Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mG6e5GCD4vu_ESSYCgLTJcjbffk.roa
File: mG6e5GCD4vu_ESSYCgLTJcjbffk.roa (raw, json)
Hash identifier: PTBQjIuVVrA922RdWuJuEruLCyFlLaGBUjcfmfagJ/Q=
Subject key identifier: 98:6E:9E:E4:60:83:E2:FB:BF:11:24:98:0A:02:D3:25:C8:DB:7D:F9
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 018A88DE6263684A6F89D6DD64A90E5AB476
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mG6e5GCD4vu_ESSYCgLTJcjbffk.roa
Signing time: Tue 12 Sep 2023 10:09:50 +0000
ROA not before: Tue 12 Sep 2023 10:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.153.239.0/24 maxlen: 24
185.153.236.0/24 maxlen: 24
188.31.248.0/23 maxlen: 23
188.31.251.0/24 maxlen: 24
92.40.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:de:62:63:68:4a:6f:89:d6:dd:64:a9:0e:5a:b4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Sep 12 10:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=986e9ee46083e2fbbf1124980a02d325c8db7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:5e:cf:eb:d2:9d:8b:63:2a:d9:a2:54:dd:
bd:1f:bd:35:c4:6b:3e:9a:72:f5:7f:ca:6d:ed:f3:
7d:2f:03:e7:8b:71:51:99:a2:27:27:dd:4b:f7:9c:
bb:55:b6:73:f8:52:14:43:81:a4:23:3c:cd:4f:c7:
ff:1e:09:7a:fc:83:4b:b3:02:2b:01:9d:40:e2:15:
c7:0c:70:20:b4:69:8a:05:89:c6:1c:af:6c:a3:8f:
ec:18:e2:fa:a9:7b:9f:97:37:b6:47:76:57:06:f6:
21:c5:c4:39:4f:0d:21:6b:c3:9a:98:1e:7b:9a:97:
ba:86:e1:2f:0c:6a:1f:55:46:aa:95:9d:d0:df:fb:
a0:d4:06:e0:eb:a9:ec:9b:c5:92:54:f4:a8:c8:4e:
31:db:0d:da:c5:d2:f0:2f:d7:f9:eb:cb:eb:92:5e:
2f:4b:d6:bc:3d:ea:ee:66:ed:d4:a5:33:0a:87:6f:
da:a5:f7:e9:5e:21:05:19:b9:5b:cc:12:3c:34:75:
37:62:6c:c2:f4:3b:46:5c:30:0c:d7:ce:23:ac:44:
e7:9b:eb:81:70:0c:8b:59:28:ce:86:4d:2d:4f:34:
38:62:cb:9d:aa:40:da:ac:e0:b6:4f:01:56:e5:40:
21:b6:15:eb:76:c9:36:b4:fa:b7:59:97:75:19:d6:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:9E:E4:60:83:E2:FB:BF:11:24:98:0A:02:D3:25:C8:DB:7D:F9
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mG6e5GCD4vu_ESSYCgLTJcjbffk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.245.0/24
185.153.236.0/24
185.153.239.0/24
188.31.248.0/23
188.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8c:15:be:ad:ff:e3:8f:a0:2b:06:94:df:50:01:4c:93:fc:
f0:62:b7:0c:57:5b:ef:59:df:42:6d:51:43:ec:9c:51:60:4b:
dc:4e:0e:48:fb:11:67:ec:5e:65:df:56:af:9f:78:ad:bb:b9:
b2:2c:99:24:de:ed:a4:f2:ad:15:b4:ba:2e:3c:83:5c:56:52:
a0:a0:48:94:dc:17:2f:5a:d8:1b:65:af:37:68:15:bc:9b:ea:
db:78:2a:c6:91:b1:c7:4c:cf:b8:c5:8b:5e:40:48:2f:74:1f:
a1:fd:e9:e2:d1:f3:c3:48:6a:aa:2c:53:e9:84:2e:75:3d:71:
cf:31:a2:39:f5:f9:e7:d1:6e:45:4c:e7:28:e0:ec:58:f6:ec:
cb:f0:83:b1:13:f3:47:92:bd:e5:a9:7d:37:b8:27:fb:72:5c:
c8:be:6d:d0:88:66:1d:ec:47:65:60:95:ab:7b:91:21:5e:fb:
5a:28:90:0d:2a:53:66:0b:9b:17:e5:ad:31:0c:d4:64:03:5a:
94:df:1b:c7:c1:62:ff:a3:a1:a4:5d:68:1f:57:7c:e5:30:23:
75:3b:72:e5:e7:01:2d:4d:41:29:51:fd:16:31:44:be:8e:20:
cf:ef:6f:78:ed:27:a1:25:ea:81:8d:13:59:b7:3f:c9:ee:20:
aa:43:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:41 2024 by rpki-client on console-ams.rpki-client.org