Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e2sL18u467CjIEPcrMk6Nqntx-E.roa
File: e2sL18u467CjIEPcrMk6Nqntx-E.roa (raw, json)
Hash identifier: fEIMBQhqfr017fdTusilLM89pnU/8LdWbduRDZZ53Pw=
Subject key identifier: 7B:6B:0B:D7:CB:B8:EB:B0:A3:20:43:DC:AC:C9:3A:36:A9:ED:C7:E1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189829BCCB346AEF74E49664C164B382A48
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e2sL18u467CjIEPcrMk6Nqntx-E.roa
Signing time: Sun 23 Jul 2023 11:56:35 +0000
ROA not before: Sun 23 Jul 2023 11:56:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 45.130.201.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:9b:cc:b3:46:ae:f7:4e:49:66:4c:16:4b:38:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 23 11:56:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b6b0bd7cbb8ebb0a32043dcacc93a36a9edc7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:18:f6:61:12:1a:36:99:3b:52:d9:db:5f:
f4:27:e6:57:2c:0b:1a:3f:74:a0:60:31:2e:33:3c:
14:35:29:ab:3c:c2:4c:de:bd:b4:03:a9:d2:62:08:
e2:7f:9a:16:e6:4a:64:c6:63:65:5f:01:8f:94:67:
bc:73:67:b8:d0:d3:c8:31:e7:6a:06:e8:93:bc:95:
e2:04:b2:59:70:71:c6:c0:3a:2e:29:c8:9c:a9:99:
c3:7b:7d:b7:76:46:e8:5c:e8:ed:06:1e:a3:63:9d:
61:d9:f5:6f:e5:64:9a:a6:66:a5:80:49:86:9f:22:
a4:57:b1:b7:76:08:49:98:b3:46:1e:63:2a:76:a4:
57:b7:84:a5:14:93:80:ec:7c:55:0b:f0:cd:be:49:
8a:15:04:a5:2c:66:41:98:d0:d0:af:1c:b9:27:c7:
7e:d5:0c:85:33:f0:fc:06:f6:e2:34:1d:b1:db:6b:
23:d8:a3:91:c1:d4:e0:00:bf:3c:e0:5e:b0:3f:3b:
68:0c:36:d4:82:4f:26:c9:9f:6c:cb:82:f8:0c:0d:
b9:13:31:c5:db:b7:2b:11:d6:f5:84:3e:da:f5:14:
72:b2:68:3e:4c:8e:7b:25:8b:06:cc:d8:00:32:a0:
e5:88:a3:cb:d1:37:da:38:a0:d5:d2:e6:d0:14:df:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:0B:D7:CB:B8:EB:B0:A3:20:43:DC:AC:C9:3A:36:A9:ED:C7:E1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e2sL18u467CjIEPcrMk6Nqntx-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
185.244.138.0/24
Signature Algorithm: sha256WithRSAEncryption
62:74:06:f6:1e:65:95:2d:83:99:f0:08:61:bf:8a:a8:55:d2:
12:b6:ef:50:0f:ca:44:4a:7a:c8:35:a6:ac:e8:64:ec:21:0f:
8f:5a:86:1e:a7:a1:28:14:d7:96:f2:8c:57:17:f8:e8:d5:6f:
cf:47:32:f2:bb:a4:4c:b4:aa:47:c0:7c:1a:2b:82:16:e2:cb:
aa:cb:e1:c3:0b:5d:38:a6:2b:cd:94:ec:97:1d:04:08:f5:1d:
ee:5f:30:e0:92:12:dc:98:be:8b:77:b7:50:eb:0b:d5:a9:e5:
f2:f5:ae:12:4d:ee:06:ad:3d:10:84:2c:2e:81:6d:f4:69:cd:
7e:f8:b2:46:28:c2:9a:43:1f:06:d3:48:dd:b4:5d:88:d9:12:
2d:ed:d5:6e:3a:f9:ae:55:a6:e6:1d:e2:6d:91:86:5f:9e:a8:
f7:8b:ee:28:26:bf:f2:94:d6:d1:1b:bf:c9:54:f2:4b:9f:a2:
79:09:8a:07:16:bf:09:fa:fc:37:a7:88:8d:98:3f:d7:73:d7:
aa:63:fe:0b:ed:79:27:4f:b4:ac:67:dd:9c:91:5a:cb:0e:b7:
4c:93:df:0e:2b:c8:78:9a:5e:54:b7:31:32:03:8d:db:7a:42:
5d:39:01:74:66:b1:31:20:be:40:e3:2d:d3:bf:00:ef:9f:05:
76:ac:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 06:56:47 2023 by rpki-client on console-fra.rpki-client.org