Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EzdixKyS0nXl3GXfl-Ezm78t8MQ.roa
File: EzdixKyS0nXl3GXfl-Ezm78t8MQ.roa (raw, json)
Hash identifier: FRGEZZ6jpn+8Y0ARdURPhnHV9UlCJIfrGJ46z3JcdTM=
Subject key identifier: 13:37:62:C4:AC:92:D2:75:E5:DC:65:DF:97:E1:33:9B:BF:2D:F0:C4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E4D65DCE5C110232640C9FDDCE4A3992E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EzdixKyS0nXl3GXfl-Ezm78t8MQ.roa
Signing time: Sun 17 Mar 2024 17:11:45 +0000
ROA not before: Sun 17 Mar 2024 17:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 13:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:65:dc:e5:c1:10:23:26:40:c9:fd:dc:e4:a3:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 17 17:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=133762c4ac92d275e5dc65df97e1339bbf2df0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:d9:c2:c4:f7:57:3f:d5:39:29:7c:0f:21:
81:3f:cb:58:08:88:90:2f:46:ca:08:44:d7:7e:40:
b8:97:24:c7:ef:e9:33:50:58:c6:45:8d:26:4f:3a:
53:a8:9d:11:6f:b5:c4:62:07:ef:d8:7a:f0:3e:e6:
50:89:23:40:08:31:69:ac:a9:a3:62:6f:4c:7a:cc:
09:09:d5:d1:d7:d1:9f:37:64:a9:c1:95:14:a1:89:
7a:41:32:c8:96:64:82:49:db:fd:f6:1f:ee:3f:07:
03:7a:3f:7b:0e:3c:70:f6:73:55:ea:31:8f:71:c3:
0c:19:76:42:e6:39:53:56:54:6c:18:96:08:50:7a:
96:39:d3:28:39:0a:2c:cf:5f:c2:c5:84:08:ff:21:
1e:48:dd:39:39:4c:0e:61:7a:d1:ea:f2:55:3b:e1:
48:cd:65:2b:7b:34:a6:b9:1d:e3:00:73:83:c2:77:
a1:da:7a:43:f3:61:0e:9f:0e:ab:9e:57:e1:8e:62:
88:41:b5:20:a8:be:39:bf:db:87:ab:8d:1a:56:1d:
e5:a9:84:6b:8c:28:b7:4f:cc:d9:bb:5c:7e:90:5c:
f2:4b:29:4d:45:17:3d:56:3d:8a:6c:cf:88:64:57:
7e:e2:34:ce:c3:e1:fe:f3:d1:c0:7a:0b:14:ac:cb:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:62:C4:AC:92:D2:75:E5:DC:65:DF:97:E1:33:9B:BF:2D:F0:C4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EzdixKyS0nXl3GXfl-Ezm78t8MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c0:56:86:bb:fc:4b:8e:b1:b1:9f:2e:cb:b0:4e:4c:9c:95:
54:b5:d4:89:eb:98:bb:5f:45:69:97:f1:35:99:f8:e7:ba:a4:
a4:26:a1:70:35:01:08:3d:50:aa:4c:eb:d4:2a:66:20:7f:c4:
fe:96:3d:6f:db:91:31:e8:a5:71:61:51:e0:d0:64:da:f2:ba:
59:39:91:34:7b:c5:fb:cc:63:12:9d:06:16:b5:0f:a8:1a:b3:
2d:73:40:c0:c8:2a:6c:e4:d5:d7:db:4c:5e:9e:f5:e2:c7:d7:
4b:79:72:56:8a:14:60:ed:7e:7f:9a:42:41:bf:9d:bb:a0:3f:
e0:b9:76:31:ad:8d:cf:ed:4b:4f:e2:3d:1b:5b:19:04:32:90:
a0:78:a0:f5:4e:52:85:68:6b:a1:03:22:53:a0:4b:62:bc:c7:
de:9c:a7:27:59:33:a6:12:9d:21:02:dd:d2:2f:82:ee:20:95:
50:c5:b8:64:73:71:4c:2a:2e:ef:c5:a1:ef:cd:ad:e6:c8:67:
73:1f:00:c2:13:40:66:51:d2:69:cd:ad:9c:1f:df:f2:bf:8d:
13:bb:19:ed:3e:54:00:d4:26:c4:3d:9f:2c:96:2c:df:39:33:
ca:82:10:91:2f:d9:f8:27:d5:6f:6c:9c:cc:3a:33:c1:41:ab:
67:91:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:54:43 2024 by rpki-client on console-fra.rpki-client.org