Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/ESKWrBpMJn7IlYaTQwL1qPaKBo0.roa
File: ESKWrBpMJn7IlYaTQwL1qPaKBo0.roa (raw, json)
Hash identifier: IW5Pnl1E9xw5Vyex+XmI1myhE3rxf4/hl56dz+k4jmQ=
Subject key identifier: 11:22:96:AC:1A:4C:26:7E:C8:95:86:93:43:02:F5:A8:F6:8A:06:8D
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 01865ED6BE678E9B2AF9ED9EB63EBE18A524
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/ESKWrBpMJn7IlYaTQwL1qPaKBo0.roa
Signing time: Fri 17 Feb 2023 10:06:17 +0000
ROA not before: Fri 17 Feb 2023 10:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48544
IP address blocks: 92.245.174.0/23 maxlen: 24
79.143.112.0/22 maxlen: 24
79.143.116.0/24 maxlen: 24
79.143.118.0/24 maxlen: 24
79.143.117.0/24 maxlen: 24
79.143.122.0/23 maxlen: 24
79.143.120.0/23 maxlen: 24
79.143.119.0/24 maxlen: 24
89.189.48.0/22 maxlen: 24
92.245.172.0/23 maxlen: 24
92.245.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:d6:be:67:8e:9b:2a:f9:ed:9e:b6:3e:be:18:a5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Feb 17 10:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=112296ac1a4c267ec89586934302f5a8f68a068d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:60:99:e7:41:49:b9:88:1c:57:93:67:ee:d2:
b6:3b:4a:96:3a:b0:8f:dd:a1:37:e2:c4:9c:09:26:
fe:4e:5f:2d:1c:9c:0f:4a:e3:e5:24:78:8f:25:3a:
b4:67:54:bf:e8:97:77:90:ef:99:50:01:53:99:47:
36:ea:94:0d:5c:40:57:6d:ae:b5:52:ce:80:16:eb:
10:5b:ad:12:06:33:62:ec:85:a6:52:a5:74:da:cc:
8f:a6:32:24:cd:6e:b0:c7:97:a5:60:ec:5e:f2:5e:
ee:0e:5c:50:e9:e4:f7:dd:17:ed:c2:f1:e8:af:44:
1f:96:56:ca:d1:75:30:8f:87:c7:ee:c0:0d:a9:28:
95:a1:af:81:cc:0f:65:41:29:2b:6b:50:46:3d:03:
1a:db:fe:c7:7a:10:d6:7a:82:1b:a6:49:2f:5d:93:
2d:e9:c2:e8:d2:f9:2f:94:21:ba:43:4b:31:e9:a2:
f9:5e:c2:fc:9f:b8:73:87:c2:6e:2b:6e:56:72:c5:
ac:10:57:fc:1f:03:b6:20:50:d5:2b:5d:e6:12:02:
02:c3:6e:2b:f6:fd:65:b5:b5:e5:1d:94:5d:87:fc:
54:58:fc:d0:58:19:c3:93:c4:0a:4a:b3:97:6e:20:
70:ab:5c:e4:88:0e:12:1a:12:ea:af:ab:36:ed:7d:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:96:AC:1A:4C:26:7E:C8:95:86:93:43:02:F5:A8:F6:8A:06:8D
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/ESKWrBpMJn7IlYaTQwL1qPaKBo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.112.0-79.143.123.255
89.189.48.0/22
92.245.170.0-92.245.175.255
Signature Algorithm: sha256WithRSAEncryption
36:20:cf:c2:12:1c:a2:dc:3b:1d:9d:ce:0d:a9:e3:44:a5:98:
23:d2:44:7d:a2:d4:3f:6f:40:70:ec:60:d0:4b:b9:54:94:5d:
10:97:1c:33:99:59:b5:bd:6b:d4:03:ea:38:22:e3:92:dd:17:
56:a7:81:bc:b0:34:c1:c6:1b:12:dd:58:e6:55:7d:c4:72:0a:
4f:77:33:9a:4d:28:c8:40:e6:71:5f:65:b8:ca:4f:ec:5b:46:
b1:d6:e5:90:e9:4e:44:5d:97:bf:76:19:08:71:23:75:02:d9:
fa:71:83:ad:8a:c5:7e:51:2e:a3:01:1c:d0:d7:17:22:d1:41:
f6:ed:58:c4:b9:08:5f:06:14:21:c8:55:44:f3:62:bf:7c:6f:
26:39:49:a6:c9:ac:2f:7a:73:52:b9:f4:6a:9e:ef:82:b8:85:
9d:34:a4:06:15:0f:19:ad:60:34:99:e4:9c:c9:78:c0:94:ef:
13:45:7f:37:48:8d:0b:22:5b:60:f1:fd:a5:22:39:47:8d:eb:
68:08:cc:17:2d:39:b8:cb:69:a1:0a:67:4e:61:95:76:a5:8c:
68:7e:4e:69:5e:32:b8:29:aa:45:29:f2:b7:85:6e:48:d5:28:
a8:3e:58:33:de:88:fa:be:ba:a0:85:a3:04:5e:f1:9e:94:da:
2e:da:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org