Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/EHnPp3_7CJ5IjoX0vJEbW7WHv0w.roa
File: EHnPp3_7CJ5IjoX0vJEbW7WHv0w.roa (raw, json)
Hash identifier: 4v7+ohbcrJ2A4M1/dUduk4M5lwJx34zlHgaO/xdJHNc=
Subject key identifier: 10:79:CF:A7:7F:FB:08:9E:48:8E:85:F4:BC:91:1B:5B:B5:87:BF:4C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0188D96AA30306F96D51D2A6EE5DD6F781EE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/EHnPp3_7CJ5IjoX0vJEbW7WHv0w.roa
Signing time: Tue 20 Jun 2023 15:27:04 +0000
ROA not before: Tue 20 Jun 2023 15:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 185.236.8.0/24 maxlen: 24
45.86.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:6a:a3:03:06:f9:6d:51:d2:a6:ee:5d:d6:f7:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 20 15:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1079cfa77ffb089e488e85f4bc911b5bb587bf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:1c:d7:2a:65:6f:33:fe:44:38:f3:92:9d:
bb:77:5d:f6:bb:b0:e7:b6:e7:51:e3:05:0f:6f:c2:
a8:a5:ee:69:32:1e:a2:2f:0b:4a:a8:6f:9b:11:c5:
e8:4e:a6:b3:90:96:b8:cb:7e:73:d2:4d:d6:f4:a6:
2f:86:6a:d1:cf:99:99:01:52:ca:6f:30:fc:bc:0a:
d7:c5:15:df:b0:7e:d0:2b:8e:21:5b:d6:bf:c3:6e:
a8:28:a9:33:55:e8:d2:72:f9:3d:b7:d8:87:3c:32:
ae:69:50:d4:57:2b:00:3a:fb:5a:96:72:01:3f:22:
70:75:45:aa:ed:85:e7:eb:80:ba:21:d0:dc:80:12:
26:2a:c3:a9:8a:be:f1:54:b5:84:8b:6e:19:5e:ee:
fa:29:c1:cf:91:b2:11:23:61:9f:df:77:39:24:90:
2a:a6:b0:d6:62:b6:52:08:49:f0:0b:aa:67:d8:63:
8d:f7:43:93:f7:18:f6:51:5c:df:75:22:3f:2c:14:
c7:0c:df:2a:5d:a0:d9:3d:0c:3b:ab:55:96:4b:72:
40:62:72:12:43:27:ee:9e:9b:8e:6f:e3:dd:45:72:
1d:b9:0b:48:28:50:a7:aa:95:d2:06:60:7a:ea:86:
50:e3:8b:13:74:b9:ae:c8:a5:24:a0:55:66:47:41:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:CF:A7:7F:FB:08:9E:48:8E:85:F4:BC:91:1B:5B:B5:87:BF:4C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/EHnPp3_7CJ5IjoX0vJEbW7WHv0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0/24
185.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:61:6b:1f:6a:fd:ac:9c:12:4c:db:04:5a:b7:c0:5f:35:
4e:b5:ad:fb:41:75:7e:5e:e3:8e:b6:38:07:cb:d2:6b:81:9d:
ad:e5:c9:11:82:8b:57:6c:5e:55:05:af:4e:66:ad:fe:80:10:
d9:64:83:b0:27:d4:f9:67:76:f8:a9:46:21:7f:a6:cd:53:22:
83:fa:46:c4:cc:b9:42:bd:35:e6:eb:d0:b1:f2:06:41:a8:fa:
8c:2a:58:ea:17:45:7f:6b:61:4c:ff:73:f0:d9:37:57:06:05:
e1:15:5b:89:c0:f6:58:dd:b9:fa:70:a4:6d:2e:28:52:04:e2:
9a:57:53:96:4e:f8:09:a2:94:29:d8:43:98:e4:5f:39:81:2a:
ac:80:00:73:75:08:20:cb:4b:b6:e5:05:0d:ee:19:1b:95:6c:
fd:7b:4d:4d:b9:31:28:51:4f:8a:4e:43:e4:15:cc:80:cd:56:
f2:bb:b0:33:08:72:93:51:17:54:b6:2e:8f:59:4e:1d:1c:db:
1c:1c:86:d4:44:93:56:f5:fc:a0:0d:bf:43:1b:3e:9e:a5:f9:
61:db:07:59:62:3f:b6:99:3f:c4:29:cf:c6:c7:77:b4:a8:3f:
a5:4a:76:01:18:e5:d5:37:57:26:d3:3a:38:8c:c0:37:04:46:
ab:54:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:27 2023 by rpki-client on console-ams.rpki-client.org