Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/EeQLyqrIw8dOIpLmMnr_UXPQnQ8.roa
File: EeQLyqrIw8dOIpLmMnr_UXPQnQ8.roa (raw, json)
Hash identifier: 2B5OSmCmPnxH1kkUQOd/2t6qmaS9el9gyGBYDj6/bn4=
Subject key identifier: 11:E4:0B:CA:AA:C8:C3:C7:4E:22:92:E6:32:7A:FF:51:73:D0:9D:0F
Certificate issuer: /CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
Certificate serial: 01856F0B3479C0073A59B9453C4FD175C2FA
Authority key identifier: B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/EeQLyqrIw8dOIpLmMnr_UXPQnQ8.roa
Signing time: Sun 01 Jan 2023 20:34:43 +0000
ROA not before: Sun 01 Jan 2023 20:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209080
IP address blocks: 185.239.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:34:79:c0:07:3a:59:b9:45:3c:4f:d1:75:c2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
Validity
Not Before: Jan 1 20:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e40bcaaac8c3c74e2292e6327aff5173d09d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e3:ff:28:f2:33:eb:c7:37:aa:0a:4d:34:15:
09:51:8e:cb:b4:5a:3e:13:c4:35:36:54:72:9a:a4:
54:5d:6d:03:d7:5b:f6:1b:f4:39:20:bf:12:01:8f:
26:29:2d:e4:8a:b0:2a:d7:a3:68:73:fb:94:9a:81:
97:2a:02:74:f8:85:7d:14:b2:0d:4f:f7:7c:f5:01:
6f:70:09:60:4f:d7:cb:ae:b5:a5:01:d0:60:80:8b:
3c:57:53:b5:94:cc:22:14:53:e8:70:66:dc:f7:c2:
90:cc:e4:94:74:59:e8:2c:5c:ff:7a:39:89:f1:4e:
44:c8:36:71:2c:1e:d9:63:b8:32:c0:47:ef:6f:03:
9f:1a:a6:e1:0b:96:b9:a0:27:b3:ce:a7:7d:91:a1:
c4:76:9e:57:3b:68:a7:26:55:7d:ff:47:3c:03:75:
f1:76:97:0f:de:f9:56:0b:85:73:54:00:6b:73:9f:
58:07:6c:8b:a0:01:cd:a6:e7:d3:33:66:8e:37:f4:
45:b7:ee:8f:8b:2b:4f:3d:fc:39:ae:b9:05:5b:81:
93:73:24:bd:ab:1c:c8:94:b0:a0:95:bb:d0:99:42:
04:92:c7:8a:30:a5:b9:d1:0b:6c:47:ce:8e:74:4e:
1a:c5:42:54:f9:78:dc:13:07:b4:be:38:f8:2e:4d:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:0B:CA:AA:C8:C3:C7:4E:22:92:E6:32:7A:FF:51:73:D0:9D:0F
X509v3 Authority Key Identifier:
keyid:B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/EeQLyqrIw8dOIpLmMnr_UXPQnQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
65:df:f9:66:6a:f7:24:4b:5e:a8:2e:34:cc:c7:64:05:c7:d3:
c0:8a:2d:3c:e6:c1:4a:50:91:3d:22:49:19:07:04:f5:f0:86:
e5:0b:d0:6e:9f:31:22:10:5a:ac:bc:d8:85:33:8c:d2:13:75:
39:a2:c7:97:f5:fd:2c:a0:9a:56:d1:34:b1:33:9b:72:d4:a3:
94:08:c3:1b:b3:59:b3:5f:7f:d1:e9:85:ec:4d:ef:f3:83:a6:
91:0c:c2:c7:c4:57:c2:e4:0c:98:0f:6c:40:6d:97:c0:d4:8e:
2c:fb:ff:f5:82:b3:d2:5b:0a:f1:82:a6:b2:dd:7f:c6:0a:de:
ba:76:7e:d2:d6:70:a0:6d:b6:1f:a5:57:31:db:7b:35:d6:42:
f4:dd:97:92:82:41:b9:3d:19:ad:a1:b2:e7:8b:2a:ee:86:0b:
2a:60:2b:59:97:4e:48:c5:38:25:e6:e8:bd:49:41:1d:c5:82:
38:f0:bc:e1:e6:88:3a:46:12:ca:7d:98:fd:64:8f:00:fa:f7:
f8:0d:67:3f:46:3a:3e:a3:20:2d:bb:ab:ab:87:14:f3:25:05:
f3:37:c9:48:9a:cb:81:04:eb:c9:7c:23:3a:3f:b4:77:58:b0:
6b:ae:c4:da:1e:eb:74:47:9c:9f:d4:b8:7f:ce:7f:90:4f:e2:
7f:2f:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net