Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pEA-RBGCyGeMruBvFqRByCF8ADk.roa
File: pEA-RBGCyGeMruBvFqRByCF8ADk.roa (raw, json)
Hash identifier: KjXGWvLz4ZdrKOe2YdekrsZdXRcrLzZaAiO5OebonrQ=
Subject key identifier: A4:40:3E:44:11:82:C8:67:8C:AE:E0:6F:16:A4:41:C8:21:7C:00:39
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018EAA178D5B2A472812DF640AF7AE7E6795
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pEA-RBGCyGeMruBvFqRByCF8ADk.roa
Signing time: Thu 04 Apr 2024 17:10:53 +0000
ROA not before: Thu 04 Apr 2024 17:10:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 May 2024 07:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:17:8d:5b:2a:47:28:12:df:64:0a:f7:ae:7e:67:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Apr 4 17:10:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4403e441182c8678caee06f16a441c8217c0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:e6:48:a0:e2:58:73:db:cd:d0:4b:70:d2:
96:66:ff:26:ea:ce:b7:97:58:4a:11:40:c6:a8:9a:
1e:b5:12:9a:14:5c:a9:a3:76:b6:0c:7e:04:26:fa:
73:69:bb:8d:4b:f4:71:d4:4c:2c:a1:fe:dd:35:30:
e2:38:2f:ac:4d:01:a4:31:71:8b:25:84:bf:87:4c:
f3:d7:d7:e2:a6:6f:3d:ca:da:78:8b:ff:8e:1f:5c:
04:1e:e9:1a:85:32:83:46:77:af:f0:a2:b0:c5:8c:
fa:e6:07:8c:94:c4:aa:24:c0:3c:b0:0c:d9:06:a4:
f0:d1:24:a5:0e:73:7b:ce:26:3d:76:72:a4:94:ee:
b4:7a:b0:d8:82:e4:d6:fd:e5:fe:f9:bd:af:b1:40:
ee:05:32:5f:4b:d2:55:7d:c1:10:e4:8b:03:1d:2b:
4d:60:57:bf:6f:1d:38:5d:b9:9c:d5:49:43:88:3c:
e4:44:25:bf:a1:46:48:bf:9f:16:92:17:a4:de:1e:
c3:1f:91:09:94:1f:d6:29:7e:56:27:e7:c6:c2:1d:
6c:aa:ec:c7:56:ad:8e:44:bd:d8:62:23:be:5d:a0:
bc:4e:13:71:96:55:ba:e3:d0:93:c6:ab:6d:26:ae:
df:71:f0:c6:58:60:9f:16:9a:eb:08:06:5f:98:e1:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:40:3E:44:11:82:C8:67:8C:AE:E0:6F:16:A4:41:C8:21:7C:00:39
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pEA-RBGCyGeMruBvFqRByCF8ADk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
21:10:16:ac:ea:9c:54:68:7c:b8:b1:f4:b6:15:35:dd:26:96:
41:72:5b:36:39:4c:6c:e9:3c:66:1f:2b:9f:f9:21:dc:a8:86:
24:fb:ea:fc:3d:ec:10:2c:1b:80:a4:0f:9e:a3:d1:b5:11:47:
77:d4:5d:09:bd:7f:0a:d1:f3:c8:03:2b:86:58:e0:38:82:ea:
97:3d:53:bf:1c:a5:4d:8d:34:d1:13:63:5a:2d:8a:6c:c2:49:
59:3c:5a:13:9e:72:b3:66:b3:63:75:57:00:34:54:00:2e:b6:
37:c5:9e:5b:1a:96:89:56:18:2d:76:2e:74:1e:04:f3:74:f0:
0a:96:19:ec:1c:e0:e1:23:b5:6d:b8:96:e9:e2:ea:3e:9b:7c:
ed:c9:55:80:13:23:6e:da:d3:68:47:00:42:b6:2e:06:f0:7b:
12:6e:57:ea:8c:2f:0b:7c:ef:d5:3b:c8:a7:55:fb:5a:44:67:
2c:cb:44:b4:ea:87:3c:4c:6a:cb:ef:32:63:33:f3:a9:0f:a3:
6e:68:e0:3f:d9:a3:55:f7:91:07:ae:3c:a2:84:ae:9c:af:b7:
c8:34:42:9c:3a:a6:ce:0e:3f:d2:b6:f8:c1:16:8f:88:ab:14:
64:82:0e:4e:54:48:27:38:51:7f:d5:88:55:30:6b:18:67:ac:
a8:c3:68:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 12:49:31 2024 by rpki-client on console-fra.rpki-client.org