Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eNPoUQEphmS5gyGTvg6jE4FnyKQ.roa
File: eNPoUQEphmS5gyGTvg6jE4FnyKQ.roa (raw, json)
Hash identifier: MV4hwj0DL5TLg0Bmjh86nWfwqG3h79p8vPDU+ySXk7U=
Subject key identifier: 78:D3:E8:51:01:29:86:64:B9:83:21:93:BE:0E:A3:13:81:67:C8:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1F3514EF510F52FFCC3B68E497B74583
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eNPoUQEphmS5gyGTvg6jE4FnyKQ.roa
Signing time: Thu 30 Nov 2023 07:50:21 +0000
ROA not before: Thu 30 Nov 2023 07:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216181
IP address blocks: 94.156.6.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:35:14:ef:51:0f:52:ff:cc:3b:68:e4:97:b7:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 30 07:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d3e85101298664b9832193be0ea3138167c8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ec:79:fa:b5:e4:be:d6:ae:ee:47:07:f7:17:
98:81:7d:44:78:6f:e5:74:e1:0a:8c:66:9b:3b:d7:
4d:9f:3c:39:3a:4f:40:d4:6f:b2:d2:62:d2:d3:16:
03:50:c1:40:4b:5c:f8:a2:b2:45:10:0a:7a:60:cb:
f2:89:d5:3e:86:5a:26:b0:77:d3:98:cd:be:11:c9:
6e:61:99:17:0b:64:4e:3c:24:6a:9e:2a:a3:05:8b:
03:70:64:8d:d1:30:ab:99:79:ae:3c:d1:69:b9:aa:
81:82:48:bd:05:4e:c6:7e:49:05:ec:04:9d:3b:3d:
33:9b:cd:30:a6:2b:df:1f:ff:69:ac:1b:01:f1:af:
c0:1d:d7:8a:76:49:9f:78:72:3f:cc:86:e0:9d:48:
5f:c6:31:63:fd:b1:d4:fd:2a:24:6f:78:1a:ed:61:
05:37:97:13:2b:36:ea:50:88:d8:ad:a7:b6:ab:0b:
6c:99:dd:3a:e4:ba:28:39:2b:59:08:6b:16:56:dd:
cf:1b:42:c6:73:e8:8f:f7:41:05:4f:1d:f9:47:54:
5f:b0:3d:16:1a:0d:75:42:ce:b8:8e:ba:8d:b8:01:
24:c0:8d:5b:75:87:5d:49:49:12:8b:eb:6f:b6:82:
d8:a7:69:28:23:03:34:11:ec:75:9d:18:39:da:9d:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:E8:51:01:29:86:64:B9:83:21:93:BE:0E:A3:13:81:67:C8:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eNPoUQEphmS5gyGTvg6jE4FnyKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
87.121.220.0/24
94.156.6.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e7:50:f5:e8:d0:6d:56:44:c7:89:4b:e2:5a:5b:44:d7:bd:
e0:3c:03:b4:a4:7d:d1:36:19:10:98:ec:3e:b0:85:87:39:d3:
bd:4b:e9:29:c5:d5:05:9f:9a:37:92:cc:43:55:4f:b4:78:05:
27:5a:23:ae:b5:b9:db:9c:dd:bc:fd:4d:c7:ce:5c:a7:3b:b4:
48:56:88:0b:eb:29:ba:06:6a:03:33:55:46:d9:76:51:1e:d0:
70:25:89:2a:dd:0b:61:9e:ee:7b:b4:6b:7b:7f:f8:b1:38:52:
e4:b3:23:3a:7d:52:f4:d8:a9:e6:f5:85:a2:fa:f8:7c:26:49:
6a:76:f7:8f:13:76:54:12:9a:e3:61:bf:86:5c:29:e6:6b:82:
6b:37:b8:f5:1e:c1:17:b4:5d:ff:b8:09:6d:5d:da:04:f5:33:
c8:09:18:86:bc:a7:de:96:74:c7:25:83:f3:4a:f6:78:15:cf:
0a:05:06:b6:67:f3:0d:96:87:45:dd:09:c6:c4:e1:e5:43:aa:
df:a4:de:0b:83:2f:3f:47:ca:c1:8b:12:31:33:59:68:a5:96:
31:91:0a:03:5c:7f:64:a9:66:be:84:2f:d9:a3:ed:a0:33:f4:
7e:2c:67:98:f8:c9:45:e4:f1:44:3f:9a:f8:d3:37:d1:05:2b:
55:c5:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 16:05:35 2023 by rpki-client on console-ams.rpki-client.org