Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_2-SlEGmx3kVWwdU5NfSunhJuBc.roa
File: _2-SlEGmx3kVWwdU5NfSunhJuBc.roa (raw, json)
Hash identifier: Iemgq+Lz7BGij6R9n/V3f1BEcB07rAmEQ1+ah/TwSVE=
Subject key identifier: FF:6F:92:94:41:A6:C7:79:15:5B:07:54:E4:D7:D2:BA:78:49:B8:17
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C306CD2F1F453988A0435C17F005D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_2-SlEGmx3kVWwdU5NfSunhJuBc.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203106
IP address blocks: 185.128.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:30:6c:d2:f1:f4:53:98:8a:04:35:c1:7f:00:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff6f929441a6c779155b0754e4d7d2ba7849b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:19:71:ae:7e:5f:55:d5:17:c6:54:c0:6b:
47:52:fb:5c:49:7e:3b:8e:7d:4d:09:6d:31:5e:32:
02:c5:1b:60:a6:c6:4c:c3:90:d8:6f:2e:50:46:ae:
88:62:c9:79:f8:bc:e1:c4:e6:2f:99:c4:da:6f:a2:
68:77:d3:ed:32:44:2b:09:b7:ab:d4:6d:81:92:e1:
a6:82:74:52:6e:4e:29:a2:24:f2:36:03:c2:b6:23:
46:ce:8e:f8:e4:88:49:df:4e:56:e7:d4:82:f1:13:
50:87:6f:9c:fc:79:28:53:36:a1:ba:7d:bb:4d:9c:
1e:97:38:a3:11:7c:98:37:33:23:07:da:8f:7f:71:
46:b5:48:b8:da:03:ae:1f:9f:9d:f9:c6:df:87:52:
ee:cb:13:55:d6:c2:e1:58:a0:58:05:55:5c:de:c6:
1e:a0:3c:ad:60:34:2f:57:3a:12:c7:6b:64:fe:35:
2c:02:6e:cc:cc:3b:c1:ad:c5:a0:6c:b3:05:12:a1:
b5:7a:fe:f6:34:11:2e:e4:c2:1c:19:6a:88:5e:b3:
cf:04:b2:92:07:5d:18:73:c9:ec:a1:4d:c1:94:4e:
19:bf:c0:ef:95:39:05:0e:9c:a9:21:d4:f9:be:85:
7e:45:e7:10:f4:83:bc:23:0a:50:74:6f:34:70:a8:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:92:94:41:A6:C7:79:15:5B:07:54:E4:D7:D2:BA:78:49:B8:17
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_2-SlEGmx3kVWwdU5NfSunhJuBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.104.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d6:63:9c:7f:68:37:69:5a:16:06:7f:e2:95:ef:fb:6a:2d:
38:7f:96:ca:6e:4a:7f:dd:14:af:fe:e4:f4:29:84:cc:df:a6:
6c:b5:7b:fc:65:9c:46:57:05:9a:97:ae:7a:76:65:28:b7:84:
9d:0c:48:cf:93:f8:a0:5a:b5:d9:54:88:ed:62:69:27:9d:d8:
c4:15:70:4a:84:d1:17:ba:f2:24:2b:7d:08:13:9b:39:30:58:
91:8f:57:1e:27:23:d1:73:af:2c:c1:a1:86:ee:88:4a:43:a7:
5c:0b:1d:3b:5f:71:a6:7b:35:bb:35:87:c4:c4:e6:44:10:2d:
dd:55:cc:be:7b:1e:9b:3e:af:50:96:ec:ab:53:f8:1b:80:e8:
37:1d:4b:02:29:13:1e:29:f0:30:8d:ea:a3:41:fc:97:f8:c8:
91:c4:ff:fd:51:46:16:28:bb:ca:87:86:10:a3:4f:f2:19:c8:
3e:64:83:f7:0c:89:a5:f8:53:a3:46:ce:8d:8a:af:a3:6f:cf:
2a:8a:3c:ec:e1:a6:39:97:cc:8a:bc:f9:0b:71:2a:7f:b7:be:
48:a8:63:28:0c:bc:29:58:dc:c5:fb:b0:87:8a:02:da:2a:50:
f1:c2:af:bd:04:d3:ad:eb:62:17:c7:98:53:b6:e3:76:76:72:
09:10:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org