Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eUMiDI8VilEduyvswMOqKo0h3o8.roa
File: eUMiDI8VilEduyvswMOqKo0h3o8.roa (raw, json)
Hash identifier: WkiRfA/lUZLIlWNP2APcqra1bHxK8n/LOvR21Drpqxg=
Subject key identifier: 79:43:22:0C:8F:15:8A:51:1D:BB:2B:EC:C0:C3:AA:2A:8D:21:DE:8F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7995030454169FFB93050E7A8BF088
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eUMiDI8VilEduyvswMOqKo0h3o8.roa
Signing time: Sun 01 Jan 2023 22:35:17 +0000
ROA not before: Sun 01 Jan 2023 22:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.95.241.0/24 maxlen: 24
45.131.208.0/22 maxlen: 22
45.131.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:95:03:04:54:16:9f:fb:93:05:0e:7a:8b:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7943220c8f158a511dbb2becc0c3aa2a8d21de8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:54:d5:17:97:a6:1f:8d:36:fa:2c:92:5a:
75:e6:ac:14:8a:05:8a:93:9e:ba:2c:6d:61:27:7a:
09:a4:a6:2f:8a:72:fd:d7:16:66:99:b6:e1:7c:75:
54:89:33:33:14:7d:80:e1:7b:26:39:ed:da:44:84:
91:07:09:60:83:0b:e6:5e:c0:29:df:d1:ce:5b:47:
0e:3b:b4:a2:03:de:71:ec:f1:fe:18:04:08:56:51:
ac:40:0a:e7:ef:76:91:87:94:a0:61:05:81:15:29:
99:4a:12:06:10:68:ee:cf:13:d2:78:2d:87:fa:a7:
39:de:85:78:87:70:bc:78:50:b0:36:97:30:08:02:
76:ef:64:cb:e0:b2:16:e0:e7:83:bc:21:ea:d5:9e:
c7:ef:bb:2d:be:7a:33:76:ab:e3:2b:76:4c:9e:0b:
d8:38:fd:d8:dd:03:c6:53:90:cf:3c:0c:86:64:12:
19:66:a4:d5:51:ed:d9:ca:2d:9d:8d:14:5b:03:ec:
eb:16:95:ce:d5:81:ca:72:22:a4:70:bb:be:f8:69:
36:88:25:40:62:e9:9f:c6:2a:0d:7d:b7:56:76:cb:
af:e9:e0:50:c4:fd:6e:e8:f9:20:36:2b:c3:0a:f8:
31:13:1f:92:d4:48:c7:a5:b7:93:09:11:3c:dc:e3:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:43:22:0C:8F:15:8A:51:1D:BB:2B:EC:C0:C3:AA:2A:8D:21:DE:8F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/eUMiDI8VilEduyvswMOqKo0h3o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.241.0/24
45.131.4.0/22
45.131.208.0/22
Signature Algorithm: sha256WithRSAEncryption
45:da:9b:56:c3:9b:00:35:77:97:a7:c6:da:81:30:64:4e:bd:
a5:fb:bc:ff:73:92:14:b6:51:ba:21:64:ff:ed:5e:0e:86:73:
0f:60:85:19:75:ed:b4:20:99:0c:7c:1d:28:98:44:00:00:9e:
90:9a:ac:b1:a7:e4:4e:0c:7d:6d:0a:60:8a:a8:c7:81:69:86:
8e:2a:7c:e8:f7:3e:fb:6f:d9:8a:e9:7e:eb:a6:03:ba:f3:ce:
69:1e:16:50:cd:4b:7a:48:14:13:d5:f4:b2:f0:52:9a:b4:ee:
c6:8b:27:82:61:6a:1e:a4:b8:cf:8b:5e:41:3d:15:f3:44:35:
a3:a9:94:1e:89:f8:65:7d:00:bc:53:01:3d:c7:dd:92:07:85:
a9:c1:b7:63:fe:a2:22:1b:a0:b7:6e:be:f9:20:62:03:51:58:
5f:12:a6:ad:52:02:13:bb:2f:40:0a:ec:f8:4e:71:78:af:89:
05:fe:f2:71:10:40:96:cf:0c:68:37:f7:5a:89:e0:fd:37:92:
49:af:0f:33:0d:7e:29:eb:a7:82:86:e1:19:e7:b0:82:02:58:
ea:12:0b:fd:20:53:98:76:63:d2:2b:a9:a0:e0:22:df:b8:e4:
de:6e:ae:82:eb:1b:f4:6a:75:29:0a:0e:8c:27:fd:14:ec:2e:
90:c6:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org