Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/eVeNNwNCfTbZ2sJa365UnO6cNDk.roa
File: eVeNNwNCfTbZ2sJa365UnO6cNDk.roa (raw, json)
Hash identifier: s69gumTkNDI6RdrXz6xCb3Dd7loFxN5qfHf6KHXLvy4=
Subject key identifier: 79:57:8D:37:03:42:7D:36:D9:DA:C2:5A:DF:AE:54:9C:EE:9C:34:39
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0192B57639BC02EBB92A2989D630092C4671
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/eVeNNwNCfTbZ2sJa365UnO6cNDk.roa
Signing time: Tue 22 Oct 2024 18:21:17 +0000
ROA not before: Tue 22 Oct 2024 18:21:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.129.16.0/24 maxlen: 24
185.129.17.0/24 maxlen: 24
2a0f:aac0::/48 maxlen: 48
2a0f:aac0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 13:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:76:39:bc:02:eb:b9:2a:29:89:d6:30:09:2c:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Oct 22 18:21:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79578d3703427d36d9dac25adfae549cee9c3439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:e5:43:c1:4f:f6:9a:79:3b:6b:81:ed:66:
f5:69:b8:e8:a0:56:34:42:29:7a:15:7b:c6:c2:51:
df:5e:eb:96:3d:a5:1a:7c:d0:34:29:ff:ce:0b:b7:
0d:bc:37:f8:c1:09:2d:1e:3e:27:4e:8b:f2:27:dc:
58:5a:15:e7:09:3c:b9:f8:7d:ac:b9:c7:7e:bd:2d:
35:28:a9:43:5d:ac:46:26:1e:80:3c:00:0b:61:fc:
0c:6d:8a:a0:f4:37:61:6c:fc:37:28:8d:f8:69:ea:
b1:d4:00:dd:b7:00:18:ae:06:97:51:82:a2:b4:a8:
88:5a:70:7a:ce:a3:d6:c9:95:bf:c8:cc:9c:8a:3d:
39:57:d7:7c:09:4e:3d:a9:f3:2a:a3:7e:da:0a:81:
4f:60:e1:12:28:f0:77:7a:2e:1a:cb:a3:b9:b0:94:
ad:f9:cb:c3:81:d5:32:5f:b2:50:da:e6:ec:5d:05:
2c:15:68:03:60:e5:34:59:ec:3f:71:8e:3b:c7:ea:
29:45:63:ff:db:44:9f:fe:46:b2:95:30:57:cb:5d:
7f:f8:18:2a:d0:6f:fa:d7:3b:3f:61:ea:65:32:7e:
1c:f2:fa:2d:2c:87:f5:08:f5:b2:c1:60:dc:aa:04:
f5:da:1a:22:0c:36:37:d9:27:0e:a5:f1:7b:53:c4:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:8D:37:03:42:7D:36:D9:DA:C2:5A:DF:AE:54:9C:EE:9C:34:39
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/eVeNNwNCfTbZ2sJa365UnO6cNDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.16.0/23
IPv6:
2a0f:aac0::/47
Signature Algorithm: sha256WithRSAEncryption
65:7c:4e:90:c2:2b:38:6f:df:63:44:e1:be:a0:f9:fa:6b:f7:
80:20:56:09:00:91:4c:42:fe:af:93:92:15:27:d3:95:c5:9f:
ca:b8:d4:1d:66:04:8d:21:b3:f6:a7:40:2c:2e:4f:8b:e5:d5:
2c:e4:98:26:d8:67:ca:63:a6:ea:27:ff:1b:a1:6c:1e:51:e7:
73:3a:15:11:57:5a:df:0b:1c:8f:52:d8:4c:53:34:e9:68:95:
f2:61:25:fb:30:f2:7b:10:fa:77:18:03:cb:52:f3:9d:ff:4e:
d8:75:ca:53:44:e6:72:71:30:66:83:ca:9a:31:e9:f1:f8:f7:
cf:6c:3f:bb:0d:af:27:a3:dc:8f:be:c2:76:46:fc:4f:8c:8d:
3c:fc:49:66:26:bb:19:42:0d:c9:7b:d4:ef:b5:e0:cb:79:0f:
fa:9c:5d:e5:c9:66:b5:09:21:e5:f2:23:45:c1:d5:3d:66:e1:
24:85:7f:07:b5:a8:e0:fc:e0:67:49:45:fa:f2:9b:4e:2e:cd:
c4:9c:28:81:1d:47:19:7f:e3:eb:64:d2:eb:f0:b4:11:b6:f6:
af:7e:0e:c0:90:bb:37:a4:22:9c:bc:0e:3e:f2:50:b3:87:a5:
09:9b:1c:bb:0b:10:f3:33:bd:e1:b5:7b:23:62:27:c1:1b:01:
73:5a:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:28:41 2024 by rpki-client on console-fra.rpki-client.org