Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EA-wbcAeyBGyeZXbpGw0dSE-_D4.roa
File: EA-wbcAeyBGyeZXbpGw0dSE-_D4.roa (raw, json)
Hash identifier: ZZQG26vfGMMsxrd+HoIXA82DaCQhVeXEbmyn5gMyuVA=
Subject key identifier: 10:0F:B0:6D:C0:1E:C8:11:B2:79:95:DB:A4:6C:34:75:21:3E:FC:3E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018F7E09D9BB0589E6D855E6014DA168A7C0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EA-wbcAeyBGyeZXbpGw0dSE-_D4.roa
Signing time: Wed 15 May 2024 20:55:25 +0000
ROA not before: Wed 15 May 2024 20:55:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 13:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7e:09:d9:bb:05:89:e6:d8:55:e6:01:4d:a1:68:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 15 20:55:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100fb06dc01ec811b27995dba46c3475213efc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:99:0a:4a:e8:53:c6:de:b8:61:5c:3a:ca:
21:74:8c:2e:46:cb:a0:06:24:4f:fc:d0:c0:eb:32:
8b:5b:d5:a5:19:df:4c:14:01:c2:5f:ef:b6:cd:cb:
26:72:14:18:9d:05:54:97:bb:3a:bd:4f:8d:e4:b4:
4f:d2:b6:4e:fa:60:30:8f:b0:0f:4b:02:80:ea:c2:
70:7d:a9:8d:81:f1:c9:4a:85:f8:3e:3e:fb:0d:53:
4f:af:c7:bc:5e:47:c5:a6:a6:b7:87:8a:08:72:4d:
e5:21:28:63:3f:f5:11:a0:39:01:0d:03:93:a1:ba:
c5:bb:c6:f8:db:8a:f0:94:eb:ab:fc:fe:e9:ab:7e:
77:58:a0:1d:b9:cd:5b:ea:c4:37:db:1e:fa:4d:32:
f0:b9:c4:48:c2:5c:89:85:e7:33:c1:31:69:ca:b5:
d4:ed:02:fe:6d:86:5c:19:e2:b4:67:d8:43:0d:b1:
e7:00:73:53:b9:a1:59:6b:58:08:a0:be:cf:7c:b5:
6d:2f:de:86:e5:68:42:e7:1d:56:ec:78:f5:e2:7b:
cc:4e:74:8d:bd:11:22:64:36:10:74:ca:25:3b:5d:
60:8b:b1:bd:fe:98:95:4d:9c:eb:b4:dd:72:25:f5:
d8:2e:a6:2c:e4:b6:d0:ca:b2:2a:42:5d:de:72:9c:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:B0:6D:C0:1E:C8:11:B2:79:95:DB:A4:6C:34:75:21:3E:FC:3E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EA-wbcAeyBGyeZXbpGw0dSE-_D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.94.170.0/24
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
25:17:88:68:1c:44:68:37:af:c5:f3:a1:14:e1:11:28:3b:d9:
21:5b:99:18:bc:c4:7d:13:d5:50:65:ed:90:c1:e0:53:8b:40:
c6:49:e8:30:17:6a:f9:fb:42:07:20:75:6d:d1:74:37:aa:63:
49:24:22:10:50:11:8c:1e:d3:ae:b2:ec:d8:51:f7:79:1d:19:
15:93:36:b0:60:a4:ee:74:f8:11:45:ca:91:e9:8e:45:65:19:
77:bf:7e:e6:8a:8d:1f:94:a7:03:3d:80:8c:e0:c3:88:c4:a6:
32:6d:58:bd:8d:84:7b:72:65:bc:f9:50:39:5c:00:f2:c9:b9:
24:87:c6:6c:56:93:5e:0e:66:62:1e:4c:95:c5:80:ec:d3:0d:
88:db:f7:1a:e8:6e:65:e0:2a:c6:31:b2:33:e1:a3:6d:22:d3:
49:fa:ef:f6:4e:53:4d:ee:32:16:cf:01:f2:67:ea:15:85:54:
7c:b8:76:24:14:43:b2:00:04:6e:0c:4a:cb:83:6c:e1:02:b0:
6f:fd:ed:f6:3c:81:7e:f0:50:a9:b7:c7:15:2b:c5:22:f8:f7:
2a:03:60:57:dd:aa:8c:ea:b6:87:de:5c:c4:eb:fb:a2:1d:d8:
99:f7:06:ec:8e:68:b7:21:33:b1:3c:5c:4f:f1:93:94:8c:0f:
f4:88:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org