Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/EbulehDJnZfklecxEWTfycGtm3M.roa
File: EbulehDJnZfklecxEWTfycGtm3M.roa (raw, json)
Hash identifier: T7u/bngk1ur4kKeGbBFRAMwk5geu1klvo+5GGfZuD2c=
Subject key identifier: 11:BB:A5:7A:10:C9:9D:97:E4:95:E7:31:11:64:DF:C9:C1:AD:9B:73
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018FDCA74F3283E0E114CBFAA5D9DAEA2680
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/EbulehDJnZfklecxEWTfycGtm3M.roa
Signing time: Mon 03 Jun 2024 05:51:43 +0000
ROA not before: Mon 03 Jun 2024 05:51:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.148.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 06:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dc:a7:4f:32:83:e0:e1:14:cb:fa:a5:d9:da:ea:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jun 3 05:51:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11bba57a10c99d97e495e7311164dfc9c1ad9b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:2c:70:82:fb:bc:5d:d0:1e:5b:34:4b:78:
d3:59:d6:f6:52:ac:d6:94:d5:68:65:56:37:f7:77:
de:29:82:52:21:94:2e:6d:5f:cd:f3:f2:aa:6f:ac:
46:f1:f9:09:e9:ce:59:d0:68:23:5d:07:81:f9:d0:
e0:ff:91:ba:60:74:86:8b:69:8f:87:bf:72:d9:e5:
ff:71:39:ad:79:37:4f:ea:70:77:a7:74:24:59:d5:
01:26:9e:00:0e:d6:c6:2a:36:a6:05:7c:78:f1:64:
87:27:63:d7:8f:e9:57:d9:35:d5:2a:40:83:ef:38:
40:18:9f:b6:c1:d6:ca:a3:3b:92:4d:7f:5c:71:7a:
c9:22:80:b2:ec:f2:91:36:db:00:78:7d:75:9a:87:
19:64:a8:0b:5f:c4:46:b4:71:4a:d8:54:de:78:34:
f3:22:1a:6c:5f:f2:1f:30:44:81:02:c8:87:43:af:
23:83:5c:47:96:f3:67:a8:bd:40:0f:15:da:f0:01:
47:89:29:19:10:ed:51:e8:d3:4b:b7:4f:e8:b8:85:
ac:d1:c2:c7:76:dd:1a:4d:cf:17:f7:09:92:ad:9b:
13:1b:1f:8f:30:57:5a:84:9a:c8:96:21:d7:70:58:
d0:b1:4f:a8:27:fc:28:35:28:36:47:8c:4b:e9:c8:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BB:A5:7A:10:C9:9D:97:E4:95:E7:31:11:64:DF:C9:C1:AD:9B:73
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/EbulehDJnZfklecxEWTfycGtm3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.70.0/24
Signature Algorithm: sha256WithRSAEncryption
40:88:b5:86:b0:a9:f6:91:ff:03:f5:80:fa:e8:ba:06:2a:88:
11:04:c0:24:fc:d7:4e:51:eb:56:66:20:ac:ba:b1:85:a5:91:
79:6a:a5:4f:15:f3:ec:28:98:a9:e9:21:c9:c7:80:7d:21:1d:
8e:da:18:60:d7:79:5b:8d:d1:d7:18:be:19:e2:f9:e9:8c:3a:
b0:d1:74:fe:1b:19:86:2b:03:65:db:9a:b0:c7:1a:fa:9c:ea:
cb:fb:b4:1f:f7:fa:86:df:fb:f1:03:29:0f:32:23:20:3c:88:
06:ab:21:79:a6:8b:72:3d:05:41:79:c3:95:c5:f5:87:dd:8d:
39:3a:ae:93:3a:25:e6:9e:98:0b:d1:23:4e:81:e2:6a:e4:8c:
2b:79:bf:b7:1f:36:7f:bd:ea:dc:ca:f8:9b:ab:17:00:28:b1:
29:5c:e9:ef:52:56:5e:4a:c8:64:b1:de:17:18:7b:ec:49:be:
85:94:21:57:fa:f4:5c:bb:33:e7:1d:0c:78:2f:66:1c:b8:7c:
17:f0:cb:15:6d:cd:b1:00:d5:65:03:96:fb:f8:95:14:78:c5:
44:e4:da:5f:3d:fd:0a:b8:f0:70:41:c2:ae:07:ab:95:bb:68:
b7:fd:8f:a3:81:a1:56:b0:65:bd:24:82:b9:ec:32:bc:7d:ed:
8e:54:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:14:34 2024 by rpki-client on console-fra.rpki-client.org