Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ELPnK_8K7DOud57K0EesCIY648w.roa
File: ELPnK_8K7DOud57K0EesCIY648w.roa (raw, json)
Hash identifier: EJDPv2kET94jvfPdtrJ9raGd8u47dHVpX8G3fP7mBCQ=
Subject key identifier: 10:B3:E7:2B:FF:0A:EC:33:AE:77:9E:CA:D0:47:AC:08:86:3A:E3:CC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191BFC2D6A455F4B6F93ABE58494BBB82DA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ELPnK_8K7DOud57K0EesCIY648w.roa
Signing time: Thu 05 Sep 2024 01:18:22 +0000
ROA not before: Thu 05 Sep 2024 01:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 02:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bf:c2:d6:a4:55:f4:b6:f9:3a:be:58:49:4b:bb:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 5 01:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10b3e72bff0aec33ae779ecad047ac08863ae3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:9b:9c:7d:ec:07:f7:f1:38:24:41:06:ef:
3c:37:f1:52:26:b9:53:a3:b1:69:00:8e:19:8e:e8:
f1:67:34:03:fc:89:ab:07:04:f8:db:2b:20:f0:bc:
6a:0a:6d:c2:d1:bd:87:0d:db:1b:a2:5d:c0:70:fd:
be:8e:94:9f:7f:fd:63:85:6a:01:27:d6:f7:4e:6a:
05:e4:19:76:09:9c:0a:6e:63:c5:d1:80:62:64:1b:
e9:53:0a:22:ea:6f:90:f6:d1:78:40:81:3d:73:65:
4b:21:e0:0a:15:4c:9e:f3:2e:5e:fd:6d:de:cd:dd:
8d:a7:b9:db:95:19:e9:23:80:c2:c4:7d:ab:cb:89:
b4:01:18:dc:af:83:38:e8:94:84:a8:35:14:d4:d7:
2c:b7:a8:09:57:e3:77:6e:00:02:b4:af:ea:14:60:
d4:8e:a4:fb:e3:62:a9:b7:33:43:4c:d7:ee:a9:21:
e1:65:50:7e:b3:94:d3:83:7b:de:dd:62:d1:85:0b:
b1:43:57:92:35:79:41:b8:1c:7f:57:e2:fc:38:22:
fb:cd:7d:e6:34:04:39:ee:f1:89:d9:f5:a3:63:ee:
94:61:fe:a4:73:3d:25:b4:e2:1c:62:64:bf:e0:d9:
03:ad:79:78:6e:4c:de:4e:fb:65:66:79:94:b1:c1:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:E7:2B:FF:0A:EC:33:AE:77:9E:CA:D0:47:AC:08:86:3A:E3:CC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ELPnK_8K7DOud57K0EesCIY648w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.29.0/24
77.90.54.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:db:9d:4a:7a:97:e0:c3:0f:4a:46:c7:4c:9d:01:26:84:f5:
6f:90:72:5b:c7:fe:d2:c0:48:45:2d:5f:bd:49:15:7d:cc:22:
fd:4b:cb:cb:66:02:d0:ff:4a:b2:c4:12:88:68:d3:ca:76:3a:
37:26:1d:41:68:a4:e2:f7:a5:96:a4:96:ee:c9:b8:58:98:b8:
ac:f4:cc:60:0e:d4:a4:2a:01:2b:f7:87:bf:36:93:0c:ed:50:
96:98:4b:92:c4:79:51:81:d5:d1:15:67:33:92:e6:33:43:b9:
bb:ef:8b:cd:4d:25:f2:0f:b9:3e:e1:ba:48:80:77:d5:57:7b:
89:09:08:0f:2b:77:ff:2d:ff:9d:9d:5a:ed:c2:47:f8:9f:9b:
4b:81:24:9f:98:21:ec:52:fa:c1:82:02:d2:7d:83:40:88:95:
43:c0:22:b4:19:34:79:0b:d6:67:b1:1f:54:d9:67:c9:37:05:
a1:cc:e2:e0:f4:54:33:db:df:61:1d:cb:0a:02:86:64:9d:75:
54:fc:8f:ba:54:36:23:27:69:cb:1a:ee:94:06:55:d7:cb:d6:
5b:86:20:25:e1:ef:36:79:84:a4:5e:1b:e9:22:9a:31:c5:b1:
1a:7c:a1:19:dc:59:ed:a8:15:42:03:5e:3a:6e:8c:e0:ee:a7:
e2:96:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 04:24:57 2024 by rpki-client on console-fra.rpki-client.org