Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/eLye1zUL9mzPuGc9MVWAnHdq_3U.roa
File: eLye1zUL9mzPuGc9MVWAnHdq_3U.roa (raw, json)
Hash identifier: xNTW9aqoBnmFK0mIMLhzb76qmMMuwlJVwJAg1ByWS1o=
Subject key identifier: 78:BC:9E:D7:35:0B:F6:6C:CF:B8:67:3D:31:55:80:9C:77:6A:FF:75
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC49334A4EF4931F44ADCEA2BFF66ACAA
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/eLye1zUL9mzPuGc9MVWAnHdq_3U.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 185.203.148.0/22 maxlen: 22
185.162.72.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 30 Mar 2024 22:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:34:a4:ef:49:31:f4:4a:dc:ea:2b:ff:66:ac:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78bc9ed7350bf66ccfb8673d3155809c776aff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:e0:4b:f8:fb:6b:60:72:7b:24:76:1e:2b:
e2:9d:43:f3:b9:2c:c2:b2:62:95:f3:97:62:00:e7:
71:c5:cb:80:be:75:0b:c4:3e:ef:b5:a4:53:cb:6a:
c9:14:32:9d:5e:64:8b:e2:2c:70:4f:50:fb:d5:7b:
ba:9b:98:6a:85:96:e5:fb:7b:81:b5:0d:06:bc:f2:
0d:71:6d:e1:a6:77:4f:ec:f9:ea:4a:67:7a:d9:27:
de:8f:bc:c3:23:23:92:12:3e:46:b5:14:31:9c:d3:
d7:47:d3:8b:ec:07:37:f9:fb:40:bc:90:63:ab:b4:
30:a0:8e:28:b4:9a:45:d0:6e:30:d7:c9:c9:2b:8a:
16:b1:56:a8:67:ea:d9:7f:b5:65:38:d6:0c:9a:da:
b8:8e:26:1b:56:60:1e:09:e1:97:50:92:4c:8e:9e:
b3:4d:77:29:7c:a3:83:09:c8:86:40:1c:ce:67:3a:
4d:1e:fb:9b:71:bb:c7:05:4a:eb:d3:a9:04:fa:a4:
f9:03:19:fb:72:74:a5:36:33:21:48:f2:d5:6d:eb:
9c:f1:d9:1e:dc:7a:d1:e3:4f:c6:3a:2c:f7:5a:d6:
9a:6f:d8:56:36:93:af:6e:9a:ae:40:1d:6d:3b:c3:
ba:2c:2c:9d:e9:90:a8:80:d3:88:84:dc:f0:a4:65:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:9E:D7:35:0B:F6:6C:CF:B8:67:3D:31:55:80:9C:77:6A:FF:75
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/eLye1zUL9mzPuGc9MVWAnHdq_3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.72.0/23
185.203.148.0/22
Signature Algorithm: sha256WithRSAEncryption
17:a4:de:6b:89:12:90:bf:b0:17:60:d4:c8:20:68:eb:d9:26:
0d:79:28:84:31:fd:2d:c5:d7:77:3b:cf:62:8f:f1:03:0b:df:
f3:71:07:b0:60:ba:0d:4b:cc:44:ab:b9:49:2f:28:b9:94:67:
d9:57:ff:19:b4:80:52:d1:48:13:75:2d:c6:65:dd:33:e3:2b:
53:12:c4:5a:5d:56:be:7d:aa:57:c7:e5:bf:79:7f:4a:40:21:
ff:2f:d8:05:29:90:7f:b6:a8:47:95:a0:3b:4a:2a:d6:a8:90:
cb:ea:d8:c2:42:a3:9e:9d:3f:32:3e:e4:0a:75:fe:08:a3:3b:
af:45:b6:55:b8:ee:b7:d8:48:68:2d:9e:f3:6c:47:2a:ab:0d:
f5:b8:5b:de:29:1a:74:3d:f3:10:40:b7:72:0c:7a:92:53:f3:
6f:42:48:69:0e:c5:40:b8:72:9f:a8:6e:2e:42:b9:b2:55:bf:
e9:7e:4c:f4:53:fc:64:7b:cd:07:f5:7a:45:17:82:60:8f:87:
45:68:27:ac:b4:12:8c:f2:ec:0f:c6:36:ed:d7:b3:79:19:8d:
29:39:8e:0a:33:39:ed:dd:8d:c9:77:fe:e5:90:77:18:b7:c4:
de:22:ff:a5:06:f2:ff:ac:63:dd:54:74:8b:45:37:4b:36:bb:
16:14:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org