Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7EWJyXNCerc-II9RCfUu8NventY.roa
File: 7EWJyXNCerc-II9RCfUu8NventY.roa (raw, json)
Hash identifier: wau0GhybYVOfMUFnQrtmz8H/AYUeJIqCxLj1IFDfn/I=
Subject key identifier: EC:45:89:C9:73:42:7A:B7:3E:20:8F:51:09:F5:2E:F0:DB:DE:9E:D6
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC425640E3CC544F56CBD92CDB4FADC54
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7EWJyXNCerc-II9RCfUu8NventY.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 2.56.166.0/24 maxlen: 24
194.56.225.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 21:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:64:0e:3c:c5:44:f5:6c:bd:92:cd:b4:fa:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4589c973427ab73e208f5109f52ef0dbde9ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:8b:13:77:eb:aa:98:6e:99:7f:e7:91:c3:
2b:1a:25:00:85:15:d5:e0:e6:df:27:12:be:df:20:
23:cd:e6:31:28:06:93:94:6f:47:ee:5b:4a:ec:0f:
21:8e:3a:ca:ac:4c:7b:ca:b0:ca:1f:bc:bc:aa:9a:
23:b4:24:d1:38:86:ba:3e:48:34:4d:aa:c5:d1:78:
7b:78:97:90:84:72:4e:30:7b:ab:4a:4d:4e:53:ef:
88:af:12:d5:b0:bd:78:b5:5a:54:10:ec:8d:65:82:
6e:04:09:61:29:cd:08:d8:1f:8d:b3:9c:10:fe:b7:
67:e6:6e:ca:8e:80:0a:26:7c:2f:2e:7f:c8:f6:35:
2d:7b:db:aa:03:1b:0d:4d:47:ba:84:8a:6f:ab:0e:
68:5e:54:e2:e6:75:82:5a:6d:da:40:ed:18:b7:63:
d2:4c:1a:b9:7e:4b:81:4f:e2:13:82:47:e9:85:e2:
d5:a8:b1:cf:0e:6e:02:f0:ba:ed:22:02:a2:27:3f:
f6:a0:71:81:69:14:35:15:8c:ff:18:c4:de:47:08:
09:3f:47:1a:26:07:31:9f:7c:73:cd:f8:01:ee:89:
46:d9:cf:2c:33:8e:d2:c4:09:10:fe:bb:3b:64:3c:
12:2a:e4:5b:8b:20:95:cd:0e:7f:37:78:4c:97:72:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:45:89:C9:73:42:7A:B7:3E:20:8F:51:09:F5:2E:F0:DB:DE:9E:D6
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7EWJyXNCerc-II9RCfUu8NventY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
185.234.74.0/24
194.56.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:75:65:5d:98:7c:af:47:ed:b9:87:03:d4:8f:d2:40:68:94:
b0:1a:d1:bf:cc:b4:5f:b8:ca:46:fb:43:9e:95:2b:d7:46:f7:
ed:bb:1b:17:92:07:99:05:30:e0:38:1a:95:71:37:03:5c:34:
b7:47:22:49:31:16:de:bc:a9:a2:be:a8:72:31:88:c8:96:12:
c3:84:a4:e9:dd:67:18:f7:bc:59:a3:9d:89:35:bc:5f:74:4d:
66:0d:9a:cc:5e:b6:af:bf:f2:38:df:00:19:e3:46:11:f7:2b:
ae:ef:3b:4c:49:f7:80:7f:48:9a:4f:0b:27:61:91:62:06:79:
6e:6a:1c:f2:4c:cc:9f:cc:95:27:62:21:34:1e:6c:9d:48:b8:
26:7e:c6:d5:72:9b:42:7c:a8:73:35:cc:f0:4f:aa:4d:80:1c:
c5:37:7e:d8:e2:ae:62:94:70:01:1f:8d:c4:f6:48:18:10:6e:
05:d1:fa:5a:04:4c:6d:cd:89:e0:50:68:af:f3:30:0f:ee:b5:
b2:4f:67:8e:c6:b9:97:b9:b5:80:4b:10:83:7b:0b:cd:e7:90:
f1:3d:28:24:7a:a9:bc:42:55:40:68:1c:59:dd:b6:9d:7a:53:
7a:da:c4:43:34:69:d3:b3:7c:09:a2:7e:08:16:26:fb:d0:e1:
2d:7b:27:2b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzEJWQOPMVE9Wy9ks20+txUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzQ1ODljOTczNDI3YWI3M2UyMDhmNTEwOWY1MmVmMGRiZGU5ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h6LE3frqphumX/nkcMrGiUAhRXV
4ObfJxK+3yAjzeYxKAaTlG9H7ltK7A8hjjrKrEx7yrDKH7y8qpojtCTROIa6Pkg0
TarF0Xh7eJeQhHJOMHurSk1OU++IrxLVsL14tVpUEOyNZYJuBAlhKc0I2B+Ns5wQ
/rdn5m7KjoAKJnwvLn/I9jUte9uqAxsNTUe6hIpvqw5oXlTi5nWCWm3aQO0Yt2PS
TBq5fkuBT+ITgkfpheLVqLHPDm4C8LrtIgKiJz/2oHGBaRQ1FYz/GMTeRwgJP0ca
Jgcxn3xzzfgB7olG2c8sM47SxAkQ/rs7ZDwSKuRbiyCVzQ5/N3hMl3IqKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOxFiclzQnq3PiCPUQn1LvDb3p7WMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvN0VXSnlYTkNlcmMtSUk5UkNmVXU4TnZlbnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjimAwQA
uepKAwQAwjjhMA0GCSqGSIb3DQEBCwUAA4IBAQCmdWVdmHyvR+25hwPUj9JAaJSw
GtG/zLRfuMpG+0OelSvXRvftuxsXkgeZBTDgOBqVcTcDXDS3RyJJMRbevKmivqhy
MYjIlhLDhKTp3WcY97xZo52JNbxfdE1mDZrMXravv/I43wAZ40YR9yuu7ztMSfeA
f0iaTwsnYZFiBnluahzyTMyfzJUnYiE0HmydSLgmfsbVcptCfKhzNczwT6pNgBzF
N37Y4q5ilHABH43E9kgYEG4F0fpaBExtzYngUGiv8zAP7rWyT2eOxrmXubWASxCD
ewvN55DxPSgkeqm8QlVAaBxZ3badelN62sRDNGnTs3wJon4IFib70OEteycr
-----END CERTIFICATE-----
Generated at Thu Jan 11 00:45:09 2024 by rpki-client on console-fra.rpki-client.org