Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/2Eej1cTUIbYNy37SYQptZdY2BNo.roa
File: 2Eej1cTUIbYNy37SYQptZdY2BNo.roa (raw, json)
Hash identifier: Z1Fu63EcAhsMDdTRkVTF//nxPRgRd4psF0LtvzP6mSU=
Subject key identifier: D8:47:A3:D5:C4:D4:21:B6:0D:CB:7E:D2:61:0A:6D:65:D6:36:04:DA
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 01856F54B4E74BC7FFB73F927A8F389819B3
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/2Eej1cTUIbYNy37SYQptZdY2BNo.roa
Signing time: Sun 01 Jan 2023 21:55:00 +0000
ROA not before: Sun 01 Jan 2023 21:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 45.11.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jan 2023 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b4:e7:4b:c7:ff:b7:3f:92:7a:8f:38:98:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Jan 1 21:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d847a3d5c4d421b60dcb7ed2610a6d65d63604da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:ea:19:06:f7:91:cc:75:11:4d:e2:7a:e1:
aa:96:fa:aa:ba:8c:16:a3:16:72:7c:cc:21:7b:c3:
0f:d2:d4:98:80:0b:1e:51:75:b4:1b:58:22:d6:ed:
07:c0:d1:cd:48:1e:45:e8:df:57:53:46:05:ac:b8:
7e:85:42:ba:8b:a0:55:4a:26:5f:da:07:62:85:bc:
e5:a0:aa:5b:24:c0:b6:35:b0:65:af:bf:c6:8e:a9:
99:35:7c:e0:37:ce:5f:01:84:05:94:7e:ee:48:12:
82:37:ef:f4:57:73:ae:e1:22:96:31:c2:2c:6c:16:
2f:8f:cc:32:8a:64:35:9a:3c:59:56:25:2d:8d:72:
e2:f0:f6:1a:56:31:1b:0c:1c:32:3b:4d:12:10:fe:
49:3f:81:e5:54:3d:5c:f9:3e:9e:20:2f:5a:0b:b4:
07:18:e9:ac:4f:9f:8d:e7:9e:16:50:f3:c6:52:8f:
c7:95:54:ba:7c:70:71:66:8c:92:59:51:08:14:5a:
c7:c0:5c:9b:dd:78:cc:26:2f:ec:0a:5f:04:b9:0e:
d7:57:91:c2:9e:8c:7f:bc:49:c2:e4:16:e8:a5:d1:
6d:76:f5:44:09:d9:d5:45:a5:a9:ae:a3:7e:00:74:
94:0d:e3:d6:22:37:90:6e:bf:01:24:30:38:ed:3b:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:47:A3:D5:C4:D4:21:B6:0D:CB:7E:D2:61:0A:6D:65:D6:36:04:DA
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/2Eej1cTUIbYNy37SYQptZdY2BNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.175.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4b:7e:87:03:5e:b1:1a:64:5d:e7:52:a3:0a:19:04:a7:5d:
44:60:9e:c1:f5:90:a8:3d:f2:33:ef:6e:c5:74:6b:37:77:7f:
f3:1c:37:bd:c3:e4:6a:4e:bb:7d:ca:4d:b0:9d:f2:69:f7:ad:
da:98:82:3d:73:45:6f:d4:18:0e:03:bf:1e:5d:00:5e:93:46:
41:0f:0c:45:fb:4f:67:6b:3d:e7:f9:f1:b9:45:1c:82:a4:ee:
57:14:9b:f3:5e:ae:70:6f:bd:59:23:61:53:7e:38:30:9b:de:
0d:f2:a2:da:42:01:b9:5e:18:cb:4d:dd:5a:cc:52:ee:d4:29:
57:f4:82:46:ad:8b:1b:13:10:31:f3:10:cc:d6:33:5e:db:70:
e3:f8:2f:f7:0d:e4:66:7e:8c:3a:9b:25:45:2d:1b:45:a2:4e:
fb:e4:79:76:85:a8:c8:41:4e:fd:fe:85:7e:34:44:2e:dc:e0:
c9:89:46:23:61:8a:d1:26:39:7c:91:c3:9e:56:f6:58:87:7b:
b2:03:8c:79:7b:2f:83:78:64:16:96:c2:2f:1b:e2:97:c6:a2:
cd:c6:d2:61:ed:c3:fd:e6:a4:c2:3d:a4:ac:18:5c:1c:51:f7:
e6:9d:09:49:b1:55:8c:09:28:dd:81:fc:26:84:87:7e:d0:12:
37:d9:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org