Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E9IlENYZOTmV-gVNmyWA9deDhgw.roa
File: E9IlENYZOTmV-gVNmyWA9deDhgw.roa (raw, json)
Hash identifier: HkX1koGnIqXLf389NBWpBtkECJhvvt0KNHLZY9W+j0U=
Subject key identifier: 13:D2:25:10:D6:19:39:39:95:FA:05:4D:9B:25:80:F5:D7:83:86:0C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B637EAC6F9FB9F2C144034ED2043C8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E9IlENYZOTmV-gVNmyWA9deDhgw.roa
Signing time: Mon 02 Jan 2023 09:00:45 +0000
ROA not before: Mon 02 Jan 2023 09:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 185.223.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:37:ea:c6:f9:fb:9f:2c:14:40:34:ed:20:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d22510d619393995fa054d9b2580f5d783860c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:70:d9:e4:af:fb:64:52:2d:fe:d2:39:c7:
8c:af:b6:3e:e8:90:ba:db:58:cb:3b:fa:ec:5f:41:
2a:58:30:9b:60:7a:70:1c:3c:33:91:fc:a0:db:9a:
c7:ad:06:fa:29:78:68:46:51:22:95:6d:c9:f8:55:
0d:0d:e9:76:43:3b:b1:d9:d0:ef:d7:08:fe:58:29:
bc:42:d5:70:dc:96:38:9b:31:76:75:f1:70:aa:3c:
db:7a:06:47:a0:31:5a:d0:fb:6e:50:fb:c6:46:24:
62:dc:89:dc:c8:fb:cf:74:ec:be:29:e1:b3:66:6c:
3c:62:17:9e:f1:17:da:fd:1c:2c:23:e0:20:d3:3e:
35:82:31:c7:88:b1:2f:3b:83:3a:1d:a3:79:43:97:
3e:88:36:d5:00:9a:59:69:7c:75:e7:30:d2:0f:8e:
86:f7:ad:0c:2f:da:9d:bb:b3:ad:3c:23:6b:89:f2:
6c:3e:73:f9:4d:0b:04:54:7c:c8:ea:1f:06:a3:9d:
1f:86:07:0d:ec:28:4f:1c:64:ff:49:9d:e0:e9:22:
cb:06:95:46:2e:f5:72:bc:2c:c3:bb:b7:de:18:05:
a2:db:29:46:27:8b:6f:aa:8b:4c:9a:dc:a4:62:16:
48:50:c0:1a:bc:5b:c4:26:1d:e7:2f:db:9c:c7:e9:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:25:10:D6:19:39:39:95:FA:05:4D:9B:25:80:F5:D7:83:86:0C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E9IlENYZOTmV-gVNmyWA9deDhgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:41:fb:eb:75:16:f4:c4:7b:ca:33:eb:85:af:a2:be:02:58:
b2:2c:31:76:e0:48:4b:aa:47:ff:cb:55:68:df:08:d9:74:11:
f0:3d:08:d0:c1:d9:52:87:4d:58:88:6f:c2:43:4e:ea:c2:e4:
81:bb:05:95:23:80:bf:6d:3e:55:39:b6:95:bf:84:8c:85:02:
6e:d1:da:be:2c:37:11:9d:8f:07:28:f9:33:7b:95:d8:8e:ef:
13:d3:31:f4:aa:f7:b8:c5:8a:1b:3d:3a:29:df:e5:6a:cb:85:
10:02:8c:c5:16:5d:1a:76:12:7d:a9:c6:b7:fa:b1:68:10:4b:
3c:dc:c0:45:4f:0d:5d:e5:cb:2d:d0:90:a2:7e:9d:22:2e:26:
af:01:5c:40:89:4c:c8:76:16:bb:80:fd:43:a0:82:71:f6:15:
bc:0b:fa:48:70:4b:ee:5b:24:1d:df:72:53:9d:2c:71:d0:bf:
82:da:84:45:45:df:84:74:a6:ec:c4:f3:0f:fb:77:fd:9b:ad:
2c:e1:e3:c6:9b:8a:8b:bc:cc:95:78:c1:67:69:ad:fc:f8:b9:
29:f7:b5:6e:6a:c9:71:61:45:66:1d:83:a8:a3:10:0e:89:36:
3c:e0:50:62:3c:34:d7:11:5a:13:db:06:83:85:d6:0e:98:c7:
c9:72:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org