Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EG71teya-hI4rC4_WD4nI3UXoFY.roa
File: EG71teya-hI4rC4_WD4nI3UXoFY.roa (raw, json)
Hash identifier: aMwAnz1w2pq+luLx8O01Qea3e7BkLgcPavZqLWZzBHE=
Subject key identifier: 10:6E:F5:B5:EC:9A:FA:12:38:AC:2E:3F:58:3E:27:23:75:17:A0:56
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DF46704E21B31A34F7BF893720B703F3B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EG71teya-hI4rC4_WD4nI3UXoFY.roa
Signing time: Thu 29 Feb 2024 10:26:48 +0000
ROA not before: Thu 29 Feb 2024 10:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 185.126.81.0/24 maxlen: 24
185.194.29.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 18:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:67:04:e2:1b:31:a3:4f:7b:f8:93:72:0b:70:3f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 29 10:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=106ef5b5ec9afa1238ac2e3f583e27237517a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:d4:db:37:70:c4:14:65:da:71:f0:2b:50:
8e:0a:1d:10:ba:5e:ba:b3:b1:3c:3e:90:64:b5:cd:
77:ef:6d:66:28:89:47:af:5f:0e:07:21:bc:ee:32:
92:14:04:9d:9c:5c:e2:ae:e8:51:84:41:ca:22:c7:
21:3d:c8:53:91:58:a7:ae:54:53:95:17:c6:a4:bb:
33:ef:58:2b:ef:e0:00:41:7c:a6:cd:8e:ab:e9:91:
e6:9b:e5:3e:2a:15:c8:20:72:54:7e:24:0c:43:58:
3d:7d:f9:05:98:93:3b:aa:af:b3:5a:05:1f:e7:25:
c6:7e:6a:93:42:d1:d3:99:b6:fe:86:d4:5a:f3:d7:
40:cc:75:e8:2c:28:a1:c1:81:78:f3:83:6f:d5:93:
ad:f3:a4:7e:93:98:07:28:c4:c7:be:7a:69:6e:e9:
2e:7f:8d:2b:33:3f:e5:a5:f3:d8:f3:0b:35:a8:fd:
45:27:cb:f9:9e:68:18:c7:22:4d:cc:54:e1:3b:15:
06:94:15:4c:bf:fe:9f:0b:08:78:3d:6b:7e:dd:00:
83:b8:18:dc:fc:da:ca:6b:7a:22:7d:84:57:67:59:
d1:56:6b:40:e8:df:64:10:78:d2:88:63:f3:ad:66:
a1:13:56:d5:c1:16:76:a4:0b:d8:b3:e4:b9:8f:01:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:F5:B5:EC:9A:FA:12:38:AC:2E:3F:58:3E:27:23:75:17:A0:56
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EG71teya-hI4rC4_WD4nI3UXoFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.81.0/24
185.194.29.0/24
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e3:ca:9e:31:58:31:5a:80:9b:4f:dd:a5:86:03:76:21:e3:
1e:c6:f1:39:e4:db:bc:c4:2d:ba:66:67:b5:2f:0d:87:34:96:
9a:e0:8b:8f:fd:0e:61:c5:83:ae:25:7a:68:bc:e7:5c:76:1b:
b4:d7:8b:60:e1:a1:e4:77:1e:7f:69:d3:27:e8:3d:67:76:47:
d6:53:05:d3:1e:07:e6:e4:73:3b:32:28:b3:c4:d1:81:ae:0c:
57:c2:f8:d8:61:31:6e:2f:a7:aa:3d:c3:80:58:de:7b:a5:30:
77:8a:f4:07:1b:13:dd:36:e3:ed:b0:90:bd:4a:55:6b:12:68:
a2:d0:9c:8f:b8:08:ea:09:73:f5:cc:a2:43:2a:77:02:d5:85:
80:9e:0e:a1:b0:e7:ad:14:af:cf:b3:2f:62:3c:42:4e:67:5f:
92:d2:41:85:75:28:97:cc:d0:7f:67:b1:d7:fc:ae:8b:37:6f:
df:3a:bf:01:7e:04:a4:01:a9:89:08:9a:c5:72:04:82:44:a5:
49:ae:46:f7:c9:9f:b6:86:5d:5d:b4:b3:9b:b3:2e:2d:8c:f0:
1b:17:cc:4b:a5:c3:dc:a4:71:38:85:9a:bb:0f:54:95:f2:fe:
a2:10:5b:db:bb:cc:87:a3:29:7a:c9:f3:53:14:8d:db:5a:41:
d7:02:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org