Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/ElnT7ykrfZTKaddSGPXYakOoSXE.roa
File: ElnT7ykrfZTKaddSGPXYakOoSXE.roa (raw, json)
Hash identifier: qzPT3dtBzxKGQHEgiYWKl5xJcO2y/3FTDw6PQNMJLDo=
Subject key identifier: 12:59:D3:EF:29:2B:7D:94:CA:69:D7:52:18:F5:D8:6A:43:A8:49:71
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 0185723A1C421AC9C4CDCA1484C38A416F4E
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/ElnT7ykrfZTKaddSGPXYakOoSXE.roa
Signing time: Mon 02 Jan 2023 11:24:49 +0000
ROA not before: Mon 02 Jan 2023 11:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39605
IP address blocks: 193.84.18.0/24 maxlen: 24
78.40.120.0/21 maxlen: 24
185.60.92.0/22 maxlen: 24
158.58.176.0/21 maxlen: 24
2a02:4b8::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:1c:42:1a:c9:c4:cd:ca:14:84:c3:8a:41:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Jan 2 11:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1259d3ef292b7d94ca69d75218f5d86a43a84971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:6a:75:83:97:99:18:48:04:2e:ca:77:be:
9f:c4:c1:69:0d:1f:df:83:85:6c:ec:21:8f:04:79:
11:b4:3a:6c:05:d3:41:22:cc:c6:64:cc:fc:06:11:
6a:25:e0:06:9e:2b:f5:59:16:7b:58:2f:21:2e:9f:
76:8e:62:66:8c:10:4d:4d:ad:1c:3c:0c:05:6f:53:
38:d8:87:e5:3b:fe:20:11:b1:ec:47:fa:58:a0:9a:
d6:26:27:d9:06:77:8b:60:11:dd:20:d7:55:20:3d:
88:a3:23:ed:d5:20:10:f8:6b:be:fd:15:f9:2f:21:
9e:2d:ed:07:f0:4b:7b:c9:30:d4:88:ce:7a:17:09:
61:54:7c:9d:6c:5a:6b:e2:48:2e:53:e8:77:fe:42:
14:34:1e:10:02:55:19:63:78:dc:b5:92:e6:80:2b:
ef:08:05:70:3d:55:e9:34:8c:9d:2a:e1:4f:f9:a2:
f6:ca:4e:ad:86:a4:1e:77:a3:b1:fe:21:04:1a:a5:
4b:3b:ea:ac:d8:f3:45:e7:5c:c8:8d:f1:13:3b:01:
57:f7:95:b5:85:f1:9b:37:0e:69:f9:95:9c:bd:aa:
09:6b:25:f1:5d:13:2f:99:cc:61:0c:84:a9:a1:9d:
b1:aa:38:2c:14:ca:b2:b0:9d:d4:74:fe:e0:b0:1f:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:D3:EF:29:2B:7D:94:CA:69:D7:52:18:F5:D8:6A:43:A8:49:71
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/ElnT7ykrfZTKaddSGPXYakOoSXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.120.0/21
158.58.176.0/21
185.60.92.0/22
193.84.18.0/24
IPv6:
2a02:4b8::/29
Signature Algorithm: sha256WithRSAEncryption
0b:75:5c:1f:72:13:61:43:a3:0c:2c:f0:a2:b4:09:05:e1:0b:
09:19:c8:98:b1:4a:44:eb:7e:d9:8d:44:d3:c9:e7:d3:78:c4:
23:00:a7:0b:65:e3:c1:04:50:8f:50:c2:76:a0:2e:de:f1:c2:
fd:8d:55:87:8d:bb:1b:15:c3:4c:dd:fe:4a:f1:f4:0e:06:9a:
5f:5b:03:7f:53:c7:fa:03:da:87:15:da:f0:75:15:11:a4:c9:
b1:ab:d5:6b:85:d1:0d:03:20:c9:46:97:aa:33:b1:d7:9b:82:
73:20:a2:ff:72:c5:de:25:c7:56:c9:2c:f6:c1:73:19:b9:50:
40:43:27:1d:b3:c3:87:e9:a4:5f:1d:c5:b5:f8:00:05:ce:31:
10:be:9a:21:07:9b:b0:97:42:37:1c:b9:28:de:f6:7a:57:28:
d6:fb:01:24:6f:e0:8e:b3:10:44:38:d1:f4:a2:fd:4d:b6:23:
8f:d6:68:d3:07:ef:dc:51:38:31:50:5a:d4:7b:35:57:da:64:
92:6f:7a:fc:a4:b8:ff:bf:5e:54:96:c3:eb:e8:27:4d:70:a1:
07:e7:a5:67:83:8a:ed:a2:51:fb:d2:d6:7f:c4:76:99:58:13:
9d:15:a3:28:0c:f1:55:05:3e:b6:26:a8:35:af:ef:a4:09:9a:
cd:79:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:58 2024 by rpki-client on console-ams.rpki-client.org