Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E4inpybWtxpj2RZGf7avyvoJSzQ.roa
File: E4inpybWtxpj2RZGf7avyvoJSzQ.roa (raw, json)
Hash identifier: AryNoDmHkjK9gKt2hzBFvkLAdgmB8cKCEGj3qT4bHbs=
Subject key identifier: 13:88:A7:A7:26:D6:B7:1A:63:D9:16:46:7F:B6:AF:CA:FA:09:4B:34
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0189876A22086939158F493512C76B441E04
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E4inpybWtxpj2RZGf7avyvoJSzQ.roa
Signing time: Mon 24 Jul 2023 10:20:26 +0000
ROA not before: Mon 24 Jul 2023 10:20:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197649
IP address blocks: 185.214.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 08:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:6a:22:08:69:39:15:8f:49:35:12:c7:6b:44:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 24 10:20:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1388a7a726d6b71a63d916467fb6afcafa094b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:f3:21:c8:b0:8c:bd:30:24:76:9b:95:75:
45:6f:6d:ae:4c:18:f7:58:c1:36:04:e8:fd:7b:64:
fb:34:fc:ba:ae:29:4b:e5:f1:4e:b8:7c:bf:06:83:
9a:48:09:46:c9:ca:a8:4d:18:55:7a:8b:e4:a5:a8:
21:8c:3a:9d:9c:5a:70:4b:0f:c8:b1:78:85:37:04:
62:b3:d3:4c:0a:f4:93:de:81:7c:04:bf:ed:91:ce:
b6:63:cb:cf:0a:1f:a5:e0:5b:a7:12:16:69:95:1c:
2a:44:98:53:40:54:56:98:01:b6:74:fb:36:78:bd:
9b:f8:d0:48:b5:ec:c3:d6:3d:6e:b4:87:18:9f:0e:
9e:fc:38:ad:bd:c7:6e:df:e2:c9:37:a5:1e:6f:88:
d5:11:03:ae:c8:14:b1:e6:f5:e2:14:76:eb:77:3d:
eb:66:ad:1a:c8:4e:47:aa:34:fc:b9:f7:bf:ef:e8:
fe:29:fd:cb:e9:1d:b7:18:90:2b:ec:14:6f:30:22:
02:d1:03:fd:80:17:41:90:bd:a6:ab:bb:3c:8b:c9:
ca:b3:68:a8:48:f4:83:90:19:97:51:99:a2:a1:ae:
96:52:dd:1c:6c:bd:2c:f1:29:1d:9c:87:31:94:8e:
ef:57:38:2a:72:d5:00:d5:9b:95:d0:35:0e:b1:82:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:A7:A7:26:D6:B7:1A:63:D9:16:46:7F:B6:AF:CA:FA:09:4B:34
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E4inpybWtxpj2RZGf7avyvoJSzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
83:19:5a:a5:25:b6:18:39:60:02:bc:2a:d4:91:e5:50:f9:a9:
c2:83:dc:7b:f0:dd:25:b2:cb:ea:df:5b:73:75:11:fd:b6:f4:
8f:03:4a:1b:0c:7d:a1:ba:07:22:64:29:54:a8:43:9d:03:17:
3d:de:62:94:8b:96:a6:fa:00:c5:9b:b2:4e:29:2d:2e:1a:91:
cf:07:e7:4f:19:fb:d9:34:73:42:7f:d1:4e:5f:9a:f0:39:71:
b6:e9:d7:d5:af:0d:e8:1c:02:8d:d8:fc:70:62:2b:aa:95:b4:
15:ac:0b:c5:d5:ec:e6:c9:ac:c4:44:36:3a:89:8d:45:73:4b:
3d:ab:65:9d:95:e7:cf:5e:6e:65:59:12:b3:23:91:19:cd:a2:
c5:41:f2:73:33:f9:74:4e:b9:eb:51:03:9e:54:97:05:5d:b0:
46:00:e6:63:47:89:59:c1:10:4d:fd:e7:b4:36:e3:04:83:2f:
41:d9:e5:3d:ed:58:5d:fd:a9:c1:84:4c:be:4a:18:82:96:06:
7d:66:08:39:12:d1:de:28:f0:4e:56:88:8a:0a:d1:31:08:ac:
91:a2:db:a2:11:cb:78:a5:3b:52:e9:1d:2f:f1:9c:62:37:86:
38:2b:03:fb:47:79:7e:88:2a:c4:bf:55:d9:f6:4d:d6:6e:24:
5d:f6:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org