Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/7ENsgL4KjiEjjz-GaQ8jqSXPbg8.roa
File: 7ENsgL4KjiEjjz-GaQ8jqSXPbg8.roa (raw, json)
Hash identifier: p2A2mv1TMooOrGFfo+Xmx6F+t+cEV6LgB4LlZ0FTUPk=
Subject key identifier: EC:43:6C:80:BE:0A:8E:21:23:8F:3F:86:69:0F:23:A9:25:CF:6E:0F
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 018CC802E732394C7184DFEA859F533476FE
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/7ENsgL4KjiEjjz-GaQ8jqSXPbg8.roa
Signing time: Tue 02 Jan 2024 02:31:22 +0000
ROA not before: Tue 02 Jan 2024 02:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198761
IP address blocks: 185.25.228.0/22 maxlen: 24
91.243.64.0/23 maxlen: 24
91.242.223.0/24 maxlen: 24
213.5.236.0/23 maxlen: 24
2a04:3380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Feb 2024 07:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e7:32:39:4c:71:84:df:ea:85:9f:53:34:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Jan 2 02:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec436c80be0a8e21238f3f86690f23a925cf6e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:75:42:1b:c1:6c:2f:b5:55:74:de:46:39:
22:7b:91:fe:69:ba:70:a4:45:62:9f:13:1d:df:f7:
58:c4:87:6b:28:9e:99:e7:50:1a:7a:e8:02:eb:c4:
7f:f3:52:68:90:12:ed:d5:9a:82:2d:b4:ec:d0:cd:
5a:a2:76:d5:77:07:c4:76:c9:2b:61:9f:56:55:d4:
24:4f:97:6c:ab:2a:7f:66:95:08:6a:8a:8a:f3:2f:
97:2f:58:14:62:f8:e5:9f:ae:39:e3:01:e6:ee:4c:
b0:1b:02:f7:13:73:2e:52:90:73:f3:0e:53:be:c7:
80:d7:90:86:6f:04:c4:95:ce:50:b2:0a:45:35:b3:
64:59:2f:02:00:24:e5:10:c2:20:22:8e:b3:db:41:
ab:83:f8:80:91:8a:d5:2c:3b:20:27:88:0d:24:35:
1d:81:84:fa:ad:e0:b0:12:81:d3:fc:b7:da:de:a6:
be:68:11:22:23:c2:05:d3:57:84:9d:ea:26:12:a3:
43:4e:83:12:d8:b3:32:e2:c0:f6:be:0b:1d:2b:c8:
7b:9f:cc:b7:be:4a:45:c9:3e:0f:05:36:6b:f6:49:
f1:7f:12:48:fc:f9:71:fd:f3:47:12:95:3b:e3:35:
97:65:05:ba:6d:a0:f4:8d:89:1d:c0:ab:03:ba:12:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:6C:80:BE:0A:8E:21:23:8F:3F:86:69:0F:23:A9:25:CF:6E:0F
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/7ENsgL4KjiEjjz-GaQ8jqSXPbg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.223.0/24
91.243.64.0/23
185.25.228.0/22
213.5.236.0/23
IPv6:
2a04:3380::/29
Signature Algorithm: sha256WithRSAEncryption
53:26:94:90:90:9e:ba:ad:6b:89:ee:4e:29:f0:14:87:04:af:
01:4d:bf:61:73:22:61:77:5b:ec:27:4b:4e:1b:52:0a:b3:2f:
bd:ba:76:8d:5f:bb:80:1a:0b:77:13:04:46:64:08:34:a2:e1:
38:a0:88:c0:42:10:00:44:71:d2:21:cd:1f:aa:8e:ef:f6:1b:
f2:ea:1b:17:ad:c1:b7:6c:9b:ae:f4:8f:b0:79:38:cd:5a:db:
22:3c:cd:a5:04:70:97:1a:ef:5b:2e:d1:4f:d5:0e:55:93:db:
5a:ce:a1:11:fb:3c:d9:26:9f:13:f8:9d:78:56:96:b4:85:c7:
29:71:bb:92:98:c6:5e:97:2d:0c:c2:05:e5:51:75:f7:f0:59:
17:a7:2e:86:a1:e6:d2:89:40:20:f8:f7:af:7d:80:8e:57:4a:
dc:7d:0a:ed:72:4e:5b:a3:8c:75:69:9c:1a:f4:53:fc:d5:a2:
76:2f:06:65:12:94:f3:dc:dd:3c:e3:7e:c0:97:a3:cb:f3:7d:
8c:64:24:ca:dc:fd:e2:21:e4:67:ec:d1:de:37:dc:22:aa:b7:
48:f7:76:57:a0:3f:7c:63:b1:03:b6:f9:f6:2c:26:cb:55:b4:
df:65:02:33:e2:7f:2f:e3:3f:0e:c2:d2:5e:11:db:82:91:21:
50:78:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:06 2024 by rpki-client on console.sobornost.net