Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/EW-MDxgtg6V6d4-yfsdmJ5F9X7I.roa
File: EW-MDxgtg6V6d4-yfsdmJ5F9X7I.roa (raw, json)
Hash identifier: FKoXof2gGmKP8/s3/O7sCSBrx6m5GAUDaOwzawh+0aU=
Subject key identifier: 11:6F:8C:0F:18:2D:83:A5:7A:77:8F:B2:7E:C7:66:27:91:7D:5F:B2
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 018B17BFB599B53E16CEFE26901FF0AB6764
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/EW-MDxgtg6V6d4-yfsdmJ5F9X7I.roa
Signing time: Tue 10 Oct 2023 04:02:01 +0000
ROA not before: Tue 10 Oct 2023 04:02:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42846
IP address blocks: 104.247.162.0/24 maxlen: 24
104.247.161.0/24 maxlen: 24
104.247.160.0/24 maxlen: 24
104.247.165.0/24 maxlen: 24
104.247.164.0/24 maxlen: 24
104.247.163.0/24 maxlen: 24
104.247.166.0/24 maxlen: 24
104.247.168.0/24 maxlen: 24
104.247.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Nov 2023 09:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:bf:b5:99:b5:3e:16:ce:fe:26:90:1f:f0:ab:67:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Oct 10 04:02:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116f8c0f182d83a57a778fb27ec76627917d5fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:0d:33:c7:a4:ae:21:fc:e7:8a:a9:fa:31:
48:78:64:21:71:7a:e5:c6:45:2c:af:75:9f:4c:28:
ed:d1:6f:13:e2:91:dc:49:5c:6a:64:b5:26:4a:ae:
b6:88:48:a7:86:00:3c:30:97:0d:fd:3c:cd:2b:21:
00:53:7c:e4:90:56:c7:67:6d:58:03:21:bb:9b:9b:
9e:9f:f5:be:c3:3d:e0:8c:fe:35:38:ac:61:f2:90:
69:10:9e:8a:67:03:60:93:dc:a3:50:13:50:eb:ee:
cc:76:b2:69:84:e3:0a:69:9a:3a:49:c0:7c:8d:c4:
be:34:9e:d1:7a:ba:1d:f5:75:e7:57:43:cc:16:62:
e6:4c:4c:fa:0d:41:a9:c9:fb:ee:52:d2:2c:42:24:
e4:86:d9:d6:cc:71:8e:b8:3f:1b:b2:57:f5:98:e4:
8b:eb:a7:7b:f9:13:aa:0c:79:74:54:a9:91:3e:ec:
51:c3:6f:e1:62:c4:8f:98:38:df:db:cd:97:31:0b:
a5:bb:18:c1:18:e6:6a:39:d1:74:0c:12:82:ca:8f:
bb:47:87:e3:41:78:f9:42:07:73:68:bd:8f:e1:ae:
d0:03:1a:39:92:5d:44:41:81:a3:78:6c:d6:0b:22:
1e:7d:d9:1e:f3:ce:26:e2:34:e5:1e:c1:f0:b8:23:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:8C:0F:18:2D:83:A5:7A:77:8F:B2:7E:C7:66:27:91:7D:5F:B2
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/EW-MDxgtg6V6d4-yfsdmJ5F9X7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.160.0-104.247.168.255
Signature Algorithm: sha256WithRSAEncryption
3d:63:eb:ef:0e:02:7f:16:f6:0e:54:ae:89:de:6f:a4:28:ad:
c5:a7:72:be:14:a2:15:10:c4:2c:d8:35:fa:68:6f:87:d0:96:
0c:fc:d0:e2:11:90:0c:cf:2d:6a:46:e5:ab:8c:c1:0c:69:19:
92:b7:3e:85:b8:98:b2:eb:e6:e9:2e:3f:f6:7c:10:02:ca:92:
5a:ce:39:a3:c3:f7:e9:8a:f0:90:c6:2c:65:24:dd:07:5a:29:
35:1b:85:f8:13:95:a2:6e:3c:f5:93:b2:a8:24:40:70:71:fc:
e6:57:86:22:db:3e:ab:f5:6e:ad:79:69:a0:cf:54:70:48:c4:
7f:32:60:4c:5e:16:ba:c6:f4:65:1d:e1:0a:9a:03:51:93:10:
a0:6b:51:df:63:c8:f1:ea:39:cb:5e:c7:3e:52:40:66:27:af:
b6:a8:ba:8e:be:f4:48:84:95:5a:af:3f:ec:9a:6b:fb:ca:35:
00:a5:07:f2:c7:6e:3c:59:e8:a9:04:9f:60:f7:6f:7e:01:5b:
a5:8f:d8:55:41:a2:45:a3:57:90:e2:f6:d3:95:99:fd:ed:58:
66:ed:c6:da:eb:85:0c:e9:de:33:4b:eb:22:57:24:c9:d5:d7:
ce:b1:91:43:ab:9a:b5:6b:7b:ee:65:ea:7a:57:76:14:cb:ad:
72:77:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org