Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/eP7L2HuBCOzKBX_IRxSiueSEXu8.roa
File: eP7L2HuBCOzKBX_IRxSiueSEXu8.roa (raw, json)
Hash identifier: aHmJtTBjj26CS+/OMBYs1TnFVJ4tADlPSuhOM555uAc=
Subject key identifier: 78:FE:CB:D8:7B:81:08:EC:CA:05:7F:C8:47:14:A2:B9:E4:84:5E:EF
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 018DEFDFF518C83C85265A188E201E1A4C4E
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/eP7L2HuBCOzKBX_IRxSiueSEXu8.roa
Signing time: Wed 28 Feb 2024 13:20:48 +0000
ROA not before: Wed 28 Feb 2024 13:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59745
IP address blocks: 45.151.92.0/22 maxlen: 24
80.66.96.0/20 maxlen: 24
80.66.109.0/24 maxlen: 24
185.198.200.0/22 maxlen: 24
195.20.20.0/22 maxlen: 24
2a02:340::/32 maxlen: 32
2a0a:8ec0::/29 maxlen: 48
2a0a:8ec0:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:df:f5:18:c8:3c:85:26:5a:18:8e:20:1e:1a:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Feb 28 13:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78fecbd87b8108ecca057fc84714a2b9e4845eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:a7:da:22:a1:72:a0:4e:d7:40:ba:39:4f:
49:4f:e5:c3:1e:0d:ed:2d:98:3a:bb:d2:92:bf:18:
22:56:b7:f5:09:be:d0:41:47:01:10:db:0c:76:75:
07:b8:40:76:13:b6:d7:3f:21:2a:36:ab:b1:26:16:
27:e1:7f:9b:6e:62:aa:d7:7b:f1:c9:85:d8:9a:e6:
0a:74:ab:24:87:aa:32:83:d5:af:51:6d:45:f4:39:
5b:1b:d1:3f:a9:1b:31:a2:ec:90:e5:50:84:fb:c2:
ce:be:fd:dd:81:5f:01:11:f0:4b:a7:dc:1a:91:18:
a4:8c:f6:bf:67:88:78:36:4c:6c:88:e7:3d:22:50:
ae:81:3d:f1:3a:e5:b3:d5:e5:45:9a:7c:eb:57:76:
0a:65:04:0b:b5:f1:05:17:ba:44:8b:02:f2:4f:07:
50:2e:1c:4a:80:49:ca:73:1d:27:7a:fa:7e:a8:49:
b6:09:1f:45:85:4c:19:81:56:ed:06:f8:01:c8:bc:
67:39:fe:11:ee:13:a1:fe:f7:fa:76:9c:40:87:e1:
c8:6a:3c:a6:3e:f5:7e:f3:60:93:c1:10:f5:14:09:
22:0d:26:35:49:b4:ed:c2:22:4c:83:c2:6c:8c:19:
11:f6:af:37:e1:c1:cb:eb:ea:05:76:34:d6:1c:59:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FE:CB:D8:7B:81:08:EC:CA:05:7F:C8:47:14:A2:B9:E4:84:5E:EF
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/eP7L2HuBCOzKBX_IRxSiueSEXu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a02:340::/32
2a0a:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
77:be:dc:33:99:58:52:7c:75:d7:ae:42:77:65:72:a4:2f:46:
1a:00:b9:9e:ae:4b:7a:c9:6c:a1:79:79:d5:e1:e0:53:e6:9c:
25:0a:f9:ee:3a:ea:a4:f5:b1:81:2c:3f:70:cf:b5:3c:00:0f:
f5:8f:7a:f5:e5:eb:ec:84:c2:72:b1:0d:42:96:63:3c:b5:5f:
ed:54:75:cf:82:fb:a6:27:71:18:cb:3d:86:93:da:90:27:d1:
e0:7a:9d:8d:80:4e:37:4a:40:03:cf:f3:70:ec:29:83:e9:03:
6c:ca:02:8f:3d:be:d4:d9:bf:0a:47:cb:16:cd:0f:c2:6f:34:
a1:8d:0e:56:0b:51:af:b9:56:dc:8e:4f:b5:34:81:7d:96:8a:
84:d0:b4:8c:f5:f1:14:02:4d:b2:87:00:21:4a:e9:0d:ac:6c:
2a:f9:b4:52:5b:13:b8:4f:06:1f:51:7d:3c:90:42:7d:42:59:
1c:c5:cb:05:9e:ee:37:a9:0b:59:0d:68:64:3a:f9:7a:d8:c8:
74:6e:b6:cd:c8:90:95:06:c4:b0:ff:b8:d3:6f:69:04:84:ea:
c8:43:d8:16:b7:3b:3b:ae:93:09:68:89:3f:2b:d1:31:6d:19:
df:65:55:cb:c8:7a:17:31:f6:c9:99:36:8c:59:7a:a4:d6:4c:
ab:64:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org