Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/egqMvVTvTB3g1u88G_GebwIFFcc.roa
File: egqMvVTvTB3g1u88G_GebwIFFcc.roa (raw, json)
Hash identifier: 15NrqEwxO0yTJO6mw1E5eFp4hoZefGha8jE+EcCFbqE=
Subject key identifier: 7A:0A:8C:BD:54:EF:4C:1D:E0:D6:EF:3C:1B:F1:9E:6F:02:05:15:C7
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246FEF85459B862BB5D20CD2BCCD885
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/egqMvVTvTB3g1u88G_GebwIFFcc.roa
Signing time: Mon 02 Jan 2023 11:38:53 +0000
ROA not before: Mon 02 Jan 2023 11:38:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39047
IP address blocks: 5.101.212.0/22 maxlen: 22
5.101.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 22 Mar 2023 12:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fe:f8:54:59:b8:62:bb:5d:20:cd:2b:cc:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a0a8cbd54ef4c1de0d6ef3c1bf19e6f020515c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:ba:d7:57:46:3c:e4:7b:7a:92:3a:18:f8:
8b:6c:ef:fc:88:b3:78:0f:ba:3e:03:58:c9:80:af:
3e:b5:4a:ef:23:52:cc:10:d3:e7:a2:e5:10:e2:a3:
93:28:54:5d:83:53:91:e7:6a:05:36:fa:78:59:ab:
8e:b1:fa:ca:e2:98:ff:63:a1:6d:cb:3a:27:b4:ef:
d6:f1:32:60:04:91:9f:09:6d:74:86:b5:48:e8:df:
6a:47:35:65:0d:c4:ed:99:44:1a:c8:ad:7c:64:0b:
ca:31:c1:fb:9c:1e:38:14:d8:a0:75:8e:fd:ed:57:
c6:0d:d0:e7:0c:8c:a9:6b:7c:8d:69:52:31:c1:dc:
2f:fa:1d:bd:07:95:37:81:a8:cf:85:4b:39:79:90:
4c:7e:4a:27:fb:10:c7:47:43:4b:1c:31:50:c4:5a:
46:91:50:6d:1d:20:92:6b:25:00:96:6c:3a:c4:37:
81:06:5a:2b:5d:d7:e6:01:03:10:9f:40:c8:81:27:
9f:43:e8:cc:6f:c2:3c:61:67:b5:e1:9c:d4:4c:f3:
01:cd:cb:30:67:44:15:d5:50:17:43:5d:d9:ec:e8:
54:46:9b:5e:4f:80:51:bc:0d:a4:55:68:69:22:25:
62:63:a9:40:46:7e:7e:53:94:6f:34:10:b5:cb:93:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:8C:BD:54:EF:4C:1D:E0:D6:EF:3C:1B:F1:9E:6F:02:05:15:C7
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/egqMvVTvTB3g1u88G_GebwIFFcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.208.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:57:41:b6:3e:da:f8:94:a6:7d:ee:f2:27:ed:b4:ef:80:98:
cd:30:cd:47:be:f2:fa:85:3b:ad:da:35:3c:9e:b0:eb:d4:ac:
47:1d:6c:53:89:3e:1b:c2:a9:73:f6:f7:de:88:0f:65:22:47:
cc:21:7b:13:d7:e8:96:0f:d6:e5:86:72:6b:3e:32:81:86:61:
6e:10:00:8f:5b:dd:3b:d2:b4:50:dd:c7:de:13:6d:20:6e:81:
42:2e:91:34:cf:48:0c:8e:ce:58:df:d8:33:02:21:98:b9:32:
24:d2:e4:15:b1:7c:75:ec:2e:84:f0:a7:33:16:f6:0a:23:a0:
de:b3:1a:89:cc:01:b0:cb:b8:18:54:a8:ea:ca:bd:bc:78:4e:
56:46:ed:6c:46:bc:b9:25:09:f1:fc:c2:92:69:b5:69:4b:13:
18:99:45:e1:22:90:a8:3d:06:4d:32:90:c6:f8:38:b3:a4:2d:
22:a2:c7:4d:dd:db:e4:07:7e:3c:76:83:74:c2:e5:87:0c:18:
11:45:3a:70:8b:85:68:e3:52:21:82:0c:61:d9:4b:16:2b:96:
cc:af:19:43:b6:05:d7:cc:e8:8c:11:b1:85:70:78:ce:84:06:
06:12:99:16:30:eb:be:c1:d1:1b:4b:d0:07:88:be:e9:38:ae:
bd:18:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org