Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/EUZOUZPXTD1bCQZYVdqDAChSxtQ.roa
File: EUZOUZPXTD1bCQZYVdqDAChSxtQ.roa (raw, json)
Hash identifier: Ac4Eu6UVVmpq/ee5oCeM1oz1DCyKiglrD1N8GR6x9C4=
Subject key identifier: 11:46:4E:51:93:D7:4C:3D:5B:09:06:58:55:DA:83:00:28:52:C6:D4
Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial: 018571FA24C93CFB03BEE49F96498C698141
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/EUZOUZPXTD1bCQZYVdqDAChSxtQ.roa
Signing time: Mon 02 Jan 2023 10:14:56 +0000
ROA not before: Mon 02 Jan 2023 10:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 194.33.16.0/24 maxlen: 24
194.32.206.0/24 maxlen: 24
194.32.220.0/24 maxlen: 24
194.33.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:24:c9:3c:fb:03:be:e4:9f:96:49:8c:69:81:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Validity
Not Before: Jan 2 10:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11464e5193d74c3d5b09065855da83002852c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f8:82:d1:3c:34:ca:bd:8c:ca:3a:21:64:fb:
82:bb:af:60:05:f2:51:56:da:9e:09:73:f5:87:79:
d0:ee:4a:fc:e5:ef:cc:4d:a1:00:57:27:96:f9:21:
36:e4:50:3c:76:43:9f:ff:36:a6:5d:77:c1:3f:4d:
32:56:5a:f0:15:10:e9:b0:1e:80:28:11:d0:ca:05:
be:85:84:11:8d:80:52:1d:19:41:09:6c:c1:e3:2d:
7e:52:34:fe:1a:6d:4b:b0:c8:1e:ed:d5:2b:cc:b6:
1f:02:7e:7d:a6:dc:bb:56:a0:65:6e:64:d8:16:70:
c2:2f:5a:a2:aa:72:74:28:4c:db:5e:b6:31:af:df:
11:37:8a:3a:82:43:a9:93:8a:15:45:f3:11:84:b9:
56:2c:42:a8:d9:84:6b:45:6b:c4:5d:2e:3b:03:5c:
f3:39:95:ec:e4:7d:ef:99:e8:5d:4f:36:8c:cf:92:
28:2e:67:5c:9f:df:67:f3:f6:d8:c7:41:b0:9d:63:
04:64:5c:e1:a2:29:0f:4f:ca:f2:43:31:dd:21:e9:
56:2b:04:50:53:08:e2:10:7c:80:fa:86:88:cf:18:
bb:d0:ff:94:66:c2:1a:36:01:1f:3f:db:7d:ad:a1:
84:b8:a2:7c:64:ea:9d:ac:11:76:64:3e:d1:ec:ed:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:4E:51:93:D7:4C:3D:5B:09:06:58:55:DA:83:00:28:52:C6:D4
X509v3 Authority Key Identifier:
keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/EUZOUZPXTD1bCQZYVdqDAChSxtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.206.0/24
194.32.220.0/24
194.33.10.0/24
194.33.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:12:43:71:f7:4d:71:cf:8a:45:27:a2:fb:68:38:2c:f9:5a:
09:fc:36:c5:41:9d:df:d5:32:d5:35:76:12:06:b8:94:2f:fa:
ec:3c:63:8a:4f:a3:92:1f:1e:43:c5:29:b2:4d:1b:52:ff:92:
a7:6d:d3:20:bd:52:ad:60:aa:24:9d:97:28:12:5c:77:ad:de:
44:5d:d6:ed:8b:0c:e8:86:2b:d3:6c:7f:b7:4a:0c:0c:17:ec:
c0:ad:4a:da:d4:78:5a:41:86:6a:26:7d:67:eb:b6:f4:85:44:
6f:40:6d:c9:0d:42:f0:c9:d3:45:6d:b0:1c:17:9f:b1:f3:6a:
c6:0f:7a:c9:d3:1e:7c:40:e1:43:31:57:44:12:21:7c:93:44:
1e:6b:65:de:10:7f:fc:7b:0b:72:a9:9c:0a:57:b5:40:04:dd:
3c:61:06:4b:1d:d3:e1:75:57:ed:b5:89:90:05:47:75:69:e2:
cf:b0:f4:bf:fd:2d:a3:b5:5b:6b:f4:58:b4:93:d4:82:9e:44:
ed:c1:17:03:51:6a:07:b8:ba:32:73:2c:21:3c:93:89:6c:2c:
59:b7:cb:c1:41:d9:65:65:45:69:d5:11:ed:aa:92:bb:24:75:
bf:74:c8:b2:13:0f:0a:23:7f:34:e3:88:88:50:05:d8:1e:6d:
45:bc:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:57 2024 by rpki-client on console-ams.rpki-client.org