Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/EY8mkGxEuV9Iz7IHWR7Srf0yTt8.roa
File: EY8mkGxEuV9Iz7IHWR7Srf0yTt8.roa (raw, json)
Hash identifier: Hf/q+ZPwiT3PdBCSN4ppupiSmoL6Be6NHMmYCCa620Y=
Subject key identifier: 11:8F:26:90:6C:44:B9:5F:48:CF:B2:07:59:1E:D2:AD:FD:32:4E:DF
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B67DBF332007C63E38CF40E17C69AA
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/EY8mkGxEuV9Iz7IHWR7Srf0yTt8.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211227
IP address blocks: 193.38.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 10:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7d:bf:33:20:07:c6:3e:38:cf:40:e1:7c:69:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=118f26906c44b95f48cfb207591ed2adfd324edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:91:1c:99:3c:75:56:17:08:cc:a6:36:12:
35:c0:76:ba:da:cb:6f:a7:6e:06:b6:f2:b8:00:5f:
fd:24:e2:87:47:b4:96:5f:74:7d:36:a6:e3:e0:0a:
ae:6e:4b:1e:00:8d:7f:6d:9a:a8:02:4f:43:4b:af:
93:44:72:69:87:76:7a:20:55:1f:4f:9a:9a:77:65:
88:58:04:03:b9:ba:9d:bb:de:45:df:b3:5f:73:b9:
e4:02:2e:9e:84:cf:47:31:01:71:c2:0d:49:6b:2c:
96:03:2d:df:8b:6f:f1:1d:69:0e:25:c2:72:e1:49:
73:98:6b:1d:4e:2b:2c:2d:c6:9f:c6:70:31:7d:0f:
3f:43:9f:3e:c6:60:b1:cf:59:f7:0d:81:22:b5:ed:
4b:98:b6:4d:f6:a0:3d:7b:42:0f:fe:b2:d3:ed:a2:
6a:b4:76:bc:56:ce:bb:09:99:fa:dd:7f:46:e5:3c:
65:01:6d:ae:49:c9:56:74:99:59:0f:e7:39:d5:73:
3c:6d:6f:d5:22:cf:ff:62:f4:81:41:5e:a7:f4:cf:
98:86:4e:7d:a7:03:06:09:09:c9:14:f1:17:cd:9f:
eb:42:5b:e4:b6:56:08:66:7f:b2:6f:49:e6:67:e1:
d7:32:88:92:ce:19:97:cf:b8:7b:5a:30:52:7f:6e:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:26:90:6C:44:B9:5F:48:CF:B2:07:59:1E:D2:AD:FD:32:4E:DF
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/EY8mkGxEuV9Iz7IHWR7Srf0yTt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e2:37:94:cf:4c:b5:b8:e2:f0:cb:d2:58:08:ec:c3:97:9b:
b2:3d:69:6e:8a:f0:d6:5c:4c:83:c8:46:91:95:28:73:f8:31:
2a:9a:68:a4:a0:a4:14:96:fc:a6:57:63:f6:03:17:1c:90:de:
e2:25:00:74:ff:12:87:b3:17:1a:c2:92:cd:8a:21:0a:3c:dd:
88:70:c5:7b:06:8b:21:65:7f:6a:cc:ec:c2:99:7c:bf:83:bd:
df:c7:75:7e:82:c8:07:c3:7a:65:1d:ea:19:a4:04:1c:01:53:
18:c1:c7:b8:a3:dd:9c:f2:bf:89:5c:d2:07:1e:5f:2a:91:d5:
73:b4:8f:fa:8b:9c:25:56:d5:c8:8d:e2:83:2c:72:b7:3c:aa:
70:22:3c:27:9e:95:96:65:48:41:ef:72:5b:ed:fc:28:ba:fc:
45:cb:b3:4a:b0:9b:62:03:79:1a:5c:b5:eb:f3:8c:dd:c1:74:
2f:93:51:ff:22:21:c5:00:6d:05:5b:6c:fa:07:50:46:b4:dc:
e1:49:7a:a3:ae:b3:43:14:0e:29:85:f9:78:23:1c:09:0d:55:
f2:a8:37:e7:ff:e7:36:a8:89:b1:50:d8:a9:b0:33:6c:67:c3:
b0:95:09:9c:2d:13:51:6c:4a:c3:af:5b:df:f0:84:8a:29:cf:
77:1e:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 13:16:16 2024 by rpki-client on console-ams.rpki-client.org