Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EDsIz7sktf0enPOg5E8HGuBgeqw.roa
File: EDsIz7sktf0enPOg5E8HGuBgeqw.roa (raw, json)
Hash identifier: w6q7UgLoLfquhBpd032qm+nUivzcMdZfeJqnZbmQVAw=
Subject key identifier: 10:3B:08:CF:BB:24:B5:FD:1E:9C:F3:A0:E4:4F:07:1A:E0:60:7A:AC
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500E4314111A29C9CC4EFD5CAD3CDFB
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EDsIz7sktf0enPOg5E8HGuBgeqw.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 185.89.250.0/24 maxlen: 24
62.100.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 17:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e4:31:41:11:a2:9c:9c:c4:ef:d5:ca:d3:cd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103b08cfbb24b5fd1e9cf3a0e44f071ae0607aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3c:09:4e:80:5c:f7:e0:bd:fa:7a:2f:b1:5d:
e5:3c:11:63:44:bd:17:65:0c:09:e2:19:1c:7c:0a:
8c:4c:d6:63:cb:5c:9e:e1:a9:de:5f:0a:f1:c5:c1:
15:38:27:1d:4c:ff:3e:f3:3a:29:6e:41:83:9f:25:
2e:2b:4b:32:ce:25:b0:ef:b8:b9:b8:9b:0c:50:56:
85:d1:46:a1:d9:77:0e:cc:33:bd:04:67:1f:b0:7d:
b6:fe:75:f7:85:64:5a:94:4a:a2:ba:59:0c:8c:d5:
4b:16:ac:63:d5:d3:de:b4:f8:94:e2:3a:88:51:66:
e7:a4:ac:cc:51:47:61:08:1e:27:43:34:f0:18:d9:
d8:5f:d4:de:5c:3c:a5:4f:97:50:52:29:9f:f9:ea:
78:66:e4:de:bf:b7:0d:dc:63:45:d8:33:58:28:8b:
d2:aa:d5:4b:26:03:3c:2a:e2:c6:f6:dd:25:9f:ab:
1c:b1:24:cd:68:a0:e4:cf:56:63:a5:0f:5d:1e:6c:
b3:d9:05:80:fa:4d:c6:f8:d5:31:66:c1:2e:79:d3:
dd:00:60:69:6a:f0:7c:7b:2c:86:f2:fc:ba:c7:5e:
99:93:cd:4b:14:d4:c1:93:89:d1:3b:8a:7f:05:0c:
7c:76:a5:9b:6d:53:5a:de:e0:50:00:ef:c7:55:88:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:08:CF:BB:24:B5:FD:1E:9C:F3:A0:E4:4F:07:1A:E0:60:7A:AC
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EDsIz7sktf0enPOg5E8HGuBgeqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.208.0/24
185.89.250.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4a:6b:f8:6a:c4:d4:87:5f:12:51:ab:e1:39:0c:a1:96:b6:
00:9f:da:26:20:76:48:2c:97:60:94:f5:65:44:e2:40:97:7b:
1e:5f:af:7c:ed:c9:34:ff:77:96:54:af:2a:e9:31:bd:70:a9:
ff:82:56:a9:65:5c:31:91:de:05:87:b9:19:65:43:44:98:d5:
06:16:b4:d2:26:4b:7d:f9:f9:ad:a5:8a:53:6b:06:96:fb:44:
95:e4:b0:1f:df:12:10:2a:74:d1:4e:02:e8:b4:40:e8:ef:3d:
9d:78:3b:b4:0d:a0:38:63:9a:07:4f:9f:a9:55:df:d8:dc:31:
03:0e:c6:1a:1d:98:13:e5:92:54:42:3f:e6:7b:32:75:0d:27:
66:07:ba:f4:92:80:e2:38:b1:33:23:f3:5f:64:77:b8:05:10:
55:2b:f8:de:bf:ba:18:1f:4c:4e:36:63:96:45:b7:0c:de:74:
f9:1f:a3:8f:b3:dc:8e:5a:eb:07:ad:ad:13:da:7b:20:b5:2e:
c1:6d:6c:99:50:7a:51:6b:c4:95:02:2c:63:3d:2d:8d:46:57:
e9:33:09:fd:1c:12:03:2b:07:65:d9:83:d5:f7:dd:22:b9:c5:
23:5e:e5:0e:f8:3a:24:69:6b:65:bd:c8:36:1b:4c:3c:e6:e6:
59:62:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 18:21:21 2024 by rpki-client on console-fra.rpki-client.org