Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/jL-e4uxlZIw5nUy4yXYxKlWNz0s.roa
File: jL-e4uxlZIw5nUy4yXYxKlWNz0s.roa (raw, json)
Hash identifier: 4pjSbQZqzmm6LqFwjekQFD+xotIA5ysoHD8efnHIK6E=
Subject key identifier: 8C:BF:9E:E2:EC:65:64:8C:39:9D:4C:B8:C9:76:31:2A:55:8D:CF:4B
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 018570DE43CC5AE16A28B30FFA8F133B227B
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/jL-e4uxlZIw5nUy4yXYxKlWNz0s.roa
Signing time: Mon 02 Jan 2023 05:04:52 +0000
ROA not before: Mon 02 Jan 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200918
IP address blocks: 185.186.36.0/24 maxlen: 24
185.126.196.0/22 maxlen: 22
185.186.38.0/24 maxlen: 24
185.186.37.0/24 maxlen: 24
185.186.39.0/24 maxlen: 24
2a06:bfc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:43:cc:5a:e1:6a:28:b3:0f:fa:8f:13:3b:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jan 2 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cbf9ee2ec65648c399d4cb8c976312a558dcf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:36:c1:84:9a:99:8d:31:1a:23:30:fa:e8:
90:c1:43:37:a9:cf:34:c6:ff:c3:38:b1:dd:fd:69:
ef:54:36:33:10:f4:a4:c3:f6:f5:99:c7:79:1b:9d:
51:b9:e7:94:92:93:14:4a:5b:f0:ce:4c:2c:3d:71:
92:91:c0:53:4d:3b:69:3e:6b:df:3a:5a:5f:91:2f:
d0:83:2d:af:dd:28:10:e3:0b:22:0b:87:71:61:ad:
2f:7a:22:4a:f6:62:31:1d:eb:33:76:2c:0a:ce:b8:
9e:1c:5d:8e:39:a8:b9:5b:15:89:0d:46:8c:29:e1:
e7:7e:8d:33:f0:71:1d:97:ff:b8:98:c7:7b:82:68:
35:d8:54:5c:47:21:d2:1a:90:51:f5:34:72:42:f2:
6f:07:8e:44:88:4a:a2:73:34:7e:e2:f5:69:c9:ff:
a9:87:c2:5f:b4:d8:66:64:59:37:6d:15:90:ea:e4:
f1:34:ea:52:7b:b3:17:47:45:c0:da:32:70:68:f9:
08:da:c8:e9:30:36:72:0c:76:81:66:9c:b5:ec:32:
f3:c1:76:ea:13:e4:08:f2:22:72:7e:eb:a4:e4:f3:
b7:2f:22:60:15:52:77:65:5e:b6:dc:74:e7:be:e6:
a3:b0:4b:e9:cb:90:c6:71:eb:fe:95:36:e6:50:7f:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:9E:E2:EC:65:64:8C:39:9D:4C:B8:C9:76:31:2A:55:8D:CF:4B
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/jL-e4uxlZIw5nUy4yXYxKlWNz0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.196.0/22
185.186.36.0/22
IPv6:
2a06:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:47:de:49:59:aa:fc:8f:26:ee:50:cf:35:67:71:b5:41:9a:
57:09:3d:8d:7d:b6:33:71:e3:ce:8b:b1:62:cb:d0:ac:26:f4:
75:df:91:5d:7c:52:a8:db:07:4c:8d:ef:90:9c:6b:1f:b3:2c:
40:72:b9:4f:c0:53:87:52:c7:05:f4:fc:e8:fa:31:b8:12:58:
30:89:b4:ec:4a:d1:be:a3:de:53:7d:57:49:cf:4f:43:a3:ce:
85:e1:b4:b9:32:d6:c4:06:d4:6e:17:c8:20:a8:45:a5:a8:32:
83:56:a6:9b:69:bc:4d:5d:72:26:fd:c1:fa:b9:92:a2:54:86:
ea:fa:1b:cd:1c:c2:69:e4:43:bd:78:57:4e:b4:4e:43:cd:ce:
71:71:4a:b1:4c:38:d4:c8:a3:0d:da:40:e7:c3:c8:68:43:c9:
58:7b:f9:21:fd:7f:94:26:94:cd:98:98:8f:3b:31:e7:e4:f6:
d0:4c:26:18:02:2e:9a:36:1f:a6:3c:d5:39:a1:6b:b3:ca:89:
2f:0f:6a:4a:5f:fb:4f:a1:38:4e:95:8e:72:b3:27:e9:37:64:
02:d7:08:73:8a:89:03:9d:45:b8:2d:ac:af:83:50:93:70:55:
1c:fd:17:b6:fa:f8:72:69:3d:57:02:d4:7f:dd:7e:8d:47:5f:
2c:e1:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:03 2024 by rpki-client on console-ams.rpki-client.org