Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/eb-FoxXnqXQxJqdGY4kB77AMMVg.roa
File: eb-FoxXnqXQxJqdGY4kB77AMMVg.roa (raw, json)
Hash identifier: wTCn2uLAiLSttuQZmEIJjEjj5VXAYhg3fWZiNbOhz8Q=
Subject key identifier: 79:BF:85:A3:15:E7:A9:74:31:26:A7:46:63:89:01:EF:B0:0C:31:58
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0185AACE5C81664F2DA52A7D2BB14A139554
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/eb-FoxXnqXQxJqdGY4kB77AMMVg.roa
Signing time: Fri 13 Jan 2023 11:05:28 +0000
ROA not before: Fri 13 Jan 2023 11:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:ce:5c:81:66:4f:2d:a5:2a:7d:2b:b1:4a:13:95:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 13 11:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79bf85a315e7a9743126a746638901efb00c3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:8f:52:2d:57:46:0a:8e:b0:b6:f2:92:4c:
eb:7f:59:cd:c3:fd:a4:b0:c8:d2:d7:df:bb:ca:f2:
fb:e2:14:43:d5:1b:c5:5f:aa:bd:f8:94:fa:9d:4c:
fd:eb:e8:ed:b6:f5:30:28:d3:de:88:7a:a0:90:3f:
13:0b:68:8f:c6:a0:1e:c8:5a:79:5c:13:6d:75:19:
6e:a8:7b:f1:34:66:0f:d9:c0:b5:34:10:ff:4e:c4:
44:f4:21:67:91:55:f6:56:e7:de:63:ef:f7:28:07:
30:02:82:f7:6c:53:32:b2:11:fc:84:2c:c3:7b:5a:
82:90:4b:82:73:ca:24:8f:44:9d:77:05:b0:2e:1a:
7c:48:1f:e0:bc:f2:73:3c:df:f7:5c:b6:29:65:f4:
ad:bc:04:5a:59:56:bc:09:77:d9:dd:28:68:bf:38:
59:5d:79:d4:c5:81:f3:f8:d3:c3:79:a6:49:9d:88:
c0:e7:e5:8e:e7:ec:c5:ed:e2:6b:b9:0b:5c:6f:9f:
8c:30:fc:96:5c:46:f9:39:6a:c2:3d:0a:a8:22:96:
d4:a7:65:ee:12:b5:05:f8:bd:6e:2a:3a:2e:82:cd:
84:96:42:69:b2:84:f9:fc:ee:fe:46:e9:d2:92:08:
e4:a8:5c:20:6e:37:de:74:12:0b:58:3d:98:3d:68:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:85:A3:15:E7:A9:74:31:26:A7:46:63:89:01:EF:B0:0C:31:58
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/eb-FoxXnqXQxJqdGY4kB77AMMVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4c:ed:e0:51:5f:bd:1e:8f:12:81:67:1a:4f:7d:5c:5d:55:
c2:a1:83:c3:d4:6c:4b:42:e7:3b:de:00:9d:5a:0c:b3:67:1e:
ea:07:24:e8:f8:1d:a6:03:29:79:3a:46:bd:25:7f:57:15:70:
34:d2:1b:8e:f0:3c:d7:f6:76:b4:0a:a9:6f:a0:97:eb:40:5b:
79:23:d1:8c:40:e0:f0:90:c7:75:5f:01:bb:c9:9c:97:80:96:
a3:92:40:0d:8a:19:8b:ab:df:d5:c4:18:6b:04:a7:af:82:a2:
32:00:aa:ad:f8:f9:f5:e2:60:04:8d:5b:33:97:71:91:dd:20:
09:98:ee:dd:ff:2d:8b:77:f9:72:f9:b8:12:77:29:6f:f4:87:
ac:1e:84:9c:2b:18:77:9c:a3:f5:ff:db:86:3c:d7:c5:f5:89:
8a:04:25:f9:37:a3:07:c4:af:cd:4d:25:f4:23:ca:2d:45:71:
7f:a5:b3:ee:05:f2:90:08:78:f2:94:8f:07:62:c7:24:6e:9c:
81:ef:46:73:b3:be:59:5a:45:f4:6c:8d:73:89:bf:dc:e1:1a:
ae:e3:d7:20:fc:1a:61:d8:e8:03:e1:ab:b2:44:86:bb:96:c2:
3c:a9:88:70:f7:87:33:e5:8c:99:3c:ed:52:ac:58:ea:2f:81:
5b:e3:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:21 2024 by rpki-client on console-ams.rpki-client.org