Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/EAFHOC21nl2eKxJIQfiA8SaDM4g.roa
File: EAFHOC21nl2eKxJIQfiA8SaDM4g.roa (raw, json)
Hash identifier: LcX1TEbGz890M/xBT78zfMbhdbEUz4vq8fhrZCjeJxc=
Subject key identifier: 10:01:47:38:2D:B5:9E:5D:9E:2B:12:48:41:F8:80:F1:26:83:33:88
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC4933A4FBEBFEEB540E3523950748DD1
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/EAFHOC21nl2eKxJIQfiA8SaDM4g.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 185.212.174.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 22:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3a:4f:be:bf:ee:b5:40:e3:52:39:50:74:8d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100147382db59e5d9e2b124841f880f126833388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:35:17:bf:2f:a2:fa:ce:ae:ac:33:30:1f:
4d:d2:a5:d6:a7:ad:b5:fa:37:69:6a:82:df:00:4c:
7f:dc:74:bc:ee:02:4d:0b:1b:80:0d:f7:a6:f2:22:
02:ee:e2:80:af:48:47:75:a8:ba:20:e6:33:ba:49:
c0:bd:a1:32:a3:38:fe:0c:86:b4:5e:95:f5:14:04:
4f:a0:c2:c3:59:bf:47:a0:b2:e8:42:ee:86:f8:e4:
43:0e:ee:70:9b:d9:9b:46:e1:ec:b5:9b:10:1f:be:
ad:04:fa:91:69:da:a2:27:bf:d9:1f:ff:58:d9:0a:
5a:92:18:c7:3f:4c:0f:78:e9:25:c5:9a:f3:9c:8d:
0c:2c:16:02:80:0b:7e:8b:c6:7e:78:b5:65:be:63:
57:7b:64:b9:0a:01:f2:5d:37:32:16:54:18:b7:c7:
07:ec:a5:05:05:da:02:e6:58:5c:73:38:2e:05:10:
79:14:92:ca:7a:67:44:60:37:8f:d8:22:19:d7:70:
3f:9d:61:4c:63:19:15:ca:46:ad:77:96:c8:a9:db:
32:e2:1e:99:9e:0c:d8:79:f8:ff:dc:db:1a:4c:93:
a9:7c:82:35:17:c8:0c:2a:46:e4:b0:4c:a0:d5:d9:
88:a4:cd:e3:c2:45:22:3d:b6:a9:c3:8d:81:c7:0b:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:47:38:2D:B5:9E:5D:9E:2B:12:48:41:F8:80:F1:26:83:33:88
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/EAFHOC21nl2eKxJIQfiA8SaDM4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.111.0/24
185.212.174.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2c:f4:cc:11:13:1d:98:d5:71:ec:a8:3c:04:5d:6c:81:98:
0b:fe:bb:e9:d0:26:15:4a:23:d6:05:a4:1f:8c:38:2e:b2:c8:
2c:6d:dd:4c:f5:6a:3e:ac:99:24:47:73:be:d6:9c:1d:d6:06:
87:62:f3:3d:94:51:82:3d:c5:26:55:90:0f:f0:7b:92:e7:2d:
bf:1e:57:58:b5:96:f2:60:60:83:3c:66:13:16:13:93:8e:be:
03:63:a7:22:53:b6:3a:f0:e3:7c:73:6e:22:cd:d4:f2:da:08:
6c:77:e2:08:5b:91:b5:33:5b:46:24:05:eb:4b:9f:48:09:18:
e5:85:a2:db:c3:46:98:0c:e0:9d:a5:a2:9d:f7:65:01:a3:e0:
47:3a:e9:19:1a:0d:97:f0:d5:a0:49:c4:3a:29:3f:5a:a0:4f:
73:26:de:2d:3c:9b:cf:99:f3:ab:d9:c3:3f:01:93:cf:3e:73:
a1:40:17:69:1f:83:c4:fb:c6:a9:e3:ba:af:52:e7:7c:43:a6:
e4:e9:31:05:9e:f7:6f:5c:4a:da:0e:ba:26:d3:8c:6e:df:ac:
89:79:8c:5e:d2:23:a1:81:5d:23:09:2b:2e:df:4a:c2:b2:dd:
fd:1f:08:da:3a:57:97:68:ec:20:d9:b7:c0:af:1c:f4:01:17:
af:a7:96:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org