Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EqT5f2edxR5qfTr78d3xWLJ5S80.roa
File: EqT5f2edxR5qfTr78d3xWLJ5S80.roa (raw, json)
Hash identifier: LcStGokmQCN+5tEQBMwWJeb5GI1luahotYM7ioGDlJc=
Subject key identifier: 12:A4:F9:7F:67:9D:C5:1E:6A:7D:3A:FB:F1:DD:F1:58:B2:79:4B:CD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191F5304C688E97EC3CCB94D87FFC687A66
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EqT5f2edxR5qfTr78d3xWLJ5S80.roa
Signing time: Sun 15 Sep 2024 10:17:48 +0000
ROA not before: Sun 15 Sep 2024 10:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 185.218.101.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 10:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:30:4c:68:8e:97:ec:3c:cb:94:d8:7f:fc:68:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 15 10:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12a4f97f679dc51e6a7d3afbf1ddf158b2794bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:0d:37:33:a9:63:6e:7a:86:86:eb:71:7f:
3a:7d:90:d3:cf:a5:94:ee:83:41:cf:8f:a8:77:9f:
d5:66:66:64:8a:c6:30:35:f0:95:2e:04:8c:d5:11:
06:6c:13:70:fe:7f:e3:95:37:40:5b:32:70:8c:ec:
e0:90:2b:aa:27:8a:6d:a3:ca:e9:34:22:35:91:bb:
ef:01:4d:9b:a7:00:c4:d5:7e:33:c5:87:1a:fc:c6:
d7:84:6b:42:9a:b6:20:c7:b4:9c:e8:c8:1f:ba:b8:
bf:4d:6b:57:44:12:dc:ce:82:16:6e:5e:5d:d4:cb:
2e:2c:20:75:44:ec:a1:cb:fd:cb:4a:27:79:b7:ed:
53:59:c6:75:74:6c:b7:3b:bc:2b:5d:84:5a:4b:0d:
3b:5d:f6:58:a0:88:9f:ad:b3:87:d2:3d:49:4d:ea:
c1:33:18:f6:21:49:5c:39:4f:92:79:a0:a0:9f:9f:
fe:13:82:1e:71:0d:15:59:a9:15:77:78:d2:10:6b:
82:eb:bb:b2:b5:3b:7c:90:ac:c7:93:af:50:dc:16:
21:4c:18:d0:f7:55:73:6d:91:d8:2c:81:0f:d4:a3:
ae:2f:e0:0d:e8:a9:89:e4:b7:91:b5:6e:74:be:b9:
3f:09:c2:c5:f4:8f:d2:83:ba:fd:69:15:8e:47:61:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:F9:7F:67:9D:C5:1E:6A:7D:3A:FB:F1:DD:F1:58:B2:79:4B:CD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EqT5f2edxR5qfTr78d3xWLJ5S80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.101.0/24
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f2:25:65:b0:1e:d8:89:cc:e3:2b:13:87:16:72:12:0b:85:
b4:1e:a0:7e:b9:26:4c:e3:d5:df:e5:8d:1c:07:1b:ca:ea:f6:
4c:da:e6:c8:2a:4e:5a:04:04:f4:8e:9a:0a:f4:82:c7:b8:f6:
ff:a8:ed:58:a1:98:53:33:05:2d:22:22:90:47:29:89:63:a0:
30:b3:4b:16:df:06:5b:4e:26:17:9f:6a:e3:38:e6:ed:54:5b:
25:4f:b6:8f:56:e6:90:c6:b4:06:98:2e:3f:c3:a4:64:be:8f:
95:21:75:7d:43:56:c8:e2:b9:54:6a:75:ae:b5:e4:04:33:07:
83:9b:f0:cd:55:63:b9:82:b8:15:3c:a3:3b:d2:f8:04:a6:4f:
bd:ba:af:49:7d:4c:61:d9:ef:7e:e5:e9:9b:62:68:fe:e8:6b:
9e:aa:39:38:51:ca:19:70:c5:72:fa:57:b0:e0:ab:33:15:b0:
fb:5d:79:e0:21:f3:d0:9b:a2:2a:59:dd:2d:38:c1:80:73:70:
85:7d:2c:b0:40:ac:85:e0:b8:2b:17:f4:56:f8:74:33:49:30:
15:eb:58:36:45:4c:50:fe:d7:04:06:81:84:65:f6:96:ce:6f:
8b:39:ff:0c:83:60:a6:eb:50:6e:05:5a:19:d5:70:55:d6:da:
6c:11:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 13:34:14 2024 by rpki-client on console-ams.rpki-client.org