Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/Eu9XkjEWf5ji9gP1Nc07_UIFAfE.roa
File: Eu9XkjEWf5ji9gP1Nc07_UIFAfE.roa (raw, json)
Hash identifier: qsfVrav+Ap7oPph6i7fX3re6d0WjK8YXjQNtyDgXNyI=
Subject key identifier: 12:EF:57:92:31:16:7F:98:E2:F6:03:F5:35:CD:3B:FD:42:05:01:F1
Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial: 0185720C5397504DCE9C5FF3C8388C608684
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/Eu9XkjEWf5ji9gP1Nc07_UIFAfE.roa
Signing time: Mon 02 Jan 2023 10:34:48 +0000
ROA not before: Mon 02 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206602
IP address blocks: 185.181.238.0/24 maxlen: 24
185.181.236.0/22 maxlen: 22
185.181.239.0/24 maxlen: 24
185.181.236.0/24 maxlen: 24
185.181.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:53:97:50:4d:ce:9c:5f:f3:c8:38:8c:60:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Validity
Not Before: Jan 2 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ef579231167f98e2f603f535cd3bfd420501f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:64:7c:dd:d0:f4:a9:be:ab:0c:6c:d5:d2:
ad:c6:00:d2:5c:11:6e:4c:de:c8:15:dd:3e:4d:28:
f5:bc:43:35:22:be:f1:52:8f:91:25:0d:79:f5:c4:
9d:7f:f3:d8:94:0d:04:98:b9:7b:65:30:dd:6b:1e:
44:dd:ba:b5:b2:e3:a1:40:ea:32:33:0f:a5:ba:86:
d5:f6:8f:f9:76:ca:5f:18:b8:65:5f:9a:f3:95:64:
ce:40:db:08:90:12:e0:40:82:0c:70:c6:c9:54:38:
ce:03:6a:e3:25:c6:54:34:34:44:db:25:55:2d:d7:
d7:3f:ff:4b:77:a0:11:71:96:64:6d:12:c2:9f:cf:
b3:ff:9b:19:a4:9c:32:fe:d8:5e:29:51:d3:7d:0a:
33:91:ea:17:c7:1c:d8:5b:e2:bf:75:80:db:ab:40:
cf:ac:28:d6:8d:7c:7a:d3:90:f1:ad:2c:14:f6:0e:
86:61:ca:89:0d:4e:01:61:bd:a0:34:b1:dd:6c:9e:
57:75:ac:b4:93:9a:b0:e0:43:68:73:31:96:bf:76:
3c:82:78:3b:56:e3:f4:85:ee:dc:20:df:c7:6c:3f:
0e:0a:73:7c:d5:a7:d6:ce:e5:1c:b0:51:51:25:9c:
80:0f:9e:be:3d:27:3b:ce:dd:df:5f:87:69:1a:16:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:57:92:31:16:7F:98:E2:F6:03:F5:35:CD:3B:FD:42:05:01:F1
X509v3 Authority Key Identifier:
keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/Eu9XkjEWf5ji9gP1Nc07_UIFAfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:d2:e5:37:26:8c:af:15:e8:83:50:d1:ef:d1:0d:ab:3f:1d:
09:29:ae:54:4d:ba:18:bd:01:75:0a:b6:e2:bb:9b:65:8d:eb:
89:68:9c:e4:2f:a6:9a:97:8c:0e:ff:a4:79:19:f4:11:d2:8b:
e7:69:06:8f:9c:b0:59:03:df:2e:f9:ec:af:bc:2e:8d:98:cd:
76:4b:c9:b6:a6:00:0f:31:40:6d:e4:3d:d5:60:d4:60:4c:8c:
49:45:18:e5:44:26:61:9b:1a:d3:36:09:f9:dd:a6:0a:9b:2a:
63:21:b3:93:95:6f:94:aa:a5:29:a5:35:c5:60:bc:c7:04:71:
20:ca:0a:d4:25:7e:9e:96:fe:97:70:7a:b7:dd:3e:11:32:6f:
d8:bf:4a:d7:fc:9c:54:a5:5a:2f:1c:80:a0:fa:2b:3f:0f:e9:
63:2d:84:7f:fa:a5:88:fa:3b:10:8b:ac:b1:20:44:7b:f1:91:
1c:0f:ca:8e:e6:a6:bd:d1:cc:a8:d9:18:19:f6:89:52:dc:d3:
c3:d9:b0:f6:ac:f1:7e:67:f2:49:d1:a3:d1:0b:c6:f9:94:6c:
62:c7:42:31:f0:87:54:14:bb:c8:40:3d:c9:1c:4e:ee:ae:fb:
6a:00:de:61:c9:f3:8a:cf:f0:4a:40:2f:d5:41:a8:ac:01:a4:
59:4f:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:09 2024 by rpki-client on console.sobornost.net