Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/eo4fZTTOajnO01U7MMw8fvjipW4.roa
File: eo4fZTTOajnO01U7MMw8fvjipW4.roa (raw, json)
Hash identifier: v8fHq57LaOX5VUNoBE/pJ1sVlvSX/0SLyDiaylDLxGg=
Subject key identifier: 7A:8E:1F:65:34:CE:6A:39:CE:D3:55:3B:30:CC:3C:7E:F8:E2:A5:6E
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 018CC94E620EF8A7ED716CE4B5203A1AD720
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/eo4fZTTOajnO01U7MMw8fvjipW4.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47444
IP address blocks: 86.117.140.0/23 maxlen: 23
160.62.12.0/24 maxlen: 24
160.62.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 17:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:62:0e:f8:a7:ed:71:6c:e4:b5:20:3a:1a:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a8e1f6534ce6a39ced3553b30cc3c7ef8e2a56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:8f:3c:9a:8a:ea:f3:43:d0:0b:fa:9d:57:
17:40:9a:ca:d1:48:e3:39:c3:db:70:7f:48:66:7e:
53:8b:2e:a8:02:73:07:1d:79:c5:ee:c5:1a:4c:93:
41:2f:b3:52:e2:87:1f:b4:0d:6a:16:5d:ed:a9:20:
d8:15:00:0e:c5:48:18:4e:b3:7d:71:fe:2c:89:d8:
35:b4:8b:e1:ab:cb:a9:11:78:87:5d:35:aa:c1:bb:
39:18:6f:2d:15:61:4b:ea:d1:91:80:62:08:fc:8c:
c4:0f:5f:ca:08:8b:77:48:9a:6f:6e:1d:87:f1:d1:
b3:c4:6f:1a:d2:18:72:b2:9b:fa:15:16:1d:0d:b1:
57:ac:1e:75:30:b9:f4:91:6b:8f:c1:6e:5c:4a:27:
02:ef:3a:3d:a3:27:fa:c5:03:f5:24:b7:4e:42:ae:
ed:72:03:24:05:30:46:51:36:93:13:45:34:f2:68:
c5:db:ba:1e:19:1b:b3:77:4b:0f:2e:c5:f0:3e:e9:
a6:76:06:16:fd:15:b9:8b:df:be:7b:b7:ba:3c:2b:
ab:84:5c:66:4d:ea:14:db:2a:47:ed:f1:90:38:dc:
4f:70:9e:28:8f:87:64:8e:da:27:6e:6f:ed:d0:df:
c7:2e:51:96:08:97:fb:28:de:4b:cd:e6:25:fa:2e:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:1F:65:34:CE:6A:39:CE:D3:55:3B:30:CC:3C:7E:F8:E2:A5:6E
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/eo4fZTTOajnO01U7MMw8fvjipW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.140.0/23
160.62.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:ce:a9:03:fa:43:25:3b:82:fe:a8:e2:5e:f2:19:ff:bf:35:
02:9e:95:61:d8:67:b2:ec:b8:b7:f1:d9:9b:2a:6c:25:3c:d9:
4d:63:75:3b:ed:8b:d1:38:5e:9b:8d:29:39:f6:a9:69:00:cb:
a8:c3:81:d8:52:fb:c9:4f:7c:3f:ea:1e:3f:06:e4:29:be:33:
5a:35:e6:bb:3f:f5:fb:3e:b6:ad:51:17:0b:c0:82:41:a7:17:
25:67:d3:fb:da:e6:ff:b1:7f:41:aa:56:a1:5a:62:ca:f0:1c:
38:44:ab:27:e0:75:58:4a:e5:f5:54:23:62:80:7b:6d:9e:1b:
95:86:76:a9:29:54:c2:6c:a0:c1:bf:d1:34:61:97:86:87:74:
03:92:be:cc:36:2d:a4:8f:ea:ad:5a:8f:85:f8:df:5d:be:a7:
c9:c9:00:ce:6b:d7:8a:99:6c:0a:20:02:8e:33:26:02:8f:50:
56:f2:19:c2:1b:23:6e:81:b9:c5:e5:ef:8a:6b:e8:d1:57:3a:
8f:d1:be:b9:5b:5d:95:29:5c:0c:2a:e2:6f:6e:56:fc:4e:c2:
d8:16:bc:8f:f4:8f:16:b8:e7:7c:19:46:51:a7:05:4a:1a:7c:
48:1d:16:43:51:77:de:63:b3:cf:ce:a4:6c:11:89:53:30:49:
76:48:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org