Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/EodZW7mpXySuDCNQhJcU_shAL5Y.roa
File: EodZW7mpXySuDCNQhJcU_shAL5Y.roa (raw, json)
Hash identifier: FXY6rebxEqDv5/iRRwn+XZ5938JUerPf9EsO/SMn1uU=
Subject key identifier: 12:87:59:5B:B9:A9:5F:24:AE:0C:23:50:84:97:14:FE:C8:40:2F:96
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 018BB34961A8D123EBAA00679DDEB407F7D6
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/EodZW7mpXySuDCNQhJcU_shAL5Y.roa
Signing time: Thu 09 Nov 2023 08:53:32 +0000
ROA not before: Thu 09 Nov 2023 08:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21472
IP address blocks: 185.98.214.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:49:61:a8:d1:23:eb:aa:00:67:9d:de:b4:07:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Nov 9 08:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1287595bb9a95f24ae0c2350849714fec8402f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:4a:8e:d3:e4:d2:8a:01:5c:ba:ce:20:ad:
7f:90:59:94:2a:3b:f1:6f:f0:47:f6:35:88:6f:c4:
33:ca:31:e5:ed:1d:df:d9:6c:fd:7d:48:f6:4c:db:
58:18:a5:16:81:3c:da:92:21:10:3b:07:83:c9:ea:
35:2d:0a:5c:08:eb:8c:9e:45:ad:7a:d4:71:cb:13:
dd:fc:73:33:3a:2f:3c:88:ad:59:0a:b4:c8:e7:f7:
aa:29:52:57:4f:75:cb:f1:f1:47:c3:0e:20:82:96:
1c:4c:71:57:e7:dd:e0:f5:14:9d:c0:32:ac:31:12:
0c:f6:b0:d4:2e:3c:b5:6d:8c:cf:fd:4b:3e:f1:c9:
db:25:d8:f9:6a:08:d1:b3:3d:b0:90:ff:70:a3:01:
39:9d:b7:08:2f:e8:c2:6d:31:3e:7c:65:60:df:9d:
5f:8e:14:53:af:02:4a:68:75:95:c5:49:2b:2b:7e:
df:99:48:c5:3b:c0:6e:c0:27:71:67:da:6b:87:6a:
ab:cf:30:24:2a:99:89:96:51:9c:4c:70:f4:2c:43:
18:3a:53:c5:d7:87:f6:51:cd:78:2b:8c:7a:01:e2:
6f:d6:18:36:a1:c7:8c:e2:0f:d2:ee:12:94:9b:4b:
36:af:d6:d7:16:c5:b5:5c:5d:ca:4e:71:05:1b:9f:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:59:5B:B9:A9:5F:24:AE:0C:23:50:84:97:14:FE:C8:40:2F:96
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/EodZW7mpXySuDCNQhJcU_shAL5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.214.0/23
Signature Algorithm: sha256WithRSAEncryption
86:bd:e2:03:5a:16:de:ef:75:47:14:21:36:d1:9c:a0:2d:37:
66:ba:65:de:a7:f5:81:df:3d:52:e4:6d:55:a9:10:10:1d:a4:
f2:af:b0:cd:2a:1e:cc:1e:f5:bd:82:dd:77:6b:3f:0a:c9:85:
b8:58:26:c2:de:de:65:40:cc:df:9d:fa:09:fe:b5:8f:c3:b7:
ab:9a:57:2b:d7:0b:1f:74:e1:a4:0f:f9:6b:cf:cb:bd:40:2b:
1a:d6:d7:e1:be:8b:9b:be:13:59:b8:96:5a:ff:07:b9:12:79:
54:f0:bc:de:b0:94:b3:d1:fa:4e:91:19:75:be:e3:b9:66:fb:
89:5b:aa:e5:ac:c1:27:24:42:b6:d4:d9:f7:c8:7c:f2:48:46:
96:3b:53:a7:ba:8f:cc:a4:ca:15:e5:47:1c:9b:23:3c:75:49:
6d:03:fe:46:b1:0a:6a:e7:27:af:f9:bc:be:8d:7e:f3:4f:78:
a2:2c:6e:de:85:e7:7a:c4:e3:69:a4:d2:17:32:29:85:1b:60:
a8:ab:15:ba:b9:4c:95:50:42:12:a7:9f:68:e7:b6:57:45:e7:
52:0a:9e:1e:c3:ab:7b:f5:a4:bf:5d:68:76:1a:70:46:34:41:
d0:16:1d:9d:0c:1a:b9:b2:a0:60:4c:9e:7a:fe:4d:7e:81:95:
8d:87:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:07 2024 by rpki-client on console-fra.rpki-client.org