Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/eZOOMBZg0MJq76F76Fl4ru9XZpQ.roa
File: eZOOMBZg0MJq76F76Fl4ru9XZpQ.roa (raw, json)
Hash identifier: bAFWwLfWXgvoyDz2VDF7c/0U5ALmtlW3hqJenToiT+I=
Subject key identifier: 79:93:8E:30:16:60:D0:C2:6A:EF:A1:7B:E8:59:78:AE:EF:57:66:94
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018679C67EA2F068D6096F057918EFCF267F
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/eZOOMBZg0MJq76F76Fl4ru9XZpQ.roa
Signing time: Wed 22 Feb 2023 15:38:17 +0000
ROA not before: Wed 22 Feb 2023 15:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 185.102.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:c6:7e:a2:f0:68:d6:09:6f:05:79:18:ef:cf:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Feb 22 15:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79938e301660d0c26aefa17be85978aeef576694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:cd:d6:82:1d:27:c8:52:a3:8c:68:2d:6c:
03:e1:e5:b8:67:d1:fb:ca:ac:35:f5:89:f0:a6:16:
86:02:90:36:29:03:1d:da:88:38:09:9c:17:b1:7f:
7a:f7:29:bf:b3:56:c2:9b:7d:7d:a5:64:2d:b7:03:
72:89:47:d5:cb:5d:c6:8e:53:b1:a7:94:73:b8:45:
e7:58:4f:07:04:e7:91:51:ce:89:87:e1:cc:7e:63:
64:05:97:d0:7f:19:1d:39:b1:4e:f7:c3:be:56:20:
60:67:21:b9:f3:db:c5:0d:e7:d4:93:f8:0e:0d:ca:
ff:a0:54:2e:6f:0c:ba:4c:16:ab:73:d6:7c:8d:e5:
3e:d8:32:62:25:18:58:e0:57:e4:ae:bb:44:55:e1:
77:c2:fa:1b:46:e6:f0:49:7c:b3:e4:50:8a:7e:5e:
70:71:ce:2b:3c:a2:62:a3:5e:0d:67:0b:1f:62:5c:
73:6b:ce:f5:89:45:e0:e2:07:b0:15:9b:22:de:d0:
68:e3:55:bf:34:a9:60:ea:c9:94:af:cb:82:d5:93:
c2:c8:22:a1:c3:32:db:4d:2e:a3:39:f3:1e:95:97:
71:89:ce:45:ea:c2:72:87:53:0f:e6:81:cb:0b:de:
15:95:71:9a:87:80:97:75:d0:b4:42:0a:0c:0c:9a:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:8E:30:16:60:D0:C2:6A:EF:A1:7B:E8:59:78:AE:EF:57:66:94
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/eZOOMBZg0MJq76F76Fl4ru9XZpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.172.0/22
Signature Algorithm: sha256WithRSAEncryption
29:98:b7:89:39:d0:4c:f7:9f:93:ea:45:57:fe:2c:1b:7f:9c:
3e:36:96:f5:73:5e:b5:6e:13:f0:b0:14:7d:f9:51:7f:66:7d:
ab:5a:0e:62:4d:4a:c6:aa:e6:5d:bb:79:67:9c:51:28:23:95:
be:42:b3:65:eb:15:bf:1b:44:c4:64:7c:59:14:b8:b9:95:bf:
b2:89:e8:06:f6:3d:e2:41:58:2b:c0:bc:bb:56:67:32:0a:e9:
20:6e:7f:dd:4f:46:ee:71:5b:c5:1e:30:c8:dc:c1:5c:8a:93:
83:a3:88:69:e9:48:a9:dc:66:21:48:3b:a6:f3:8a:dd:11:a4:
40:94:d4:7d:c5:19:23:8f:9b:9d:74:1b:cd:20:85:20:5e:5b:
24:44:d5:d7:f0:f5:f0:c2:d1:4a:a3:15:04:98:c6:e8:31:c8:
a3:4d:b8:93:ea:cc:3f:a6:59:c7:da:98:ce:ab:8e:3e:5e:e2:
66:58:dc:a3:b8:61:68:8d:4e:1c:e2:93:d9:f3:e5:39:89:8d:
5a:38:c0:96:71:d0:fa:39:c9:2f:9e:37:76:2e:00:ab:98:88:
7e:8b:9a:63:ba:3c:57:c4:72:b8:2c:e3:1d:4e:a8:11:06:fa:
cb:54:26:7e:3e:ae:a8:43:4e:e4:ac:9e:06:e5:4c:d0:d6:ee:
5c:80:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:21 2024 by rpki-client on console-ams.rpki-client.org