Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/7ppD03LztswVeUfhqiXdS-uxjf0.roa
File: 7ppD03LztswVeUfhqiXdS-uxjf0.roa (raw, json)
Hash identifier: Uw15MNihnLBFbaD68lyhenheIKeFF+x0Vz+bpQtfpn0=
Subject key identifier: EE:9A:43:D3:72:F3:B6:CC:15:79:47:E1:AA:25:DD:4B:EB:B1:8D:FD
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 018E38EAA3BB1AE6DD9970367A618E291E19
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/7ppD03LztswVeUfhqiXdS-uxjf0.roa
Signing time: Wed 13 Mar 2024 17:44:45 +0000
ROA not before: Wed 13 Mar 2024 17:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.138.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 09:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:ea:a3:bb:1a:e6:dd:99:70:36:7a:61:8e:29:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Mar 13 17:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee9a43d372f3b6cc157947e1aa25dd4bebb18dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:99:70:cd:bb:dd:96:7a:49:05:41:ff:f6:
89:51:f3:2c:6b:87:b8:c8:78:e5:98:80:23:04:4a:
a7:5b:5a:da:ae:53:dc:63:62:ca:e7:f7:b2:48:8d:
b8:00:b0:17:2b:44:fb:da:28:cb:88:8b:9b:21:43:
31:37:ad:b8:df:51:a0:b3:9d:e6:e8:57:cb:7b:9a:
80:72:ff:cf:c1:c2:9e:54:f9:4b:b6:1d:d9:78:96:
ec:16:a0:64:54:63:12:3d:ad:12:c6:69:e7:33:cf:
f6:0f:21:f5:7b:7f:82:6b:2a:89:6c:1a:e0:58:97:
ea:75:42:ec:e9:b1:d9:f0:bb:d4:17:d8:40:02:4e:
6d:dc:3d:ec:a0:d3:8f:01:b0:27:48:f9:01:ad:80:
2f:5a:09:6b:37:82:99:4b:62:6e:c5:96:dc:03:43:
f7:d6:6c:61:0f:05:4c:0b:14:7c:a6:6c:fe:2e:4c:
5c:4c:23:f2:80:e2:0d:71:05:65:a0:57:7b:6b:64:
8a:2e:02:cc:09:50:ca:c7:bf:7a:25:5e:b8:66:5a:
db:f4:a0:88:20:53:84:2a:77:42:21:53:6e:ca:51:
c6:cd:2c:9e:d1:4b:40:82:a7:83:dc:85:69:7c:79:
64:f2:cc:23:be:f4:c7:38:5b:57:0f:24:0b:60:3b:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:43:D3:72:F3:B6:CC:15:79:47:E1:AA:25:DD:4B:EB:B1:8D:FD
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/7ppD03LztswVeUfhqiXdS-uxjf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.144.0/22
Signature Algorithm: sha256WithRSAEncryption
42:4c:2a:02:2d:6b:f6:01:ef:9b:80:48:0b:7b:c9:3d:d2:6b:
dd:83:62:ac:43:e1:6d:cd:7a:3b:45:81:f5:1d:ec:7a:ad:db:
f7:88:61:07:25:ab:44:7a:03:6b:75:65:df:de:45:84:29:a2:
13:e1:2c:96:66:a3:91:40:6b:04:55:81:7d:61:7a:77:da:89:
49:11:11:28:3b:23:0f:83:21:b7:08:df:c0:28:2a:23:9f:60:
bd:4b:dc:35:8b:1b:9e:78:ea:72:95:36:dd:f8:11:1a:94:99:
a8:85:46:23:26:a2:88:e6:6e:ab:4e:06:cd:d7:96:b7:8b:01:
7a:d8:62:a3:8c:e1:0b:4b:3c:e8:e2:36:e3:6e:52:db:8f:ad:
83:40:6a:65:cd:a2:09:f1:81:f5:4f:86:7f:e2:14:fe:b4:69:
6b:1f:1c:b8:0b:fe:c1:b7:3d:4f:07:9e:a0:87:eb:79:76:57:
b3:4e:b7:a9:5c:b9:f4:e2:2c:22:46:fb:83:2e:dd:38:24:38:
52:fb:4e:ec:0b:83:3e:b2:3f:d8:26:88:34:6f:53:e0:eb:b5:
13:4a:7e:06:ee:4c:63:67:7e:2a:8d:14:d1:f7:b6:39:df:62:
33:cc:ca:3b:65:41:34:c5:fc:90:a5:53:0d:48:78:50:58:69:
a0:29:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:36 2024 by rpki-client on console-ams.rpki-client.org