Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vDpWgTymga_Isskw7S4GcRAD9M0.roa
File: vDpWgTymga_Isskw7S4GcRAD9M0.roa (raw, json)
Hash identifier: CgDBE/rTJzJqZCjI0MLVGS9W87rqO8c1syMQLrN0gH8=
Subject key identifier: BC:3A:56:81:3C:A6:81:AF:C8:B2:C9:30:ED:2E:06:71:10:03:F4:CD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019239D319B3E4A8F1C5C8DEE2996EBAC8E3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vDpWgTymga_Isskw7S4GcRAD9M0.roa
Signing time: Sat 28 Sep 2024 18:09:48 +0000
ROA not before: Sat 28 Sep 2024 18:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209078
IP address blocks: 185.210.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 15:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:d3:19:b3:e4:a8:f1:c5:c8:de:e2:99:6e:ba:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 28 18:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc3a56813ca681afc8b2c930ed2e06711003f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:8c:ea:0e:fa:28:c5:4b:a6:01:23:8d:cf:
6d:88:58:d9:9d:27:fe:8e:40:c1:be:8d:b3:fb:43:
a6:42:bc:74:1b:c0:f2:cb:e5:a8:0d:30:a7:dc:4b:
90:23:93:2f:2a:9e:20:6c:73:7b:8d:34:bf:b4:bf:
82:06:33:09:c7:45:d7:a7:52:60:2c:7f:da:33:93:
90:cf:81:4b:4a:ee:12:a6:93:68:77:73:17:60:72:
29:03:78:ae:ae:61:51:0e:95:00:5d:43:7f:3b:0f:
87:59:90:24:ea:f6:d6:c8:4b:7f:d0:7d:b5:d8:13:
94:e0:ee:9b:28:7e:56:7c:43:56:bd:7d:20:fe:b0:
d2:21:72:9c:5c:7c:3f:44:2b:c6:34:e3:d2:00:53:
fb:aa:07:23:67:6c:60:0f:2e:90:e6:c1:d2:e1:bc:
7f:83:f8:66:24:05:1d:44:69:89:e8:76:fc:7f:4f:
83:46:fa:9e:6d:7b:fa:e8:69:c5:c6:1c:d5:c8:da:
69:fc:48:96:76:87:ba:44:b0:0c:19:b1:de:5d:cf:
13:73:59:4d:eb:ed:09:30:40:4b:7f:0d:d8:8a:19:
c3:4b:e4:ef:7a:0e:14:30:49:1d:e5:60:b6:bd:0f:
ed:5a:ae:6a:66:bf:e1:a0:d8:16:1e:dd:72:e4:7d:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3A:56:81:3C:A6:81:AF:C8:B2:C9:30:ED:2E:06:71:10:03:F4:CD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/vDpWgTymga_Isskw7S4GcRAD9M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.138.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2c:78:a1:82:1b:3d:fc:52:08:b0:09:b4:e1:fb:6a:c8:b6:
cc:fc:9d:62:41:68:f1:d7:02:ad:e4:bd:7e:59:dc:9d:e9:dc:
f4:62:1d:9a:41:59:1d:8e:ae:6c:a0:5d:19:1e:d5:4e:ae:85:
3d:04:38:dd:7b:ef:67:9f:a8:3d:62:2e:b5:20:d3:54:0d:b0:
85:f8:07:86:77:6a:cb:8f:28:b7:9f:fa:2b:18:d6:4c:37:65:
fc:f6:ff:da:15:e6:6d:49:b9:a0:64:08:72:27:26:79:a6:7c:
e8:3d:e3:41:43:05:2b:73:c9:7b:64:b9:99:4f:71:a7:9b:66:
d6:db:13:ae:3c:65:c7:8d:8c:8d:4d:71:f6:91:16:d5:fd:71:
eb:cb:3d:07:7c:d6:58:e8:66:41:0a:46:b8:da:41:16:c4:91:
1f:24:d0:20:71:c2:4d:df:78:5a:1a:90:6f:bd:a4:0a:bd:dd:
ea:4b:9e:31:92:e3:06:4a:cc:c7:e6:7d:97:7f:8a:2d:2c:2e:
50:b5:dc:b7:dc:4b:81:08:ff:64:fb:74:f6:a4:53:6a:eb:79:
c1:26:a0:92:98:8a:10:7a:97:8f:16:b1:22:30:19:2b:be:5b:
9d:f2:7c:78:45:a1:f7:c1:6e:35:31:6e:bc:78:89:41:6a:44:
55:aa:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 19:18:19 2024 by rpki-client on console-ams.rpki-client.org