Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/eucySvGcylpyGjeYPnB-IezPKVg.roa
File: eucySvGcylpyGjeYPnB-IezPKVg.roa (raw, json)
Hash identifier: BEJhwbIlk2r3MdHMwzppYbA9F/tXQMCXXOjjsHVq3sI=
Subject key identifier: 7A:E7:32:4A:F1:9C:CA:5A:72:1A:37:98:3E:70:7E:21:EC:CF:29:58
Certificate issuer: /CN=6fdbb04f552d847b02922beb284ab86805dbdcf4
Certificate serial: 01856EAFDA70B83A90E81DE54F123AE175BD
Authority key identifier: 6F:DB:B0:4F:55:2D:84:7B:02:92:2B:EB:28:4A:B8:68:05:DB:DC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9uwT1UthHsCkivrKEq4aAXb3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/eucySvGcylpyGjeYPnB-IezPKVg.roa
Signing time: Sun 01 Jan 2023 18:54:56 +0000
ROA not before: Sun 01 Jan 2023 18:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132721
IP address blocks: 185.224.170.0/24 maxlen: 24
185.224.171.0/24 maxlen: 24
185.224.168.0/24 maxlen: 24
185.224.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:da:70:b8:3a:90:e8:1d:e5:4f:12:3a:e1:75:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdbb04f552d847b02922beb284ab86805dbdcf4
Validity
Not Before: Jan 1 18:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ae7324af19cca5a721a37983e707e21eccf2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:a2:c4:18:68:83:ed:71:c7:13:4a:ae:46:
61:9b:1d:ba:1d:dc:ee:12:fc:3a:94:a0:7b:9b:37:
a8:d5:41:60:8c:68:b3:c4:56:bf:a4:03:2f:f1:b0:
68:8f:75:16:6a:3a:bb:08:85:25:bf:7b:55:dd:44:
c3:c7:e2:fd:9b:33:f8:cb:8a:f7:28:24:34:55:74:
2f:d1:91:ca:1b:d0:ee:08:70:4e:a0:4b:81:11:14:
a2:ec:f9:79:9a:42:03:9d:19:7e:68:fb:05:2c:45:
53:8e:3c:60:ac:83:1e:b1:d1:56:cf:c1:6b:64:20:
5b:85:b9:6f:99:67:db:5a:29:5d:b6:48:0f:fe:e8:
85:4b:2c:15:56:87:30:7c:e1:11:24:3a:71:ca:d3:
e9:a7:db:38:9b:7a:e4:a1:fd:ea:b8:02:b3:5f:b7:
db:6c:11:9f:09:9a:09:e6:f9:5b:25:0b:55:25:c4:
94:38:f9:44:07:be:90:02:5b:58:f1:89:d2:fb:3f:
d5:7f:e9:ea:e0:dc:df:ae:02:d9:44:9b:08:ab:f6:
11:19:6a:e7:19:ef:54:9f:d3:a2:c1:0f:3c:66:db:
7c:0d:66:c5:c0:d6:9c:80:04:0a:41:7a:5d:d5:81:
6c:fb:41:03:3a:29:5f:7a:6a:57:b2:bb:d1:4a:d4:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:32:4A:F1:9C:CA:5A:72:1A:37:98:3E:70:7E:21:EC:CF:29:58
X509v3 Authority Key Identifier:
keyid:6F:DB:B0:4F:55:2D:84:7B:02:92:2B:EB:28:4A:B8:68:05:DB:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9uwT1UthHsCkivrKEq4aAXb3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/eucySvGcylpyGjeYPnB-IezPKVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/b9uwT1UthHsCkivrKEq4aAXb3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.168.0/22
Signature Algorithm: sha256WithRSAEncryption
89:2e:80:6f:89:9d:30:ee:10:28:9a:ae:49:37:66:b8:48:01:
3d:47:b5:c2:e3:c3:31:fc:08:01:06:65:6d:e2:43:63:1a:3d:
a0:10:ed:4e:a3:eb:5e:bf:d1:98:12:af:b7:6a:3f:6d:8d:80:
e5:a7:b9:4c:b7:2f:61:e8:5e:a3:18:ec:1d:a0:dd:d4:d2:55:
19:a8:16:9e:8a:42:c7:d6:52:b2:cf:bc:1b:19:49:d3:bc:cf:
4c:47:8f:e6:bc:b5:0a:df:b2:51:01:9c:2b:6f:e6:9b:4e:47:
8f:06:d3:20:fa:e2:e0:89:ba:fd:b7:86:02:d1:4b:da:e3:99:
ed:38:ef:86:6d:c4:7a:f3:b5:2c:40:c2:1e:6a:3b:13:5b:d4:
03:1e:a2:8e:f4:63:c9:ce:be:57:85:dc:be:41:4a:1f:d2:dd:
b0:3d:5b:4e:21:52:61:c2:00:b0:77:fa:e0:08:fe:91:31:d6:
c6:e0:93:cd:98:0d:e2:44:a4:02:f8:18:c6:6a:21:88:e0:ed:
8a:b3:e0:26:f2:ba:3f:bf:3a:4b:0f:1a:1a:09:e3:c6:68:af:
23:bd:0a:69:d6:a8:c9:8f:49:cd:69:7e:76:8b:46:b7:45:2e:
dc:b3:ab:83:9e:05:a1:dd:a1:45:c0:56:8f:5a:c3:49:8c:56:
bf:c7:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org