Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eYntgXAr_OvbjTk5Z47SaM9KOH4.roa
File: eYntgXAr_OvbjTk5Z47SaM9KOH4.roa (raw, json)
Hash identifier: gD2a+Gt/tjIMz40d65PjLu24rAwUJjIR/379PIskQGc=
Subject key identifier: 79:89:ED:81:70:2B:FC:EB:DB:8D:39:39:67:8E:D2:68:CF:4A:38:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AE007C6DFA917934BCCE4B2B92A7408EE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eYntgXAr_OvbjTk5Z47SaM9KOH4.roa
Signing time: Fri 29 Sep 2023 08:22:00 +0000
ROA not before: Fri 29 Sep 2023 08:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60539
IP address blocks: 85.209.132.0/24 maxlen: 24
87.121.162.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
45.129.86.0/24 maxlen: 24
45.84.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:07:c6:df:a9:17:93:4b:cc:e4:b2:b9:2a:74:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 08:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7989ed81702bfcebdb8d3939678ed268cf4a387e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:be:97:cd:8a:3a:d0:b3:3f:5a:ee:ff:a0:97:
65:f9:9a:05:34:7a:7e:fc:8f:39:ac:d3:26:7d:22:
a3:2a:9e:2d:fa:53:57:2a:c2:3e:91:d1:61:cd:b9:
21:de:2e:4e:18:38:4f:57:94:bc:ab:c5:66:dc:69:
ab:3d:26:91:99:52:4b:5f:fa:98:22:49:bb:09:d4:
3b:47:8d:fb:bb:ea:17:bb:46:77:ab:2a:a9:a0:a0:
bb:c6:c0:f1:25:5a:3d:fc:84:91:2d:99:95:33:be:
c5:48:e6:bf:f3:d5:b6:fb:32:66:b4:0d:10:6b:e3:
d3:f2:d4:f2:f3:be:be:b9:02:a3:2c:b6:88:6e:29:
2e:af:63:5a:bb:31:4f:b5:58:47:c1:31:0b:ae:b7:
04:4f:46:51:09:e0:45:82:48:1c:ef:d5:ff:29:fb:
a9:58:54:c6:85:a4:27:0b:00:11:90:c6:b5:43:3c:
09:d1:19:7c:47:cb:cb:73:aa:06:69:14:ca:68:bf:
19:39:cb:e8:15:73:70:d6:02:3f:16:b5:7d:51:46:
d5:d5:07:d3:0f:fe:09:21:30:2a:c4:ed:89:f3:f0:
d4:ef:10:d2:7e:24:04:41:c3:31:23:18:bb:4d:cf:
54:e3:86:69:18:87:55:dc:1a:04:e5:a2:0a:08:49:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:ED:81:70:2B:FC:EB:DB:8D:39:39:67:8E:D2:68:CF:4A:38:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eYntgXAr_OvbjTk5Z47SaM9KOH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.129.86.0/24
85.209.132.0/24
87.121.162.0/24
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f3:c5:5d:26:62:ae:d0:4c:0a:40:4c:d7:cb:6f:f4:56:75:
9a:59:ca:6a:ff:88:be:ba:63:e5:f9:99:79:24:c4:30:7e:f7:
c7:b1:55:86:13:16:3f:62:77:dc:08:b4:ab:67:dc:2e:f9:76:
4b:2c:d1:87:f9:86:0f:c8:33:1d:95:35:1d:bc:06:c3:dd:7b:
b6:c3:62:57:d8:2a:93:7c:17:ac:1a:c9:71:25:35:11:cb:dc:
65:c3:3d:31:e8:b6:08:a4:9f:a5:be:2f:31:87:3e:41:01:13:
31:19:27:de:1e:f4:f3:37:b1:33:2f:84:d6:bb:f9:4f:96:23:
7b:93:af:9e:ea:9d:3a:06:2b:52:07:17:50:36:91:31:5e:d0:
b3:fc:31:31:df:86:9d:4e:9e:77:d2:81:66:3f:57:3f:c3:e3:
b5:b2:d1:9d:50:78:70:34:65:58:1a:66:80:63:d1:46:ee:c7:
aa:f4:67:a9:a9:ea:80:8e:fe:78:fe:86:32:84:2d:bc:d8:a9:
65:a8:37:e1:25:d1:fa:eb:b0:00:a5:97:9e:79:4c:91:d9:93:
d2:e6:94:de:b8:e6:9c:f4:e7:b8:30:f7:83:64:fe:6b:19:22:
25:63:45:4f:9c:e8:4c:ad:34:0b:7d:6a:a1:c6:2a:3f:ad:71:
01:57:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 07:35:26 2023 by rpki-client on console-ams.rpki-client.org