Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ej9a5PKRdnFGE82HPE4bVdrqkOA.roa
File: ej9a5PKRdnFGE82HPE4bVdrqkOA.roa (raw, json)
Hash identifier: WOKcFcDW8DEHYgxRTZN6RI52DTioszAI69/Bg9w3K6w=
Subject key identifier: 7A:3F:5A:E4:F2:91:76:71:46:13:CD:87:3C:4E:1B:55:DA:EA:90:E0
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 018571F0E4A43F122A88D21176EB51C2A53A
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ej9a5PKRdnFGE82HPE4bVdrqkOA.roa
Signing time: Mon 02 Jan 2023 10:04:50 +0000
ROA not before: Mon 02 Jan 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3302
IP address blocks: 185.169.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:e4:a4:3f:12:2a:88:d2:11:76:eb:51:c2:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Jan 2 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3f5ae4f29176714613cd873c4e1b55daea90e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:07:6c:63:90:d7:ed:f6:f1:5e:6b:23:d6:
72:9f:14:f1:96:06:87:99:02:fc:e5:62:89:11:ab:
72:e4:5b:92:09:da:db:96:95:da:2f:54:29:01:8e:
c6:ae:95:c1:e9:91:ad:1e:e6:71:87:fe:73:1d:f1:
ed:c2:20:d3:97:cc:5d:7f:1c:59:78:e7:37:43:f3:
18:e4:68:bf:d1:f5:22:93:72:94:a9:3d:ce:20:ce:
28:1a:31:2f:28:bb:52:b5:6a:1a:e6:24:9e:ac:fe:
5f:5d:2b:27:c1:e7:6e:f1:b6:9a:5b:f6:70:53:53:
50:e1:69:25:00:fe:75:42:e6:45:5b:5d:b1:e5:6a:
e8:f9:da:cb:de:ad:a1:20:94:05:3b:36:55:88:4a:
fd:12:e5:45:56:50:69:96:9c:2a:41:08:88:f7:f0:
02:ab:05:27:92:d5:cb:b0:d9:b9:69:77:ab:cb:06:
bd:38:4f:75:dd:28:d3:72:fc:0b:46:46:96:d7:72:
fd:a1:0c:ba:ef:f6:46:b7:6c:5a:cb:49:b9:1b:13:
43:9a:54:ba:dc:3d:c5:e4:64:94:f5:95:93:a6:f7:
69:b0:8a:82:d2:a6:5b:80:f7:27:d1:fd:2f:98:05:
25:df:8a:ac:a5:de:5c:40:3c:13:83:d0:00:10:98:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:5A:E4:F2:91:76:71:46:13:CD:87:3C:4E:1B:55:DA:EA:90:E0
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ej9a5PKRdnFGE82HPE4bVdrqkOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.176.0/22
Signature Algorithm: sha256WithRSAEncryption
26:7b:f6:ee:33:70:e6:00:ee:85:db:1f:24:75:6f:d4:06:6c:
ba:8f:24:48:41:d4:76:db:32:e3:0a:ba:e0:3a:9c:c9:20:6b:
b2:8f:9e:67:5d:6e:23:cd:9e:51:76:1e:51:2c:f7:65:63:80:
41:db:bf:a3:a0:c6:99:f6:d8:89:a8:83:54:24:78:16:68:f2:
a2:1c:bf:14:67:47:f7:be:28:94:24:39:92:32:32:b7:99:74:
8e:ac:bf:1d:1e:05:29:3d:fd:dc:ed:d5:62:f7:f5:32:da:c1:
35:34:a3:74:e7:8a:ad:de:3a:f9:fc:8e:a2:a2:2c:ee:9e:59:
93:0b:54:4d:53:ea:4b:76:64:d6:30:af:88:9b:7d:c0:3b:cf:
78:2d:e7:a0:17:05:36:86:42:3d:17:09:25:30:9f:ec:02:2c:
78:9f:3b:59:25:12:b5:72:03:7d:73:a8:02:32:7f:8d:95:d5:
d7:26:66:75:ea:22:e8:b7:7a:1e:ac:2e:bb:8f:68:15:55:68:
80:0f:f8:98:0e:be:22:ff:44:92:3b:c8:12:cd:63:8d:3f:31:
60:16:2e:20:a4:cc:d5:af:60:36:be:b0:73:eb:08:50:98:26:
16:5c:fe:31:b4:cd:66:2a:a8:b4:f9:e4:57:8b:ff:fd:7d:4f:
68:e5:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org