Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/EGbqiyhWaln2bAJpj-Y3Wxma5X8.roa
File: EGbqiyhWaln2bAJpj-Y3Wxma5X8.roa (raw, json)
Hash identifier: neF20YP+QVfC05wsxmSCwpvLjOIX5NVC9kAOhgMlnGI=
Subject key identifier: 10:66:EA:8B:28:56:6A:59:F6:6C:02:69:8F:E6:37:5B:19:9A:E5:7F
Certificate issuer: /CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Certificate serial: 0188DFC828CFB62D82D06E4FF24E6677EAE5
Authority key identifier: 99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/EGbqiyhWaln2bAJpj-Y3Wxma5X8.roa
Signing time: Wed 21 Jun 2023 21:06:56 +0000
ROA not before: Wed 21 Jun 2023 21:06:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.184.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 19:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:c8:28:cf:b6:2d:82:d0:6e:4f:f2:4e:66:77:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Validity
Not Before: Jun 21 21:06:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1066ea8b28566a59f66c02698fe6375b199ae57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:1b:a5:b2:82:a6:70:fd:53:3b:c8:16:d5:
df:ad:fc:dd:09:aa:33:f6:58:fa:d3:5f:e4:a0:b4:
02:d7:63:77:a7:ff:58:31:74:51:e2:00:d4:af:29:
c6:c5:2b:e3:ce:8a:01:0e:4e:0d:af:22:17:f0:d9:
ab:9f:7d:88:03:af:2d:3c:4b:1b:b4:89:f5:9e:09:
dc:64:f8:8e:6d:1e:7f:56:8c:21:cf:d1:0f:10:fe:
f9:87:8e:bd:9b:60:d5:e0:52:dd:da:32:22:69:d9:
f3:0c:2a:ed:b6:de:30:e2:12:a3:d9:e4:88:dc:27:
01:a3:6d:fb:b7:aa:f9:64:56:b1:bd:1e:ea:1a:ce:
8d:1f:1c:42:a8:09:f4:c4:1c:5f:a2:f8:a3:aa:15:
2f:6c:7c:ff:48:ef:68:46:a0:3f:0d:ad:58:ac:2d:
62:5a:fd:39:1e:9e:0b:74:d7:7f:a8:90:1f:ef:25:
73:62:00:36:9c:b3:20:c4:a4:c2:1b:db:74:09:f1:
cc:6c:b3:3b:7f:2d:40:ed:b2:aa:64:a7:94:65:a6:
d2:14:6d:21:58:9e:ff:44:84:c6:d5:e5:70:22:6c:
e3:19:56:cb:7d:e6:be:47:ca:b8:68:e5:8d:b0:74:
81:aa:69:8e:77:b7:86:07:2b:8a:d9:83:ff:31:43:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:EA:8B:28:56:6A:59:F6:6C:02:69:8F:E6:37:5B:19:9A:E5:7F
X509v3 Authority Key Identifier:
keyid:99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/EGbqiyhWaln2bAJpj-Y3Wxma5X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.76.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d5:f7:2b:35:84:e2:1f:25:6c:30:aa:49:9f:2e:00:6b:21:
aa:b5:b0:c4:a3:c8:28:b9:34:3b:9d:85:14:32:65:8a:df:71:
2a:27:38:f7:2d:e5:e2:52:87:c2:46:33:2d:cc:06:93:d1:98:
78:07:4d:42:87:cc:15:b4:f0:55:ff:96:aa:ca:f1:07:b3:23:
3d:ee:e8:9b:19:46:75:c0:8f:b2:06:cd:b9:75:b4:1e:55:46:
5b:88:bc:61:d6:c9:68:e9:ec:6a:28:5e:99:e0:c4:06:17:dd:
5b:7b:38:d8:1b:4d:7e:7e:46:c9:63:3f:cf:f0:99:6c:e1:35:
c1:d1:e8:2c:8a:52:27:cf:54:6f:39:3d:d4:e6:12:d1:c7:d0:
89:c7:ce:16:5d:d1:20:0a:73:ff:c9:1a:c6:14:77:25:ee:f3:
94:61:99:4a:10:3b:4b:cb:03:29:d7:9e:53:a7:c3:bd:32:93:
6a:0e:86:f5:dc:fe:64:56:0e:e6:fb:8d:11:de:03:73:6f:94:
b1:c4:12:b3:71:05:d5:b5:12:d7:0b:c1:79:34:79:ba:04:a6:
a4:0f:51:c8:b9:75:39:5d:b8:87:10:2d:2b:9c:fb:b7:6f:b3:
d8:05:74:29:57:78:9a:c6:5c:e4:a9:60:9f:92:ab:af:6c:8b:
00:0e:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:16 2024 by rpki-client on console-ams.rpki-client.org