Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/E_z-sOVOX6oKFa6msj1Plsjvlx0.roa
File: E_z-sOVOX6oKFa6msj1Plsjvlx0.roa (raw, json)
Hash identifier: adAlkAkVY4fDtZm78CEW2cWU/MPjaisavbfS2YrWiuw=
Subject key identifier: 13:FC:FE:B0:E5:4E:5F:AA:0A:15:AE:A6:B2:3D:4F:96:C8:EF:97:1D
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0185B902D33ADA4B30A2C78CD1FE71298DE2
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/E_z-sOVOX6oKFa6msj1Plsjvlx0.roa
Signing time: Mon 16 Jan 2023 05:17:28 +0000
ROA not before: Mon 16 Jan 2023 05:17:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50590
IP address blocks: 93.125.1.0/24 maxlen: 24
217.21.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:02:d3:3a:da:4b:30:a2:c7:8c:d1:fe:71:29:8d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 16 05:17:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13fcfeb0e54e5faa0a15aea6b23d4f96c8ef971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:04:10:ee:f9:fe:16:16:31:ee:14:78:8f:
d0:89:5a:3d:0b:b8:d4:cd:8c:f8:ba:e3:e5:64:8e:
e0:1f:95:7a:71:f3:fb:03:4d:e5:2b:9d:8b:24:33:
69:36:92:47:7a:19:40:5a:74:e9:69:3d:4b:91:99:
74:d9:98:29:1c:58:18:40:51:5c:5d:62:13:45:65:
d6:57:3c:90:ce:3d:86:6d:a9:e0:bf:ba:f1:e9:02:
ef:71:45:8b:7e:fa:85:5b:2f:c4:fb:59:10:71:5b:
2a:a1:bb:a3:5a:6e:d5:ba:d9:0b:95:93:66:00:57:
3a:54:b5:e5:8f:0e:8f:83:7e:4c:db:92:e9:55:cc:
f0:f3:b2:a8:81:56:34:22:65:4e:5e:f1:06:30:eb:
99:7f:38:cd:dd:59:1c:eb:f6:2d:ec:83:38:46:a7:
e6:84:6b:24:6f:de:9a:e7:93:83:1a:56:0d:fd:13:
75:0d:59:5a:74:6a:04:b6:c2:aa:b8:74:00:79:36:
b5:99:30:54:d4:f3:dc:ac:6f:61:73:8e:b0:da:94:
4f:89:8e:73:6a:58:9a:e2:46:ce:d0:7b:11:f0:6e:
10:ae:bf:8e:3b:11:f5:d3:fc:13:58:ca:0f:dc:70:
2b:1d:bd:62:61:93:c1:ba:51:f6:78:0e:ea:c1:3b:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:FE:B0:E5:4E:5F:AA:0A:15:AE:A6:B2:3D:4F:96:C8:EF:97:1D
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/E_z-sOVOX6oKFa6msj1Plsjvlx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.1.0/24
217.21.53.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e6:76:e8:64:3f:60:95:18:ca:1e:71:1d:df:df:07:94:e8:
14:8c:78:1f:01:60:dd:d8:e4:93:22:02:07:35:8e:3e:a3:a2:
02:2e:8f:ac:78:15:e9:c7:51:4e:92:13:c7:e3:43:e5:8c:be:
e1:73:3b:43:b3:6d:75:4d:78:7a:05:d6:54:7d:58:22:89:d4:
d8:27:fd:df:2c:78:05:86:a2:3c:40:15:34:e2:78:94:25:b1:
18:8f:9e:bf:d8:84:fd:85:0e:49:24:c0:26:8d:9a:27:3a:36:
80:54:67:79:73:cb:d5:b5:66:fb:0a:fc:de:85:3a:83:78:97:
3b:d4:cc:46:b2:81:a1:f5:73:55:2b:64:8d:fc:1d:61:06:76:
64:55:cd:80:a9:f5:d7:49:48:46:24:1d:3f:19:bc:87:ed:b3:
0c:5f:84:f6:3a:cf:e5:24:fd:ec:2e:e0:4f:ed:83:66:8e:3a:
c7:4d:c4:c3:c4:f1:c7:b4:0c:f4:f5:6e:ce:a2:f0:aa:e6:1d:
bd:2e:b6:fe:80:bd:11:f1:b6:0f:95:c2:72:e8:e3:c5:f0:c7:
89:2b:7c:35:d1:d6:00:fc:37:b2:c2:ae:69:4f:6c:d4:12:3c:
15:24:6d:b1:0b:a7:0f:de:ca:7e:7c:27:58:3f:ff:a9:ac:2e:
1f:22:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:50 2024 by rpki-client on console-ams.rpki-client.org