Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ETE-nYrAsgkvauba4wXKcyVCVb0.roa
File: ETE-nYrAsgkvauba4wXKcyVCVb0.roa (raw, json)
Hash identifier: dbmTGUZ6HHZ7pGZxYM1m0RNrFz3Ke8bkVsAvEhqM+wI=
Subject key identifier: 11:31:3E:9D:8A:C0:B2:09:2F:6A:E6:DA:E3:05:CA:73:25:42:55:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193179F62F173F44041B07F4041B9413ADE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ETE-nYrAsgkvauba4wXKcyVCVb0.roa
Signing time: Sun 10 Nov 2024 19:49:01 +0000
ROA not before: Sun 10 Nov 2024 19:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
94.156.10.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 16:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:17:9f:62:f1:73:f4:40:41:b0:7f:40:41:b9:41:3a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 10 19:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11313e9d8ac0b2092f6ae6dae305ca73254255bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:a4:1c:0a:b7:c6:2e:f0:17:77:97:78:a1:
31:ec:8f:1d:f1:9b:87:97:b2:3e:9e:e1:0c:cf:b6:
7f:0e:9f:9b:ae:11:6a:5f:5f:68:91:10:c6:0c:fc:
a8:c4:4c:6a:7b:28:d6:c0:89:ab:5f:e3:18:8f:57:
7f:ab:6d:b5:35:72:95:5b:f9:40:81:40:93:76:a6:
9d:b0:f3:53:a9:d7:62:36:9e:22:4b:80:0e:9f:f2:
7a:7a:b5:8d:2f:34:a0:b4:51:9e:40:ef:ba:f3:e1:
9c:1e:61:ce:a9:1a:1c:ec:0c:95:0d:a9:fb:d2:f9:
c7:a8:76:bd:7b:69:1b:95:bc:bf:7e:e2:60:de:8f:
c8:de:d2:11:cc:63:13:1e:21:c5:f0:a7:bf:e7:0c:
72:fe:f8:46:da:9d:16:4f:ff:a4:e2:06:98:0c:85:
aa:85:00:82:22:ee:dd:c4:4d:22:2b:72:9c:6c:0c:
cc:1b:78:a8:e9:5b:e1:37:f3:dd:07:3d:13:d0:45:
97:59:bb:e9:b2:e8:1b:4f:3c:0c:53:96:b0:8d:da:
13:60:9c:33:c1:08:60:50:21:e6:36:74:e1:72:bc:
a2:a5:c6:6a:7e:79:db:b4:b6:6f:87:48:a0:e5:f3:
b3:3f:32:0b:25:c6:27:a4:fb:dd:81:c7:3b:2e:07:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:3E:9D:8A:C0:B2:09:2F:6A:E6:DA:E3:05:CA:73:25:42:55:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ETE-nYrAsgkvauba4wXKcyVCVb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
94.156.10.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
92:17:57:6d:cb:4e:d3:72:be:64:8e:56:39:97:a1:cb:2b:3f:
45:b0:54:b3:1e:d9:a7:c7:a9:8a:fa:86:39:cc:11:ce:08:2b:
34:c6:c4:ff:0d:e3:ce:48:6c:b4:d6:02:7b:c4:f7:62:36:14:
07:95:ed:73:0f:70:97:fb:29:c5:1a:b7:b0:6b:03:5c:11:1a:
87:26:da:ec:b6:7f:e2:f2:6b:0b:c6:04:6a:3f:7f:57:8b:7c:
c0:cf:cb:6d:5b:50:b1:28:52:2f:1c:4a:22:b8:f1:b8:ca:61:
a5:64:f2:57:b3:aa:a4:57:1c:08:7d:64:e1:eb:d1:a2:f7:65:
b9:3c:83:4e:e4:cd:e3:d3:6c:d9:ea:2a:36:54:14:eb:ab:69:
f3:39:96:d2:54:4a:a3:12:79:e9:5b:73:ef:7b:cf:f8:7a:1c:
7e:8f:3d:f9:1c:66:d6:0f:b8:2f:4b:42:63:f1:49:3d:ab:29:
d5:ed:a0:fa:62:fa:34:80:90:c9:58:4b:37:d5:06:cb:20:53:
3b:09:ff:56:41:cb:03:7a:95:84:3c:13:c2:34:f6:3e:e7:6e:
55:d1:40:c0:a8:6d:6b:97:fd:2c:58:48:16:7d:11:e2:63:0d:
21:be:b6:9f:66:74:c8:e2:86:53:5f:13:b6:64:53:d8:ed:1e:
86:a5:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:39:14 2024 by rpki-client on console-fra.rpki-client.org