Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EaluwQuJa-gm-UDKfqyehGaUfMI.roa
File: EaluwQuJa-gm-UDKfqyehGaUfMI.roa (raw, json)
Hash identifier: 7clKxdq3n+X6oAntHXdEUwqkgDzsqQI/9PUdZtMJiv4=
Subject key identifier: 11:A9:6E:C1:0B:89:6B:E8:26:F9:40:CA:7E:AC:9E:84:66:94:7C:C2
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0186CB56DF389EB015DCDBA7C790CBF4F984
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EaluwQuJa-gm-UDKfqyehGaUfMI.roa
Signing time: Fri 10 Mar 2023 11:45:13 +0000
ROA not before: Fri 10 Mar 2023 11:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 89.251.27.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 17:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:56:df:38:9e:b0:15:dc:db:a7:c7:90:cb:f4:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 10 11:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a96ec10b896be826f940ca7eac9e8466947cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:2d:50:3c:df:ca:80:c0:78:b2:d5:af:1b:
49:57:3e:7b:8c:7b:87:1d:2d:4d:ea:61:27:01:75:
aa:a3:0f:5d:ea:ef:f0:08:80:50:fa:32:d8:07:8f:
b7:11:c3:31:96:8f:64:b7:25:14:1d:44:24:2d:19:
1a:08:29:ea:1b:cc:24:c5:f9:db:24:38:ae:a8:8e:
4f:68:6d:b8:3b:8c:ae:a7:d0:aa:bd:87:a7:b7:c6:
61:a6:af:96:52:fe:78:95:63:bf:a2:07:68:b7:f6:
1b:86:b1:8b:6d:12:03:f4:e0:f5:99:57:df:b8:72:
de:f3:f6:17:cf:08:5b:01:32:c8:f1:e0:25:cd:91:
cd:79:3b:a7:b3:52:38:04:c8:5e:71:e7:78:ec:8b:
a1:3e:47:c8:8a:45:5e:d9:6b:c6:93:05:5f:4d:de:
9f:96:af:ca:47:04:1f:e3:38:7c:80:69:5a:1e:d1:
2a:53:d4:7c:48:87:57:c4:e6:e1:aa:c5:7a:bb:cb:
eb:39:13:ba:65:df:70:29:8a:96:b9:74:21:92:24:
8c:83:7d:ed:bd:03:83:75:4a:51:0a:2e:86:2a:91:
dd:5a:26:0d:8e:7c:f2:85:29:f9:97:16:25:50:9e:
38:65:a3:e0:ea:44:50:f8:3b:39:90:9c:a6:4f:44:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:6E:C1:0B:89:6B:E8:26:F9:40:CA:7E:AC:9E:84:66:94:7C:C2
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EaluwQuJa-gm-UDKfqyehGaUfMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.27.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bb:b3:db:70:57:d1:f0:4d:5c:39:1b:26:0e:bf:60:1a:15:
df:cd:43:e6:c8:37:d2:00:35:6a:db:bd:50:e4:a8:43:ec:46:
10:7e:44:b3:c3:ab:51:fa:f9:f1:fb:68:68:1f:ae:9d:c4:84:
dc:5e:39:9f:26:7b:2d:e2:c9:d1:0f:66:1b:dd:28:ef:78:48:
cd:7d:33:45:ef:08:b0:c7:3b:91:8a:05:25:ef:3e:a9:44:f1:
1b:db:49:5f:f6:82:38:ec:7e:f7:15:02:b7:e5:7e:cb:14:2b:
aa:5e:4e:43:a5:97:25:aa:e4:a0:91:22:16:a0:7e:f2:fa:0d:
ff:af:ea:c0:8b:0e:01:a2:a5:af:e2:16:88:3a:da:77:93:62:
a0:07:a2:b9:a3:72:e8:6b:9d:15:72:51:d3:89:3d:5d:0a:01:
62:5d:ec:56:a4:9b:f2:ae:8e:0b:24:81:09:3a:2a:a1:5a:2b:
07:a0:af:f9:e0:50:af:b0:55:d2:43:4a:e0:c2:2a:c8:67:6d:
e1:d8:c3:65:4d:f9:89:2f:87:e5:17:d9:55:06:ea:69:be:cd:
c1:fb:11:05:b9:0e:5a:ef:38:6c:34:8d:e9:5a:40:4e:1f:3c:
3a:99:91:37:e1:0f:20:dd:96:4b:00:c7:ce:d2:8f:8b:89:b0:
aa:8a:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org