Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/EQLQXbfif3uB0sGvxmwElJX7_MI.roa
File: EQLQXbfif3uB0sGvxmwElJX7_MI.roa (raw, json)
Hash identifier: z3trHh3ZpFXBio9hgd3ge7VyBPFEVacSTblnr+eQi18=
Subject key identifier: 11:02:D0:5D:B7:E2:7F:7B:81:D2:C1:AF:C6:6C:04:94:95:FB:FC:C2
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018570306D5FB885B32F870836B0DD6B94A0
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/EQLQXbfif3uB0sGvxmwElJX7_MI.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202520
IP address blocks: 185.111.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6d:5f:b8:85:b3:2f:87:08:36:b0:dd:6b:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1102d05db7e27f7b81d2c1afc66c049495fbfcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:88:1f:72:34:2b:d8:6c:b3:f7:04:9d:01:
c2:db:03:af:3f:9e:18:cd:17:37:e3:c9:b5:50:38:
aa:30:95:a7:b5:f3:5b:c9:eb:3e:84:4d:4c:c2:f5:
f2:ba:56:a7:5b:59:d0:61:a9:6e:73:91:18:d4:9d:
9c:3b:b6:66:85:e4:aa:0d:ba:17:21:2d:f2:81:98:
91:b5:21:aa:0d:8c:d4:8b:3c:db:5e:b6:a0:60:ca:
7f:04:10:94:cc:bb:1f:7f:c5:a5:bf:32:b8:25:2c:
7c:a8:10:f6:ca:ef:f0:85:84:df:47:39:2e:42:68:
ae:6b:96:f0:1d:99:0b:fa:3d:26:95:98:13:6b:e9:
f0:cf:00:57:5a:9b:2d:42:22:44:92:81:01:35:db:
76:3c:f2:cd:cc:2f:b9:06:d7:41:d0:b4:24:fb:49:
f4:84:b3:3a:dc:b1:30:c5:51:6b:86:aa:45:44:ff:
2e:fe:c0:39:47:51:d2:fa:b3:03:44:01:70:91:ab:
67:bb:9f:ba:4e:2c:cc:f1:72:b8:79:9d:d6:1e:0d:
86:65:a8:cd:67:fe:f0:94:dc:d4:69:e1:c4:5d:ea:
11:22:df:fb:e7:e4:e9:9d:34:ca:88:f4:a0:af:7e:
7c:ed:0b:62:ed:e4:58:be:cb:6a:09:3f:b7:8e:32:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:D0:5D:B7:E2:7F:7B:81:D2:C1:AF:C6:6C:04:94:95:FB:FC:C2
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/EQLQXbfif3uB0sGvxmwElJX7_MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
50:60:fd:c1:74:02:1a:3e:c7:cd:6b:2b:dc:16:eb:3e:90:3a:
f3:3f:51:c7:30:51:db:13:c4:58:26:4a:73:ec:36:01:52:9d:
0f:69:8d:a9:7b:ad:a2:8c:68:04:0f:32:7b:68:05:6b:6a:aa:
46:3a:20:62:f9:52:31:48:92:ce:23:86:c7:a6:e6:aa:7f:e5:
0e:95:af:80:c7:67:6c:b5:4f:9f:f9:06:2b:92:1a:9e:3d:47:
ba:8e:f1:cb:bf:5f:4f:d0:ce:b8:1c:97:0a:9b:aa:42:99:91:
8b:3e:9d:a5:24:96:3e:b4:5e:a2:6b:38:57:9f:46:1e:38:08:
03:d0:a2:ce:f1:8d:07:3f:fc:5d:29:3a:95:aa:c3:af:a0:f0:
64:f3:a6:7a:d6:2f:3e:07:92:d7:48:29:a5:45:34:19:fa:3d:
99:71:b1:d8:aa:d3:14:00:a6:7c:43:fd:36:1f:2a:54:7b:ee:
75:87:a8:a1:b2:4b:9d:61:95:d2:ff:35:06:b1:c6:2d:3c:7f:
67:68:4c:f9:65:58:ab:c4:8b:1d:f6:6a:1c:b4:d8:86:de:ce:
a7:89:7b:0a:33:10:e4:b1:cb:8a:28:91:80:55:a1:34:36:b6:
eb:4c:a2:b5:ba:ef:d8:f1:bc:24:1c:11:d9:42:35:25:c0:ca:
cf:86:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org