Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/EghkIh1FTKPDIlIYKovb9YuePoQ.roa
File: EghkIh1FTKPDIlIYKovb9YuePoQ.roa (raw, json)
Hash identifier: YuRkcDDbShSv3D3DSJFZ+WlNiLYPfVkgS+2yfAVKhRw=
Subject key identifier: 12:08:64:22:1D:45:4C:A3:C3:22:52:18:2A:8B:DB:F5:8B:9E:3E:84
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 018963271059149DA5DA772A5CFD69A508C1
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/EghkIh1FTKPDIlIYKovb9YuePoQ.roa
Signing time: Mon 17 Jul 2023 09:20:51 +0000
ROA not before: Mon 17 Jul 2023 09:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49434
IP address blocks: 185.177.45.0/24 maxlen: 24
185.177.47.0/24 maxlen: 24
2a0a:2f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 Nov 2023 08:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:27:10:59:14:9d:a5:da:77:2a:5c:fd:69:a5:08:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: Jul 17 09:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120864221d454ca3c32252182a8bdbf58b9e3e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:de:85:57:09:84:09:73:0d:21:95:58:24:
3f:97:69:43:81:2b:57:29:f3:95:54:b7:e8:ec:15:
6d:3a:53:80:fe:7d:e9:33:cb:74:5a:d3:2e:1f:41:
b4:33:99:eb:28:90:f5:7b:54:10:7f:d5:2f:61:46:
a1:f5:72:95:a6:74:ec:02:c7:ad:99:c7:f1:76:fb:
f6:e5:3c:a4:5a:a6:ad:91:8b:dc:c2:47:25:29:ff:
c3:ee:a4:ce:f3:ec:15:6c:a3:d5:b0:50:a6:19:c7:
19:94:bf:cf:20:0a:24:8b:3e:ea:8f:46:9f:96:70:
58:44:7d:48:e2:b5:96:d8:a1:0e:ba:a6:d2:03:b3:
bc:2e:f8:c1:a8:29:0d:5a:42:cf:c4:99:03:67:13:
f6:02:86:5b:c0:95:91:14:b5:8a:21:35:f6:dd:1d:
ad:64:9e:24:62:49:f3:08:92:57:c7:10:15:78:0f:
ea:e2:30:f6:7b:ea:a6:4c:a4:0a:25:88:0d:2f:ed:
08:f7:4f:9c:75:66:9a:c0:cc:5c:9e:30:74:28:56:
67:56:ff:51:79:0d:d0:5d:3b:cd:fa:35:e7:43:41:
08:b1:cd:6c:79:cb:28:20:ce:fd:f0:ef:a6:2e:e1:
b2:89:0c:1c:be:db:02:24:ad:b5:01:13:18:d2:ad:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:64:22:1D:45:4C:A3:C3:22:52:18:2A:8B:DB:F5:8B:9E:3E:84
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/EghkIh1FTKPDIlIYKovb9YuePoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.45.0/24
185.177.47.0/24
IPv6:
2a0a:2f82::/32
Signature Algorithm: sha256WithRSAEncryption
4e:17:bc:d0:20:13:93:cb:70:80:bc:86:d1:a1:71:3d:5c:ac:
eb:89:ca:ce:f3:c2:d2:a7:24:0a:69:8d:84:67:3f:a0:3e:32:
96:c3:dc:4b:d7:10:7e:9d:33:ca:05:8f:f4:c0:23:fc:4b:a1:
a3:98:41:aa:1b:53:26:43:2b:5d:9e:d8:1c:53:48:a4:b9:d7:
4a:dd:55:e5:67:a9:c5:16:73:d4:4d:42:05:c7:90:3a:87:1b:
8b:08:eb:76:97:7e:90:5c:b4:c0:22:c6:8d:3a:e8:3c:55:cb:
ca:2f:51:5f:f6:d1:07:56:be:be:5c:df:0d:ce:19:01:a1:a4:
08:7c:02:58:20:ab:56:cd:91:12:23:87:e3:39:38:33:c3:60:
23:c9:aa:cd:f0:53:b4:e1:d6:2b:0d:c7:84:0d:01:59:00:3c:
f1:59:e0:12:73:5a:83:6c:41:81:4a:d2:11:23:9e:be:fb:cd:
ad:8c:a4:18:72:1f:7f:f9:af:5c:2e:f0:e4:33:b9:0d:52:e6:
47:7e:33:2a:7d:96:e7:d7:e5:f6:e5:96:fe:47:a8:e8:95:0d:
b3:25:bf:61:e7:3d:bd:50:5b:21:ae:88:f7:77:5f:ab:74:55:
fc:15:30:c5:72:a2:4f:e2:d9:c3:3c:14:f4:8f:af:4d:c9:3c:
ce:aa:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:37 2024 by rpki-client on console-fra.rpki-client.org