Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E9hUbH9sJfLn7e2AtsMaGp_FdVc.roa
File: E9hUbH9sJfLn7e2AtsMaGp_FdVc.roa (raw, json)
Hash identifier: TSrPaDp2J64YnYzqM16mnRLxO8+lW5pBFd1RoYvige4=
Subject key identifier: 13:D8:54:6C:7F:6C:25:F2:E7:ED:ED:80:B6:C3:1A:1A:9F:C5:75:57
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01856F7973657C1B216C37CAD72F355C9402
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E9hUbH9sJfLn7e2AtsMaGp_FdVc.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.237.81.0/24 maxlen: 24
185.237.80.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
194.145.137.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.86.82.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
185.254.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 23:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:73:65:7c:1b:21:6c:37:ca:d7:2f:35:5c:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d8546c7f6c25f2e7eded80b6c31a1a9fc57557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:83:f3:c6:90:de:41:24:c2:ed:73:36:c3:
48:80:97:72:fb:cf:5c:9c:bc:74:66:54:3f:d5:70:
04:ff:46:ed:84:a0:c5:d7:2d:6d:45:88:88:32:84:
75:cf:d0:5c:09:4c:21:cc:72:1f:72:c9:27:bf:e0:
8b:a4:2f:fa:f7:42:5b:6e:a3:d3:c3:bc:f3:38:32:
43:f5:b2:7a:bb:23:c4:33:0b:3e:b0:ca:99:4a:84:
96:9c:c2:0d:bf:c7:90:bc:ce:39:fb:3d:18:bf:59:
43:76:77:63:30:76:1a:bc:e0:2f:28:e1:ce:c7:0a:
04:2d:6b:98:f3:ff:b1:7c:4e:20:cb:3f:d9:0c:d6:
10:7a:3e:b5:96:c1:5c:e5:95:17:5e:8e:b7:00:be:
d1:4c:57:0f:b2:4e:c4:9e:a8:c6:81:1b:be:95:6e:
2a:76:2b:92:63:6c:64:a5:92:49:be:5a:24:ff:a4:
8c:8a:e7:f8:2c:0e:0e:1b:d2:38:11:01:14:26:be:
7c:13:75:4a:e1:e0:b0:f2:30:e0:08:e8:3e:76:59:
83:43:47:36:ba:05:bd:30:cc:02:f5:43:37:1e:17:
9d:9d:d8:e1:6e:59:93:d4:dc:40:b4:76:4c:90:39:
cd:01:4b:ed:cc:10:b9:19:d3:1b:44:e5:22:f9:7c:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:54:6C:7F:6C:25:F2:E7:ED:ED:80:B6:C3:1A:1A:9F:C5:75:57
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/E9hUbH9sJfLn7e2AtsMaGp_FdVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/24
185.205.16.0/24
185.205.18.0/24
185.237.80.0/23
185.254.93.0/24
185.254.95.0/24
193.36.62.0/24
194.145.136.0/23
Signature Algorithm: sha256WithRSAEncryption
56:67:19:41:ed:83:ee:ba:4d:31:8e:77:e0:fd:1e:94:7e:36:
32:d7:07:ce:38:31:be:c1:f6:07:8e:b6:43:9e:e4:16:50:48:
b7:68:04:f4:38:a9:bd:e4:4e:ca:f8:0b:e4:38:ff:44:92:19:
0f:f7:33:cf:7d:39:80:3a:d9:26:2c:2d:7e:04:24:6e:da:eb:
1e:47:ad:c4:cf:fd:ce:bf:e6:55:97:30:67:7a:8c:f2:96:28:
59:61:37:09:98:9f:85:6b:40:fa:92:20:1d:fe:02:f2:ad:0b:
a2:d5:a2:bb:a8:2b:b5:fe:9e:4b:ba:b6:6b:54:8e:a9:7b:83:
ed:48:52:14:b3:86:54:e0:0d:73:bb:29:e7:9e:cf:26:c1:76:
a4:39:31:90:d2:59:cf:d3:c4:77:fe:80:63:35:06:3f:f4:d3:
53:7a:1a:b9:e0:20:ec:fc:4f:c0:90:dd:c3:32:86:d7:ea:6c:
00:32:20:32:32:bc:2c:84:1d:62:a3:16:a2:8a:1d:17:dd:55:
d3:b0:dc:1f:b5:71:22:b6:e6:21:86:ef:f2:20:4e:27:fd:67:
cc:61:75:1f:70:4c:d8:0a:ab:6e:c1:40:eb:f6:61:7d:03:9f:
04:7c:17:93:b1:20:31:3f:ac:fe:9d:9a:80:80:c6:d4:e1:f6:
c2:df:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org