Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/EQWZCT3DDR-Y-unlOfHkEfeMs-U.roa
File: EQWZCT3DDR-Y-unlOfHkEfeMs-U.roa (raw, json)
Hash identifier: /BpDYIE3IVSA0SyIjvk8NkU604wW/NCvtWMVFdykBqw=
Subject key identifier: 11:05:99:09:3D:C3:0D:1F:98:FA:E9:E5:39:F1:E4:11:F7:8C:B3:E5
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 01860D276B18000B1A4EDFCE3AFAEC909764
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/EQWZCT3DDR-Y-unlOfHkEfeMs-U.roa
Signing time: Wed 01 Feb 2023 13:25:32 +0000
ROA not before: Wed 01 Feb 2023 13:25:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 84.23.47.0/24 maxlen: 32
84.23.51.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Mar 2023 07:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:27:6b:18:00:0b:1a:4e:df:ce:3a:fa:ec:90:97:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Feb 1 13:25:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=110599093dc30d1f98fae9e539f1e411f78cb3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:91:8c:a0:89:32:47:a9:8e:82:2f:30:de:
30:02:00:55:64:d3:eb:23:36:4a:ec:3b:bc:4d:d5:
64:bd:8a:bd:d7:f2:87:c8:40:71:4b:91:96:3f:c5:
8b:1b:ba:54:e4:0b:66:37:90:f5:60:f4:87:a4:b1:
6f:19:41:b8:35:f9:e7:e7:73:cf:96:d7:c7:82:7a:
6b:76:09:65:b8:a0:2c:bf:39:95:52:52:73:ee:8b:
89:3d:29:fa:fe:7c:04:19:9d:a4:52:0b:e5:59:01:
1f:f0:92:8c:26:7d:89:40:e8:17:04:c6:0c:8f:7e:
7e:16:bc:d8:46:4e:51:1e:8e:73:e3:cd:43:40:5a:
d4:a3:ed:f3:8b:8b:f6:02:e1:19:89:34:b7:76:25:
6a:14:f6:43:77:1f:1d:6d:ae:04:b3:ac:8d:5e:4b:
ce:fd:f8:16:43:f7:58:70:b2:93:ff:68:a0:91:46:
b8:9b:c2:61:96:40:12:fe:88:0c:f8:ec:06:46:52:
4e:7d:79:31:66:bd:2e:fd:fd:97:f6:96:05:ce:e1:
73:ac:c9:98:e6:98:06:bc:3a:fd:2f:44:fc:e8:91:
fc:ec:ab:77:2b:bc:15:36:9d:9b:7e:cc:89:fb:41:
0e:03:96:d7:48:f8:c1:57:5b:35:ef:d9:c9:1f:70:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:05:99:09:3D:C3:0D:1F:98:FA:E9:E5:39:F1:E4:11:F7:8C:B3:E5
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/EQWZCT3DDR-Y-unlOfHkEfeMs-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.47.0/24
84.23.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:44:e6:67:8d:06:e2:b3:8c:7e:92:e7:75:52:64:dd:06:03:
60:d0:c1:a5:e9:2c:b2:71:9b:9a:26:c9:21:a6:af:31:88:4c:
84:bd:5b:57:25:07:94:e0:98:17:2f:f8:0e:f9:1b:12:3b:f3:
cb:4a:01:a5:ee:8a:ed:51:b2:28:80:8d:b1:4f:6d:2a:db:9b:
bf:51:6a:3f:cb:06:58:f6:19:e0:cf:a1:9d:cd:68:65:42:3b:
34:ea:41:1a:6a:a6:6f:c1:5a:cb:d7:a0:90:fd:15:30:76:b4:
08:8e:89:ec:2f:7b:46:00:f9:85:b0:9c:40:d6:ca:d9:19:82:
d8:b5:1f:29:dd:3c:93:37:03:e9:61:dc:9b:58:63:18:41:e9:
7e:37:f0:00:fd:f8:ea:75:c7:c3:f6:b7:31:aa:ac:3b:5d:17:
b0:93:29:21:23:1a:15:fa:39:a5:c3:36:22:70:bf:01:b4:cd:
08:80:73:54:81:19:85:b7:a5:b0:5e:a6:ab:7c:73:b6:05:41:
91:ed:83:c8:09:49:98:9a:32:f1:78:b1:85:c8:1e:2f:fc:02:
96:6c:d0:89:00:45:62:5d:47:da:3e:45:83:4c:1f:20:60:18:
ba:ac:29:98:bd:d6:7f:38:2b:dc:7d:b9:ea:7e:f0:5e:fb:c1:
43:b1:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org