Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EOsVzl1X9hUx5m9mxYhmOS0HzA4.roa
File: EOsVzl1X9hUx5m9mxYhmOS0HzA4.roa (raw, json)
Hash identifier: rnJ6aWoxzLrwCk3pphgqOIyqSC5tLTAUNLNRL05X+sE=
Subject key identifier: 10:EB:15:CE:5D:57:F6:15:31:E6:6F:66:C5:88:66:39:2D:07:CC:0E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018981F075AA58A3E3C8CC448365315B2EB0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EOsVzl1X9hUx5m9mxYhmOS0HzA4.roa
Signing time: Sun 23 Jul 2023 08:49:26 +0000
ROA not before: Sun 23 Jul 2023 08:49:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 185.209.39.0/24 maxlen: 24
185.209.72.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:f0:75:aa:58:a3:e3:c8:cc:44:83:65:31:5b:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 23 08:49:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10eb15ce5d57f61531e66f66c58866392d07cc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:a4:7a:84:59:7a:21:16:8c:48:9f:b0:65:
41:e8:68:c6:30:4a:a0:a0:a7:dd:21:21:34:c6:1b:
ac:18:30:d9:60:13:52:1a:90:05:90:8b:8d:81:d8:
ae:22:4d:6b:e6:b0:70:2f:c8:bb:bc:19:fb:7c:32:
6f:ad:5f:47:1b:e8:7e:de:6f:bc:04:6a:09:a3:78:
b3:de:dd:9e:9e:13:c8:61:4d:8b:fd:30:6e:a7:7b:
41:5a:9e:ef:aa:9a:58:20:b0:59:59:e7:a3:c7:b6:
d4:37:11:e4:84:25:b2:20:eb:25:91:e7:a5:dc:00:
2f:b9:2c:07:39:a0:9a:5a:7a:d2:51:3b:c6:15:0b:
4e:66:08:a3:ff:67:31:28:1b:e0:9a:ae:76:6b:55:
56:8f:c4:5b:cc:34:f3:e9:f9:5a:32:1e:3d:e4:b5:
7d:00:6b:5a:8e:54:9b:78:8c:f7:d7:13:21:0f:8a:
fc:e9:e1:49:6a:65:8e:aa:bb:d5:7c:d9:a8:c6:4e:
92:a4:00:45:3b:73:6e:68:63:b6:c2:d2:d1:e8:97:
4b:52:67:b7:f7:32:c4:3e:41:83:16:63:d9:49:8d:
94:19:a1:e1:a2:83:0a:5b:61:d8:a2:ed:5b:9e:f2:
46:d7:c3:71:7c:f0:18:18:e5:b5:8a:88:80:8d:2d:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:15:CE:5D:57:F6:15:31:E6:6F:66:C5:88:66:39:2D:07:CC:0E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EOsVzl1X9hUx5m9mxYhmOS0HzA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.39.0/24
185.209.72.0/24
185.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ef:fb:64:31:af:d0:68:5a:68:4c:a9:4a:4f:d9:4a:90:97:
85:84:06:d3:ea:b8:fd:42:03:e4:c9:f1:4e:ee:77:bb:e2:de:
3a:1a:06:74:9d:b7:d7:e8:b5:82:6b:81:74:2a:7a:0f:4f:d5:
ea:fb:c6:6b:33:bb:c4:b4:19:8c:42:93:6f:08:d9:2c:c0:3e:
fa:ba:a1:e1:0b:14:3b:e4:c6:b1:7a:14:43:75:50:70:91:d1:
3e:f4:6e:77:cc:50:2c:f9:a8:32:37:8c:f4:08:d4:ef:67:a4:
60:eb:64:25:3b:1c:9f:4b:04:89:c5:ce:ad:c9:be:13:85:52:
e2:5f:40:e7:50:68:e8:31:7a:b6:ae:05:88:30:b3:84:6b:2a:
18:94:a4:d5:d0:f8:b7:84:6b:09:b7:c1:36:15:57:da:0b:5a:
f0:91:3c:82:c3:71:48:0b:12:15:15:4b:70:00:fd:46:55:b1:
4f:b9:79:4d:8a:81:10:3f:b7:e5:1f:cd:07:ca:7a:bb:24:cc:
7f:99:a6:07:a9:d2:2c:61:1c:45:de:b2:87:df:50:71:12:02:
8c:8e:c7:fb:1c:81:fa:e8:5e:7e:1a:ff:42:fd:db:b0:a0:45:
cf:1f:31:a0:aa:ce:4d:7c:e1:b9:1f:5a:0f:50:82:b0:65:19:
d0:c4:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org