Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xeu2KE4SE1Sd25nmQFgGAT2nmr4.roa
File: Xeu2KE4SE1Sd25nmQFgGAT2nmr4.roa (raw, json)
Hash identifier: VhzO00H6nXPZgPIh88E5P0bjcdo8nA8ngDwUE0cmcMs=
Subject key identifier: 5D:EB:B6:28:4E:12:13:54:9D:DB:99:E6:40:58:06:01:3D:A7:9A:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028874A25A5BFAD1557857B1943B87
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xeu2KE4SE1Sd25nmQFgGAT2nmr4.roa
Signing time: Tue 02 Jan 2024 02:30:58 +0000
ROA not before: Tue 02 Jan 2024 02:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 185.126.83.0/24 maxlen: 24
185.228.73.0/24 maxlen: 24
176.125.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 11:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:88:74:a2:5a:5b:fa:d1:55:78:57:b1:94:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5debb6284e1213549ddb99e6405806013da79abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:c2:8f:04:d9:3d:96:15:50:0b:e4:96:ed:
b6:88:70:75:48:e5:52:f2:9e:51:61:fc:8a:1b:a6:
51:11:44:cf:5e:ae:f2:5f:05:e0:bf:dc:40:a7:91:
6b:47:03:47:de:36:e4:64:2e:1a:29:e3:d2:cf:f8:
97:e8:dc:62:41:72:8d:e5:ab:54:32:d0:dc:d5:18:
7b:4d:9d:a2:d2:12:3c:4d:2f:ad:55:36:36:8a:4a:
38:e8:e3:60:6d:9b:71:50:84:e3:62:0b:59:b5:13:
5d:ca:5e:81:e5:c0:cd:2e:9f:e0:ae:ce:9e:3b:39:
54:86:16:c5:59:d3:66:02:b2:89:cb:22:63:5e:ef:
7d:04:e5:d9:d7:53:c6:db:3d:75:6a:b1:c7:8e:a9:
ce:bc:56:fc:b3:8c:d7:34:46:cf:c1:90:a5:13:6c:
5b:56:87:56:e6:9d:4d:7d:1a:dd:8f:13:0b:5f:96:
a1:82:de:10:bf:a4:4d:38:5b:96:35:6b:c5:51:61:
ee:78:65:a2:a5:ec:3e:fa:61:f2:7a:8c:81:0e:77:
c3:5e:8c:a6:5b:3e:c5:5e:23:ef:6c:d8:ff:44:3b:
94:1f:27:d2:fc:13:11:99:57:c3:9e:8d:18:12:97:
20:b3:53:b5:8d:b2:de:50:0c:90:7f:62:1d:fe:a3:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EB:B6:28:4E:12:13:54:9D:DB:99:E6:40:58:06:01:3D:A7:9A:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Xeu2KE4SE1Sd25nmQFgGAT2nmr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.249.0/24
185.126.83.0/24
185.228.73.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2c:9d:66:5c:74:c1:5a:c8:72:47:d9:9c:a4:22:82:2d:fb:
81:2a:3e:b3:a5:de:58:e0:26:9f:78:7e:f5:d8:78:95:05:d6:
86:e7:76:99:7b:d9:b2:70:e2:9a:0a:80:68:35:c7:46:af:f1:
11:c4:6a:e5:4e:eb:c5:18:7d:77:62:d6:10:f8:91:b2:bc:22:
88:55:d0:d6:01:bc:49:d1:48:4c:34:8a:f6:71:f2:43:14:09:
c1:86:b3:18:c0:a2:a7:77:97:a6:c9:e0:a4:7b:61:05:07:33:
b5:d4:f9:39:70:6c:89:b5:00:01:d2:77:85:92:0a:74:1c:5c:
42:df:dc:c1:bb:54:a9:42:06:03:d2:f2:3c:c4:7c:7a:1a:8f:
b2:04:fc:75:ff:f9:04:3a:f5:cb:a7:7a:33:0f:17:54:a9:05:
08:9f:09:2d:ba:7e:78:60:a4:b4:be:f6:8b:e0:2a:38:fa:7a:
06:29:a7:e2:da:ba:08:ba:90:e9:45:e7:93:f7:55:9d:9a:0a:
e4:6d:24:4d:86:c4:6a:14:14:f7:17:0a:c1:0e:94:9e:c7:00:
4b:d9:48:5c:33:3d:ff:c8:4e:0a:94:2f:65:1d:fc:c6:d7:71:
5a:b0:93:a8:45:69:2e:17:86:79:82:89:77:2d:26:6a:a4:6c:
cf:53:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org