Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/0EUGEIn8k60mSjcExULEZbkqhqE.roa
File: 0EUGEIn8k60mSjcExULEZbkqhqE.roa (raw, json)
Hash identifier: J/KGY4FCYsW8727gEdnPuEdv9yQrAFN1F4s+dKZRFAQ=
Subject key identifier: D0:45:06:10:89:FC:93:AD:26:4A:37:04:C5:42:C4:65:B9:2A:86:A1
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 01857139B736D6F70C3BF707894114FC650A
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/0EUGEIn8k60mSjcExULEZbkqhqE.roa
Signing time: Mon 02 Jan 2023 06:44:45 +0000
ROA not before: Mon 02 Jan 2023 06:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48213
IP address blocks: 185.135.236.0/22 maxlen: 22
2a07:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Apr 2023 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b7:36:d6:f7:0c:3b:f7:07:89:41:14:fc:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jan 2 06:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d045061089fc93ad264a3704c542c465b92a86a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:ae:e6:dc:ba:84:02:df:98:57:1a:5f:dc:
69:9b:7c:a4:53:b5:c7:1e:2f:e0:d4:30:14:20:a0:
7c:9c:67:3f:d7:b5:91:37:2a:3a:45:da:b6:b5:64:
c7:fb:b3:99:1f:fb:09:e3:cf:ba:b5:92:72:ac:3e:
e5:6f:49:17:f0:24:18:14:a3:8c:6f:34:e6:c2:42:
af:c6:85:fb:7b:8b:62:f8:75:db:fc:95:ac:ca:14:
89:d7:a2:85:6c:49:18:6a:9f:8c:8a:30:60:2b:f8:
e4:64:5b:7e:93:b0:50:2e:73:7b:b6:94:d3:3f:c8:
1a:a1:1b:80:5a:7f:1a:82:55:a8:1c:64:2d:82:6c:
38:3e:41:81:48:c9:ea:67:89:69:a3:2e:8b:eb:75:
8a:be:09:4e:b1:37:fb:df:49:36:97:34:8c:c7:29:
69:bc:81:ba:69:b8:a9:09:e2:e2:45:9a:dc:c6:09:
e9:ca:c6:8e:b6:9f:a9:4f:29:9a:02:62:30:16:da:
99:3e:a6:1b:6d:e9:75:f1:35:ca:33:a0:16:a5:8e:
18:bc:d5:2e:46:8c:06:e3:87:fc:a9:18:aa:c2:8f:
85:5d:44:70:45:0a:d7:6a:79:ba:49:72:5c:49:bc:
d6:90:01:29:04:64:e1:32:11:78:1d:d0:53:70:b8:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:06:10:89:FC:93:AD:26:4A:37:04:C5:42:C4:65:B9:2A:86:A1
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/0EUGEIn8k60mSjcExULEZbkqhqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.236.0/22
IPv6:
2a07:980::/29
Signature Algorithm: sha256WithRSAEncryption
39:d7:5c:92:88:6f:f4:d8:ea:ba:42:50:50:a4:41:ed:8a:46:
30:e9:75:ea:c5:f6:eb:b9:33:fc:d6:f2:ce:b2:5f:9c:d6:38:
96:fd:19:91:44:a1:f4:54:1e:95:ec:d0:07:bf:82:f2:f8:cf:
a2:d4:7b:0d:8f:35:29:69:9b:91:49:6b:5d:eb:7b:77:87:c3:
d1:70:a0:18:79:97:c9:a2:bf:9e:f3:be:fa:e4:03:60:83:45:
25:52:f2:5c:65:8a:43:34:35:b2:9f:20:a8:6c:bc:57:99:22:
df:41:5a:32:7e:a5:4e:94:2b:66:cd:50:d2:04:9c:d4:71:05:
09:c8:9f:71:dd:fa:ca:7d:24:f9:93:8d:97:b6:b8:6c:f9:a6:
8f:b2:9d:19:e6:65:3b:c6:03:77:ac:67:c4:63:64:37:27:6b:
60:4f:58:fb:bf:7b:77:eb:9f:79:a7:74:0b:a3:04:9a:f9:d6:
77:a0:75:96:2d:ea:a0:55:81:ec:07:ed:02:e0:9c:c4:5f:d3:
1e:3a:ad:3b:d0:31:a5:65:dd:24:5e:4d:73:46:db:fd:f2:40:
f8:fc:f5:64:98:ee:12:02:56:5b:f0:4e:c3:40:5f:7d:1c:36:
eb:2f:c0:70:6e:1e:eb:c3:35:29:be:92:b9:39:36:9b:1d:88:
51:54:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org