Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/eygXB1wUuQdGaKEwmQgTbDFgbuQ.roa
File: eygXB1wUuQdGaKEwmQgTbDFgbuQ.roa (raw, json)
Hash identifier: JwJ7YFcs2mZac7qAibT2+25b5+LW4wlmDPiUB3QiMYA=
Subject key identifier: 7B:28:17:07:5C:14:B9:07:46:68:A1:30:99:08:13:6C:31:60:6E:E4
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018B4969DB4CA34CEB4FA1F211E0CEA9E967
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/eygXB1wUuQdGaKEwmQgTbDFgbuQ.roa
Signing time: Thu 19 Oct 2023 19:29:16 +0000
ROA not before: Thu 19 Oct 2023 19:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39130
IP address blocks: 195.5.124.0/24 maxlen: 24
195.5.124.0/23 maxlen: 24
195.222.124.0/24 maxlen: 24
195.222.124.0/22 maxlen: 22
195.222.125.0/24 maxlen: 24
195.222.126.0/24 maxlen: 24
195.222.127.0/24 maxlen: 24
2a10:d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Nov 2023 10:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:69:db:4c:a3:4c:eb:4f:a1:f2:11:e0:ce:a9:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Oct 19 19:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b2817075c14b9074668a1309908136c31606ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:a9:6b:55:1c:1b:56:02:0d:08:00:6a:0a:
c9:a5:fa:2e:4f:7d:cf:05:34:cf:4c:2f:97:0f:7d:
a3:07:28:ae:c2:dd:5f:b6:cb:c2:f7:7c:88:71:a6:
b0:3d:6e:4e:f0:9f:74:d1:99:fe:8c:52:aa:2b:f9:
97:dc:8e:d1:fc:8e:2b:cb:bc:8d:4c:88:0a:7b:1f:
04:be:a9:28:2d:f4:6f:44:53:b7:c5:2a:07:9f:8c:
dc:c4:5f:ac:e1:ce:40:33:b2:27:f2:56:e3:f5:71:
76:f5:b5:d3:5f:ed:d9:ae:7c:02:d8:02:9a:60:db:
82:d8:44:2f:7f:36:72:20:18:7a:91:49:31:21:fa:
e5:79:db:27:ba:56:f4:18:28:40:42:3a:f0:5c:1c:
29:f1:f5:f4:0f:31:e8:0e:7a:90:09:ee:6c:05:9b:
14:d6:09:d3:e7:1f:70:6b:13:1a:ae:06:ba:9d:f7:
d1:ed:9d:f8:1e:0a:72:b0:6e:0a:9f:4c:ac:4a:58:
88:8f:e2:2b:d7:5a:c8:88:b7:b1:b1:7f:93:fb:a4:
50:36:e6:d6:49:53:91:9a:81:80:fa:3f:c6:68:26:
ad:e1:89:e4:d4:34:b8:2f:ae:67:9a:1d:b3:50:16:
cc:e3:1a:1d:2d:e1:45:5b:6b:98:de:6e:53:2a:a2:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:28:17:07:5C:14:B9:07:46:68:A1:30:99:08:13:6C:31:60:6E:E4
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/eygXB1wUuQdGaKEwmQgTbDFgbuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.124.0/23
195.222.124.0/22
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
22:85:41:d7:83:82:88:3e:2e:79:51:ad:72:92:79:4e:66:4b:
02:98:c0:25:5c:0b:ef:2b:8a:e9:59:ac:1f:e3:32:8a:9b:7a:
9f:c7:09:2b:0e:d4:00:99:35:b1:d8:2d:ab:d6:34:0e:85:30:
13:56:3f:3a:f3:b1:f8:61:4a:a5:db:b1:a5:45:56:4d:5f:6c:
e5:0c:51:5a:f9:45:bd:bd:1f:91:cb:ee:32:4b:47:84:96:a3:
ab:a1:5e:fa:e8:16:44:cf:70:8b:6c:33:85:5a:55:6d:26:08:
17:d3:77:ce:a9:1d:81:e4:69:18:c1:12:29:3f:f7:d8:01:6a:
ce:a9:25:ef:42:33:62:53:79:45:53:37:4e:62:05:7b:3c:0c:
a7:39:c3:15:a0:07:4e:aa:14:e7:21:49:2b:0e:e7:7c:0f:75:
63:bd:cb:89:98:22:65:88:2a:fa:f2:d1:29:0e:82:48:a9:75:
5e:d1:0a:ea:da:0d:e0:39:8f:e9:5d:7e:93:57:37:d9:07:00:
32:f2:60:c1:f5:7c:41:a6:91:42:19:8c:3d:f4:59:b0:2e:4d:
9a:fd:03:c3:26:43:de:eb:a9:5e:36:a8:12:be:4b:37:50:e0:
4e:8a:19:78:23:b2:df:d1:a5:c4:d1:74:f6:68:5d:0e:60:82:
03:fa:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org