Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eELnvZb2RKXK-cqpFMalX7X5u10.roa
File: eELnvZb2RKXK-cqpFMalX7X5u10.roa (raw, json)
Hash identifier: DgMJ2+tfGqH0zDw1OjS2EEOWe1okOOUUrUe68zPmtso=
Subject key identifier: 78:42:E7:BD:96:F6:44:A5:CA:F9:CA:A9:14:C6:A5:5F:B5:F9:BB:5D
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEC24EE0479D679F4B607F32EFDB4D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eELnvZb2RKXK-cqpFMalX7X5u10.roa
Signing time: Sun 01 Jan 2023 06:04:47 +0000
ROA not before: Sun 01 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197887
IP address blocks: 85.31.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c2:4e:e0:47:9d:67:9f:4b:60:7f:32:ef:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7842e7bd96f644a5caf9caa914c6a55fb5f9bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:2d:a1:10:f0:09:a5:1a:7e:01:e0:ac:43:
6a:cd:7b:8e:1f:6c:21:17:e2:c7:16:1e:fa:c3:25:
0f:fe:54:15:6f:9c:e9:7d:22:45:b2:85:98:18:bf:
00:d4:0b:38:23:27:bd:29:7c:e2:63:dc:43:ac:38:
84:3d:a5:c4:f4:fa:c9:f9:bd:d4:d8:d7:68:62:40:
f4:8b:59:67:04:2b:d4:fd:04:85:fc:61:31:9f:c9:
e6:4f:60:1d:c4:af:d5:bc:d4:9d:81:f6:1a:f7:44:
a2:e5:c8:46:8e:67:1f:7e:52:a8:3a:95:58:62:b9:
a1:a7:f4:ab:5c:23:3c:3e:da:02:1b:32:95:1d:68:
ac:36:a5:a9:05:cd:71:e3:21:d6:1e:ab:ac:f0:0c:
e0:47:e6:24:08:0c:98:c9:54:51:56:57:7a:10:57:
68:0f:dc:e6:01:26:cb:43:b3:8e:6a:b5:df:94:53:
cc:7f:51:c3:ae:7a:b9:79:3b:ef:da:e3:8b:f5:14:
6f:58:dd:71:4b:65:f2:4e:f8:c1:53:da:da:aa:c7:
0e:43:c3:56:fc:ef:f4:1a:66:6f:ca:f6:99:e4:f3:
c0:a3:5d:f0:4b:37:70:9b:12:be:ae:1d:dd:e9:94:
1e:8a:87:36:b9:64:71:ca:68:a0:d1:64:56:01:eb:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:E7:BD:96:F6:44:A5:CA:F9:CA:A9:14:C6:A5:5F:B5:F9:BB:5D
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eELnvZb2RKXK-cqpFMalX7X5u10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.250.0/23
Signature Algorithm: sha256WithRSAEncryption
66:45:e2:e5:9e:61:3b:7b:51:79:3c:b9:33:ce:a0:aa:01:ec:
52:47:16:f3:d7:61:ad:5c:11:d8:7b:0a:c9:0d:87:b0:c0:68:
d0:dd:ad:5f:30:6d:35:d2:ca:fd:4b:78:c9:2b:1e:f6:11:47:
e0:64:ee:3c:c9:3d:81:29:bc:f0:cf:b0:94:b4:f5:66:84:c7:
35:9f:cd:e8:af:00:24:71:9b:f8:aa:06:15:aa:88:a6:69:51:
2a:b3:74:70:06:df:0b:8f:f9:10:7d:8c:bb:0b:9b:aa:5c:6a:
e7:81:19:ea:eb:ef:fa:c7:66:19:24:95:89:78:62:28:0e:1e:
97:86:b1:60:f7:6e:2b:25:ca:55:51:35:27:5e:77:02:fe:ab:
a1:f1:5b:ae:f5:81:ab:93:3e:25:04:ac:e4:cd:5d:a9:db:55:
51:56:70:c8:78:67:74:81:63:7f:88:f2:3c:0c:b2:f9:8d:33:
4b:26:cb:80:09:e0:c7:a8:66:8c:4b:43:de:8b:dd:73:ef:86:
39:ce:b0:e9:6b:e6:3c:cc:0c:ea:03:74:4f:e4:d4:1d:dc:b9:
33:c7:22:3c:24:bb:f4:cb:33:1f:f4:a1:df:d7:ff:6f:11:53:
f9:5e:9f:b0:2c:5c:34:ff:3f:05:11:a7:eb:ec:e4:1c:54:3f:
08:76:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org