Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/yGO41-feDlLWnq2Rkjb8I5P2xU8.roa
File: yGO41-feDlLWnq2Rkjb8I5P2xU8.roa (raw, json)
Hash identifier: Om0f40WJqY2B7vLCGZ3alMHkV5eaOMpN0Y3WWA79W8w=
Subject key identifier: C8:63:B8:D7:E7:DE:0E:52:D6:9E:AD:91:92:36:FC:23:93:F6:C5:4F
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 0192901694C86689A692DCFE3790FF4AAC46
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/yGO41-feDlLWnq2Rkjb8I5P2xU8.roa
Signing time: Tue 15 Oct 2024 12:10:51 +0000
ROA not before: Tue 15 Oct 2024 12:10:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215202
IP address blocks: 185.138.214.0/23 maxlen: 23
185.138.214.0/24 maxlen: 24
185.138.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 15:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:16:94:c8:66:89:a6:92:dc:fe:37:90:ff:4a:ac:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Oct 15 12:10:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c863b8d7e7de0e52d69ead919236fc2393f6c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:66:81:fb:de:d0:ba:64:a4:41:10:d4:b0:
a7:57:2e:67:57:71:99:9a:a1:64:c4:80:6c:f5:fc:
59:88:0f:ee:88:62:aa:0e:62:41:26:1d:03:c1:a4:
35:8a:df:09:33:23:38:12:b5:62:93:9c:9a:85:9e:
66:94:3b:35:05:1a:8c:e0:11:d3:6f:94:ca:da:80:
d1:b9:d9:c2:46:ed:b0:62:0e:31:4f:bb:4d:d4:c6:
7f:5e:11:76:5e:11:b5:5b:5c:56:4b:2a:01:b2:c2:
1a:3e:ff:4c:b0:6b:96:9f:12:60:26:13:60:40:e2:
5b:30:5f:7e:2a:82:98:c2:a7:a5:94:09:24:b7:7f:
45:5d:a1:dd:32:3c:68:4e:aa:cd:25:2d:ce:d3:32:
b6:50:50:72:1c:e2:19:70:a2:db:d9:41:a3:39:ad:
38:42:64:77:7e:fa:a1:a6:35:fc:2c:96:1f:79:80:
52:66:24:81:f6:aa:34:9c:e5:ba:7c:b8:c4:2a:0a:
31:1b:ca:20:63:37:bb:e7:b1:e2:bf:c8:df:8b:fa:
7d:fa:be:5e:fb:02:55:95:da:6d:46:95:c8:8d:d5:
d7:72:dc:ee:29:c2:0d:a4:a7:92:f3:a0:3c:a7:17:
37:78:02:82:51:1b:7f:e2:19:67:fc:ce:00:bd:7e:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:B8:D7:E7:DE:0E:52:D6:9E:AD:91:92:36:FC:23:93:F6:C5:4F
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/yGO41-feDlLWnq2Rkjb8I5P2xU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.214.0/23
Signature Algorithm: sha256WithRSAEncryption
89:0b:a3:2e:18:40:f3:d9:37:ca:cf:d8:36:e1:9d:3c:a3:f0:
3e:92:f0:2c:48:a1:24:23:e9:0f:8b:0a:95:b8:7d:e6:c7:d5:
ce:dd:0a:0f:50:8b:1e:9f:98:e6:91:84:42:18:23:d6:ce:0d:
73:c5:b9:5f:47:23:da:15:6a:92:93:22:8c:de:a6:01:3d:7d:
52:2d:68:69:e9:4c:b0:76:74:42:b7:1a:62:6f:0e:ab:72:f9:
0c:db:64:9a:51:5d:4b:93:11:b1:b8:1a:d7:ae:2c:7e:ec:68:
89:8f:1e:c0:47:53:41:83:d9:1a:28:46:71:fc:b7:c7:b9:23:
2f:04:04:cc:e1:15:9f:1f:3f:0b:54:ff:16:ed:8a:73:f8:ba:
40:ed:6d:f1:37:54:75:de:a5:92:88:a9:dd:cf:55:be:47:51:
1f:fa:fa:e1:c7:73:85:0a:9c:95:3e:4f:38:0e:cb:74:da:98:
a1:58:d5:ca:a4:22:5b:c2:6b:c1:98:72:13:79:0b:03:f9:32:
66:5c:ef:87:c1:82:ce:d7:9b:a5:cc:2f:7e:82:f4:57:c3:91:
68:27:1e:cb:31:2f:0f:7f:a4:87:27:01:fa:a2:fe:4b:fc:85:
16:d8:2f:cb:18:d1:09:91:c3:24:a3:36:e2:34:3d:61:18:43:
34:ca:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:51 2024 by rpki-client on console-ams.rpki-client.org