Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/1-ckN7U2Y4gc3LUANIE8tNOHCw_4.roa
File: 1-ckN7U2Y4gc3LUANIE8tNOHCw_4.roa (raw, json)
Hash identifier: MpBYz/91Mwr0MEyKNZ6/Li81JYximA7kFjyENizL0Bc=
Subject key identifier: F9:C9:0D:ED:4D:98:E2:07:37:2D:40:0D:20:4F:2D:34:E1:C2:C3:FE
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 018E088B43A9792E54A29394CC876C5CD30F
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/1-ckN7U2Y4gc3LUANIE8tNOHCw_4.roa
Signing time: Mon 04 Mar 2024 08:18:48 +0000
ROA not before: Mon 04 Mar 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51019
IP address blocks: 185.242.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 22:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:8b:43:a9:79:2e:54:a2:93:94:cc:87:6c:5c:d3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Mar 4 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9c90ded4d98e207372d400d204f2d34e1c2c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:d1:c2:c2:0e:03:35:fb:ae:29:d3:48:a5:
d3:72:6d:bc:97:fa:90:04:f6:43:51:83:10:9d:3d:
d6:eb:da:f9:a4:50:11:b6:4f:50:59:a9:87:61:32:
cd:7b:10:5c:f3:ef:fc:f5:74:7c:20:1e:7a:4e:12:
4b:96:ac:5d:be:24:64:76:32:72:41:38:ba:3a:11:
f4:be:11:67:b7:12:23:b0:9d:f8:c2:d4:e3:b3:ec:
56:03:72:7a:65:d2:0e:a2:09:df:c8:1b:83:62:fb:
e2:9c:9e:a3:bf:f9:1f:0e:d3:c9:da:a9:2d:f6:c9:
24:e2:52:52:9f:e5:9b:3d:33:be:c7:56:49:1d:9b:
29:54:50:a0:ac:86:62:9b:62:e4:52:da:de:3d:dd:
ce:54:36:b7:c3:ae:c4:df:64:a5:21:5f:e4:dd:32:
f1:2c:c1:05:96:5c:07:26:c4:81:e8:13:f5:c6:26:
16:3a:28:1e:5e:42:0a:23:09:b6:cc:d1:7b:13:d7:
2a:0b:59:c1:01:48:88:08:80:ee:d0:84:ae:f4:5a:
2e:bc:b5:ce:56:ba:be:99:91:4e:73:bc:e1:fe:11:
4a:72:cc:5b:3f:f4:77:a4:e9:ae:4f:83:c9:6b:57:
45:de:e4:b2:19:8f:5c:25:59:98:f3:40:ea:f3:15:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C9:0D:ED:4D:98:E2:07:37:2D:40:0D:20:4F:2D:34:E1:C2:C3:FE
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/1-ckN7U2Y4gc3LUANIE8tNOHCw_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:dd:64:0a:a5:79:78:de:8d:b5:3c:7d:9b:87:ae:01:ca:f7:
df:f8:4d:f2:0d:a9:0a:ad:1f:34:38:ff:b9:f4:99:08:12:6e:
e5:0a:11:d3:23:b5:a0:28:da:c2:7b:79:e5:3c:68:8d:4f:9c:
1e:00:ee:c1:2a:8f:6a:6d:0c:38:36:60:7b:db:c7:ff:e4:a6:
7f:87:2d:a9:c5:f2:98:42:b8:3a:fb:ea:63:fd:56:0a:06:e9:
e4:60:fa:ce:6e:0a:f5:ae:15:46:79:f9:c8:21:3b:cc:e2:7a:
4d:32:4b:da:ed:30:67:d5:0a:45:fa:e5:d2:25:8b:48:d1:c0:
54:dd:d5:16:52:73:24:fa:b6:01:72:53:3d:e0:7f:8e:ef:ea:
21:07:5e:80:e7:22:85:62:26:9b:41:57:fe:16:65:78:d0:73:
99:b7:c1:a3:b7:eb:ef:6f:a4:ce:7d:06:69:b7:6e:33:1d:5c:
52:b9:51:61:df:93:c4:73:bd:29:4c:d5:2b:e3:71:8f:60:1a:
d3:10:f7:0d:c2:ef:6b:e2:4a:62:e0:cd:71:62:68:3b:21:41:
1a:d7:f5:a5:9a:18:55:5c:ad:39:64:3e:08:98:16:b7:21:80:
2d:12:5c:a3:bb:7c:a7:6c:e0:77:aa:2a:3c:ab:51:dd:25:02:
38:ac:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 14:46:11 2024 by rpki-client on console.sobornost.net