org