Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/E9nTd0HxRXn85H6APNlVfd5lRfM.roa
File: E9nTd0HxRXn85H6APNlVfd5lRfM.roa (raw, json)
Hash identifier: D1fBzcJrt6OiSqFHUQJHsaDbYD8kzIy/ZxUMfzcwGL4=
Subject key identifier: 13:D9:D3:77:41:F1:45:79:FC:E4:7E:80:3C:D9:55:7D:DE:65:45:F3
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 018F84CEDE6C7F921E704CA3FC7CE2AB2A77
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/E9nTd0HxRXn85H6APNlVfd5lRfM.roa
Signing time: Fri 17 May 2024 04:28:20 +0000
ROA not before: Fri 17 May 2024 04:28:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146943
IP address blocks: 185.131.54.0/24 maxlen: 24
185.131.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 03:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:ce:de:6c:7f:92:1e:70:4c:a3:fc:7c:e2:ab:2a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: May 17 04:28:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13d9d37741f14579fce47e803cd9557dde6545f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:05:34:e9:92:c0:14:d4:7b:c1:42:e9:53:
dc:4b:f2:79:99:e4:26:90:ab:89:b4:47:bd:46:db:
ce:cf:78:ad:eb:b0:12:19:33:3c:5d:3c:1d:78:95:
fa:dd:4f:f7:38:97:1e:29:af:12:39:4c:f9:db:bf:
1d:62:2a:76:a3:5c:f5:d9:1c:4a:4c:0e:ba:3d:77:
64:83:d4:a0:f3:14:d7:4c:24:44:36:55:c6:08:f0:
bb:32:3c:6a:36:a9:37:2b:f0:95:2d:0a:c7:09:46:
40:7b:5c:4d:b5:c0:09:f7:b3:75:00:61:06:f5:31:
27:d4:04:ba:e1:94:80:e3:da:f0:47:fe:df:37:97:
f5:59:48:89:bd:b7:42:4e:74:10:b1:f8:fd:f4:38:
0e:ac:87:e5:43:28:b1:db:59:cb:1b:0e:32:bc:23:
3a:0a:ca:da:57:ec:6c:c0:d9:14:80:07:6f:12:d3:
88:44:66:95:68:e7:48:19:da:75:77:1a:ea:16:ef:
ce:b9:0d:9f:97:6f:43:8c:64:fe:c5:76:d8:e2:ec:
1a:4d:a9:b6:c9:0a:9a:fc:33:ba:56:99:82:23:9b:
97:15:76:8c:d7:4a:f6:37:e0:34:63:be:04:cf:da:
53:04:bc:c9:11:67:cb:b1:86:30:8a:9d:76:8f:4d:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:D3:77:41:F1:45:79:FC:E4:7E:80:3C:D9:55:7D:DE:65:45:F3
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/E9nTd0HxRXn85H6APNlVfd5lRfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.54.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f3:84:5d:a2:03:10:0a:99:23:9b:08:39:30:b4:07:63:77:
7b:f6:63:62:6d:c3:78:fa:a9:2c:6f:c3:b6:d1:94:c0:db:38:
6f:94:86:e5:16:bb:34:e8:da:03:58:5f:4c:1d:6a:9d:a5:5b:
44:a4:90:45:58:59:3f:cd:a4:df:97:3f:0a:fc:ed:60:d4:dd:
c7:a8:ff:a4:12:df:db:c8:f9:8a:44:a6:c9:5f:7a:2f:9a:46:
14:4c:a0:98:9b:30:6a:b4:7c:f3:cc:df:99:76:f0:b5:23:a6:
d5:66:77:07:23:f1:91:fd:be:4a:78:5d:59:a4:c5:cc:9e:58:
d2:a5:d1:78:db:8d:f0:5f:fa:77:2f:88:cf:a0:54:4f:e2:b6:
7e:6e:d9:9e:c8:84:42:45:9f:6d:1b:e6:87:d8:e7:67:53:b3:
eb:12:ea:81:07:fc:7a:fc:f7:ea:b1:4d:34:98:19:7d:1f:84:
2c:c2:dc:e5:5c:c0:3c:98:d8:68:94:25:9c:16:de:7d:06:af:
c2:5a:49:bb:b9:26:9f:99:a3:a1:c7:f2:61:33:21:69:bd:23:
dc:33:0b:a4:66:c6:ae:f6:46:cb:4a:27:5f:08:46:fd:c5:d7:
30:91:05:9b:bf:f2:df:ef:c4:4c:6d:fa:b9:81:3f:18:40:96:
58:b2:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 07:41:01 2024 by rpki-client on console-ams.rpki-client.org