Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EutBaNN0NXCT24ysbP4Et0_HgEg.roa
File: EutBaNN0NXCT24ysbP4Et0_HgEg.roa (raw, json)
Hash identifier: VCnzqlXxdZ4B3wumPHogmLx6NLgZMszCTWsWnd5FOro=
Subject key identifier: 12:EB:41:68:D3:74:35:70:93:DB:8C:AC:6C:FE:04:B7:4F:C7:80:48
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0191FF226181BC20D92D2735423134F1860B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EutBaNN0NXCT24ysbP4Et0_HgEg.roa
Signing time: Tue 17 Sep 2024 08:38:48 +0000
ROA not before: Tue 17 Sep 2024 08:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 13:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:22:61:81:bc:20:d9:2d:27:35:42:31:34:f1:86:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 17 08:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12eb4168d374357093db8cac6cfe04b74fc78048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:1c:9c:51:8e:8c:7d:cf:6b:dc:86:9e:0f:
85:0c:88:0b:34:18:3c:b2:39:00:41:c1:8d:e0:38:
dd:85:18:69:23:fe:08:7d:3e:77:f3:3e:2a:a4:a2:
c1:96:ca:8e:60:7e:91:cd:88:62:ff:d8:10:cc:64:
03:0d:85:32:b2:8f:ae:e8:0a:52:95:79:fb:6b:99:
a7:76:c1:f2:01:16:54:0d:3e:30:18:4a:fa:c6:1c:
3d:74:e3:c4:d9:8f:c2:f1:9a:79:73:85:44:5d:f3:
e0:8c:03:08:d3:34:67:59:6c:06:1b:b8:57:84:87:
cd:12:f9:10:8c:1f:64:a7:78:a0:51:88:7b:b6:b3:
61:47:70:da:ad:4f:d4:0a:86:90:68:60:58:0c:8e:
87:87:0f:d0:7b:a5:c8:4b:3c:33:b1:9f:61:07:43:
c8:e9:38:59:a1:42:e0:39:64:ed:b2:75:82:e7:99:
cb:ea:7f:8f:be:4d:1f:7d:39:e1:c8:45:9a:2d:68:
18:3c:e6:85:ab:20:5b:69:21:31:74:00:db:d8:83:
06:dd:b9:b8:04:5e:b4:75:07:89:60:43:58:83:79:
82:d5:5b:62:81:49:49:ac:d1:1d:ff:d7:ae:65:96:
12:b8:26:30:de:ff:6e:55:7b:84:d7:64:95:af:85:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:41:68:D3:74:35:70:93:DB:8C:AC:6C:FE:04:B7:4F:C7:80:48
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EutBaNN0NXCT24ysbP4Et0_HgEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.94.170.0/24
91.223.110.0/24
195.211.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a5:20:0f:cb:a1:17:97:62:3c:02:1f:cd:80:7c:26:b0:00:
ef:27:b6:da:4f:f8:7e:28:03:09:21:06:79:79:f2:58:68:4c:
af:57:a2:2d:0c:06:dc:85:fc:eb:94:95:79:bf:8a:e2:19:82:
8f:a8:89:1e:df:64:56:bd:e8:5f:e2:d0:28:c5:57:b8:3c:15:
1f:2d:01:4b:2d:24:ca:ff:f5:7e:d8:3d:1c:39:bc:85:81:53:
bc:fd:1a:cb:e2:d3:6b:44:03:aa:c6:2f:d8:c2:0b:8e:1d:55:
59:4f:dc:59:8f:22:d6:5b:eb:6a:43:ae:84:6d:4a:89:88:8c:
32:85:cb:e2:3f:55:92:1c:46:a2:78:b8:3e:bc:cc:43:2e:4c:
ab:d7:ab:f4:17:e8:47:49:8c:f6:66:93:a4:ae:d3:69:2c:8e:
ab:6a:7d:f4:e8:5f:e3:e8:55:b7:da:8f:15:48:ca:36:d8:2a:
35:50:03:82:d9:6b:25:83:98:ac:7b:8d:60:f8:c9:2d:c4:03:
c1:e4:ae:ca:1d:85:2a:02:4f:b2:84:ea:8a:81:b9:2f:e7:2e:
5d:44:f8:7d:25:ec:d6:25:36:9b:6d:63:d2:57:d5:89:f4:eb:
6d:1c:5e:4d:98:c8:d6:ad:b2:f6:07:05:0f:4b:f6:8a:83:62:
98:a6:12:58
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZH/ImGBvCDZLSc1QjE08YYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwOTE3MDgzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmViNDE2OGQzNzQzNTcwOTNkYjhjYWM2Y2ZlMDRiNzRmYzc4MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuQcnFGOjH3Pa9yGng+FDIgLNBg8
sjkAQcGN4DjdhRhpI/4IfT538z4qpKLBlsqOYH6RzYhi/9gQzGQDDYUyso+u6ApS
lXn7a5mndsHyARZUDT4wGEr6xhw9dOPE2Y/C8Zp5c4VEXfPgjAMI0zRnWWwGG7hX
hIfNEvkQjB9kp3igUYh7trNhR3DarU/UCoaQaGBYDI6Hhw/Qe6XISzwzsZ9hB0PI
6ThZoULgOWTtsnWC55nL6n+Pvk0ffTnhyEWaLWgYPOaFqyBbaSExdADb2IMG3bm4
BF60dQeJYENYg3mC1VtigUlJrNEd/9euZZYSuCYw3v9uVXuE12SVr4XBgQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBLrQWjTdDVwk9uMrGz+BLdPx4BIMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvRXV0QmFOTjBOWENUMjR5c2JQNEV0MF9IZ0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBbVUAwQA
LV6qAwQAW99uAwQAw9O/MA0GCSqGSIb3DQEBCwUAA4IBAQCkpSAPy6EXl2I8Ah/N
gHwmsADvJ7baT/h+KAMJIQZ5efJYaEyvV6ItDAbchfzrlJV5v4riGYKPqIke32RW
vehf4tAoxVe4PBUfLQFLLSTK//V+2D0cObyFgVO8/RrL4tNrRAOqxi/YwguOHVVZ
T9xZjyLWW+tqQ66EbUqJiIwyhcviP1WSHEaieLg+vMxDLkyr16v0F+hHSYz2ZpOk
rtNpLI6ran306F/j6FW32o8VSMo22Co1UAOC2Wslg5ise41g+MktxAPB5K7KHYUq
Ak+yhOqKgbkv5y5dRPh9JezWJTabbWPSV9WJ9OttHF5NmMjWrbL2BwUPS/aKg2KY
phJY
-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:53 2024 by rpki-client on console-ams.rpki-client.org