Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5ERLx4LSEPfpkOHeMNd6o8asX7Q.roa
File: 5ERLx4LSEPfpkOHeMNd6o8asX7Q.roa (raw, json)
Hash identifier: mwtG8/oE4Bjg5DlQpr2GiDIpWnOJNrRKW1eVu4AA39I=
Subject key identifier: E4:44:4B:C7:82:D2:10:F7:E9:90:E1:DE:30:D7:7A:A3:C6:AC:5F:B4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018F391D5DC9D81A5FA9EAAC068EBA65CD61
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5ERLx4LSEPfpkOHeMNd6o8asX7Q.roa
Signing time: Thu 02 May 2024 11:42:56 +0000
ROA not before: Thu 02 May 2024 11:42:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399471
IP address blocks: 2.58.148.0/22 maxlen: 24
89.37.63.0/24 maxlen: 24
185.121.120.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 13:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:1d:5d:c9:d8:1a:5f:a9:ea:ac:06:8e:ba:65:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 2 11:42:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4444bc782d210f7e990e1de30d77aa3c6ac5fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:b5:f0:f9:f7:62:90:69:23:92:24:59:00:
f5:6b:e2:1c:32:48:9e:e8:7d:3e:55:2b:79:fe:89:
61:cd:fb:1c:c9:ac:af:3d:4e:6e:67:de:76:d7:1d:
3b:2e:29:bb:9c:c5:4c:a8:f2:c1:ca:68:b3:40:84:
70:5f:20:be:34:1f:52:c4:e1:8e:d4:48:b0:89:e2:
a6:80:a4:ad:fb:35:bd:8d:7a:62:e8:34:5d:78:64:
30:38:d4:b0:fe:fb:fa:9d:2f:90:2c:d6:c8:df:bc:
f6:35:43:60:3a:be:75:db:2f:2b:da:7d:07:ec:6f:
95:e2:30:fb:f3:15:38:4a:be:89:dc:82:f8:bf:df:
35:a8:7f:01:61:6f:b6:e3:0d:8c:ec:d9:d9:92:e4:
29:5b:fb:23:18:e1:e5:22:14:92:92:21:35:83:ca:
fa:66:e3:5e:2b:8f:91:a2:a8:56:3a:2b:26:ae:67:
e1:c1:1b:85:7e:82:3e:64:18:93:70:54:b3:eb:2e:
b5:65:e6:45:9a:a1:fe:d2:7e:fa:ef:6d:63:0d:bd:
78:49:c5:22:67:f1:75:b3:f5:c8:d1:fd:42:e9:e5:
81:31:21:29:37:4e:af:7a:48:18:ae:23:7a:be:26:
bc:e6:a1:3c:7c:35:7d:14:9e:c9:c1:07:33:39:ad:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:4B:C7:82:D2:10:F7:E9:90:E1:DE:30:D7:7A:A3:C6:AC:5F:B4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5ERLx4LSEPfpkOHeMNd6o8asX7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.148.0/22
89.37.63.0/24
185.121.120.0/24
185.239.243.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9e:3f:27:56:8e:56:e0:a8:55:f8:cf:7a:f7:8a:bb:78:71:
d3:a4:a5:7e:e9:fc:92:6c:07:34:aa:72:48:fe:9f:b1:b6:61:
e3:3a:a6:36:5a:ca:68:6e:9f:23:38:97:2c:8b:7b:f6:f7:a0:
58:98:30:0e:28:a2:7c:29:c1:dc:94:9e:b5:cc:48:3e:78:6d:
dc:3e:45:b0:10:b2:c6:4a:54:ce:f6:c1:6e:c7:8c:d5:6a:d9:
9f:94:28:45:13:62:36:1d:1f:66:7f:ee:06:e9:c3:44:f6:2a:
b6:ea:70:0e:bb:15:ee:54:5f:43:6b:49:85:d0:83:c5:b6:ed:
4f:d5:55:c2:1e:a9:91:f2:52:b6:21:f1:48:9f:0b:8b:8e:71:
97:7f:15:13:7d:64:13:dd:3a:7f:9f:23:a3:60:a8:03:44:f2:
7e:03:dd:ca:ea:de:31:f1:97:cc:35:6d:3b:b2:ac:3b:f3:df:
08:da:1d:c7:5d:11:cf:e0:0c:f7:af:75:a0:8e:f0:98:f5:be:
e9:c9:bf:44:1e:8c:be:c6:e8:f2:cb:2c:20:53:81:f6:9c:ea:
ff:db:04:e1:57:ff:d0:10:cb:d2:d5:6e:21:9e:90:5c:d7:50:
f2:64:1c:63:58:c1:d3:67:82:35:02:d5:c3:82:51:67:5c:89:
6f:84:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 17:10:13 2024 by rpki-client on console-ams.rpki-client.org