Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/NEGa5f5fk86ce9SC9ZwoXZcMGU4.roa
File: NEGa5f5fk86ce9SC9ZwoXZcMGU4.roa (raw, json)
Hash identifier: dVuutoTbelOxp9VpWtrF4AzGxX2IP55Cncj5eXIj+fs=
Subject key identifier: 34:41:9A:E5:FE:5F:93:CE:9C:7B:D4:82:F5:9C:28:5D:97:0C:19:4E
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 018EE91D7683B93F3A34E4ABA3EE8792E304
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/NEGa5f5fk86ce9SC9ZwoXZcMGU4.roa
Signing time: Tue 16 Apr 2024 22:53:25 +0000
ROA not before: Tue 16 Apr 2024 22:53:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57851
IP address blocks: 185.242.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 01:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e9:1d:76:83:b9:3f:3a:34:e4:ab:a3:ee:87:92:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Apr 16 22:53:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34419ae5fe5f93ce9c7bd482f59c285d970c194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:b6:b4:87:5b:0c:ff:ab:a4:d8:99:73:e8:
a7:40:a2:31:81:d0:8c:4f:42:3c:41:d3:cb:cc:c1:
3c:9d:51:83:ec:c5:60:66:cb:fe:71:6f:62:f4:d9:
b7:b8:85:81:8e:6a:81:6f:9a:d2:4a:e2:8c:02:41:
b2:03:cf:61:d2:25:1c:1b:43:f6:a2:bf:ae:56:3b:
06:5f:8b:56:da:62:04:18:36:4c:af:29:d9:98:12:
d9:5b:f1:55:11:7e:0a:30:22:e0:d2:e2:b8:f7:9e:
66:79:fb:3a:98:60:8d:21:1d:90:76:d8:13:48:15:
75:99:34:e2:da:61:c6:b7:af:a1:43:ee:9c:3b:66:
be:f4:e6:88:02:75:69:36:a7:7c:f3:47:a0:95:23:
a3:f2:dc:17:36:9e:1e:08:0c:88:e2:a9:2d:8b:33:
d8:fb:b5:c1:7a:35:ac:1f:dc:aa:6c:20:90:58:36:
5a:73:d4:02:28:a3:0d:30:0a:4a:5f:2e:6b:5f:b8:
34:c9:47:c2:80:07:64:6f:fc:99:90:b8:6f:8f:98:
24:89:2e:39:46:3a:83:1d:29:c8:b9:17:1f:98:14:
74:f2:ca:bc:68:3a:1a:e0:02:e9:28:36:cc:5e:7b:
7c:68:8f:62:2f:28:79:60:00:4d:1d:5a:2b:3e:ad:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:9A:E5:FE:5F:93:CE:9C:7B:D4:82:F5:9C:28:5D:97:0C:19:4E
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/NEGa5f5fk86ce9SC9ZwoXZcMGU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0d:98:7b:0d:54:18:1b:21:08:30:80:f9:28:61:01:3e:d1:
11:0a:e9:b0:7d:23:48:07:17:78:f3:a0:0b:3f:c2:c3:b2:29:
7e:2a:74:6d:52:8e:21:f5:d4:eb:f8:74:77:aa:3d:14:57:4c:
5e:e4:2c:e3:b7:27:a2:2f:b1:fd:e6:27:ce:e2:d5:f1:3b:32:
13:46:5f:c9:b4:c7:c7:0b:71:07:9a:47:11:1e:b0:48:a6:8b:
9c:94:70:99:a7:1b:51:43:06:3b:5e:a3:64:00:5b:f7:76:59:
aa:17:77:e5:ce:8b:b6:98:1e:0f:61:b2:6f:0d:83:5f:56:35:
e8:81:d8:87:c6:79:e9:57:6c:5d:aa:2e:44:ae:a5:de:83:72:
f4:4e:72:ce:f1:86:8b:0e:ae:ab:2a:d3:c9:fd:fc:5e:13:fc:
81:48:41:23:9a:f4:cc:b8:37:d9:3d:8b:f3:51:58:68:04:ad:
89:91:e7:32:a4:f1:e1:d3:9a:af:6b:4e:eb:71:06:95:a0:f4:
f9:bc:3c:bd:36:ff:48:40:2c:16:64:54:6d:3b:b4:5c:43:53:
d6:8c:92:47:3b:42:bb:01:82:4d:a3:2f:02:60:68:a0:4e:a3:
ac:f7:24:3d:55:97:0e:0e:f5:e5:b2:62:a9:69:d4:ed:39:7f:
fd:1c:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:23 2024 by rpki-client on console-fra.rpki-client.org