Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/eVht7eBjlThmyiT1H-lvw50FuWA.roa
File: eVht7eBjlThmyiT1H-lvw50FuWA.roa (raw, json)
Hash identifier: P0nrE1g7opgDsspVgBTpCVkBjwiG15dr75uaCuL/VWs=
Subject key identifier: 79:58:6D:ED:E0:63:95:38:66:CA:24:F5:1F:E9:6F:C3:9D:05:B9:60
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 0187F69DBD8289AEDF38471E897DBA3D6E31
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/eVht7eBjlThmyiT1H-lvw50FuWA.roa
Signing time: Sun 07 May 2023 14:29:05 +0000
ROA not before: Sun 07 May 2023 14:29:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 132.66.0.0/16 maxlen: 16
132.66.0.0/15 maxlen: 15
132.67.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:9d:bd:82:89:ae:df:38:47:1e:89:7d:ba:3d:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: May 7 14:29:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79586dede063953866ca24f51fe96fc39d05b960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:0b:54:8a:12:5e:a0:ae:0e:96:5e:21:44:
ac:43:bb:3a:de:11:0b:e2:3e:c5:7d:a1:81:8a:04:
ea:fc:02:e0:39:21:66:b4:0f:13:5d:78:cc:e5:9d:
1b:5f:82:d1:08:db:e5:85:a5:37:c0:57:af:c8:bf:
d7:b3:35:6f:66:ad:7f:aa:5c:96:95:ca:05:93:8a:
52:c1:18:68:18:5f:fc:b7:e4:fc:fd:71:80:bc:54:
7e:76:f2:9f:a0:fb:3b:87:9b:20:72:7c:90:94:b3:
44:9f:59:95:9b:fc:e5:f8:4f:98:9d:f0:6d:8c:3a:
1b:c7:36:28:14:ff:c6:33:ff:bb:1d:f2:f4:8f:8b:
94:7a:0d:20:43:a1:74:d5:d9:96:be:ee:7d:18:a5:
86:9e:11:09:0a:d7:bd:48:c2:14:ce:66:f8:af:88:
be:bc:79:02:82:47:22:84:e7:23:98:4a:bb:78:f3:
88:13:98:56:f8:d0:26:21:b9:bb:a0:61:d7:3f:2b:
6f:09:6d:3c:9c:d7:95:1b:ec:48:7d:ac:16:f6:d9:
23:c7:e6:87:3c:37:4f:b8:32:67:52:6a:09:6d:15:
ab:a4:49:14:36:85:b5:15:9e:79:bc:59:81:bf:c1:
5f:f7:b6:87:0f:f5:1f:51:10:4d:0b:32:11:b7:fa:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:6D:ED:E0:63:95:38:66:CA:24:F5:1F:E9:6F:C3:9D:05:B9:60
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/eVht7eBjlThmyiT1H-lvw50FuWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:73:1a:cd:07:dc:a9:f9:de:b8:f5:c2:70:6a:19:1b:a7:ef:
49:25:c3:71:7e:44:4c:34:a5:15:3d:2b:85:69:1c:8d:29:9c:
2f:58:7c:33:69:f4:44:cf:27:b1:90:bf:5d:47:f0:5c:e2:8e:
bf:d0:6f:13:02:3b:6b:49:ef:0e:25:7a:2c:8e:71:6a:53:9c:
ad:75:fc:4c:b8:0c:a2:4f:0a:00:d9:e7:61:8a:a2:25:d2:f0:
ba:b6:3d:d5:8c:14:16:20:11:09:d6:35:fb:9c:f1:b9:9d:3a:
0f:f9:d4:aa:06:53:59:27:ae:f2:e5:38:6d:db:0d:1b:67:fe:
25:7f:69:cf:32:0d:62:a9:be:c4:3c:7b:02:ea:e6:3c:51:8d:
f6:f3:7f:a1:f1:4d:33:2f:0a:67:e0:4e:5c:a9:bd:08:3d:dd:
4e:3e:e1:7e:20:a0:59:d0:b5:c0:e8:9a:48:c8:f9:a4:35:b0:
da:fe:ae:c5:14:9c:42:99:11:60:63:cc:5b:29:b0:b2:30:6f:
b1:d0:bd:63:a9:6e:91:d1:fc:67:9a:c6:03:54:bd:e5:14:fc:
32:71:f8:39:91:70:35:51:fa:a8:22:fd:06:e3:ad:83:b8:17:
d2:f0:48:4c:6d:6a:87:28:6e:c4:47:6e:f5:9f:c6:34:b5:06:
cd:7b:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:56 2024 by rpki-client on console-fra.rpki-client.org