Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/eekkBODAEDDXCvUvHulRAUZ7X2E.roa
File: eekkBODAEDDXCvUvHulRAUZ7X2E.roa (raw, json)
Hash identifier: pNL2jgmkHhcO8pt0V6gyHAbAHqMJyj/HzfYzthIvI/8=
Subject key identifier: 79:E9:24:04:E0:C0:10:30:D7:0A:F5:2F:1E:E9:51:01:46:7B:5F:61
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 01884983F4893DB8D90C500DA3A288F1B694
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/eekkBODAEDDXCvUvHulRAUZ7X2E.roa
Signing time: Tue 23 May 2023 16:49:24 +0000
ROA not before: Tue 23 May 2023 16:49:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 45.149.218.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:83:f4:89:3d:b8:d9:0c:50:0d:a3:a2:88:f1:b6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: May 23 16:49:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e92404e0c01030d70af52f1ee95101467b5f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:d4:5f:87:a3:9b:6b:15:1b:67:34:8e:f5:
57:b7:3d:72:92:aa:b3:12:63:ec:fb:62:29:41:58:
c2:d9:be:a9:78:40:7f:46:4c:7a:95:e0:2f:9a:d1:
57:ac:54:b4:ff:f4:0d:92:89:b7:7d:5f:04:86:68:
61:87:4d:dc:33:65:52:4e:fc:8f:0b:fc:cb:91:df:
4c:6f:db:fb:44:f3:73:bf:1f:fb:d6:32:0b:f4:aa:
f3:b8:b3:9f:9a:9d:4d:59:e0:46:3e:2f:72:5a:d6:
c7:87:96:f9:e1:57:5e:f9:d7:71:84:86:13:46:76:
d1:9e:70:ea:f2:93:03:cf:91:01:75:32:f5:60:de:
76:75:77:a6:90:88:db:22:4a:f0:d8:bb:2b:de:19:
00:31:de:df:5a:3c:7a:b0:e1:72:6b:3c:d0:09:b2:
0d:5d:7a:19:31:11:8c:74:1c:6a:5a:0e:9b:ec:40:
4d:a1:3d:51:76:aa:c1:74:11:f0:c3:75:2a:ac:55:
8c:03:a1:9d:dc:52:f2:2a:6f:dc:50:e7:6f:35:40:
3d:c7:20:ed:fa:ad:d0:ab:86:7d:ab:28:e9:86:96:
aa:d6:01:fb:ee:ad:6f:67:0d:03:bf:3f:3e:18:36:
e3:3e:42:08:74:ba:45:d1:d9:b5:ce:03:4b:b3:6b:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E9:24:04:E0:C0:10:30:D7:0A:F5:2F:1E:E9:51:01:46:7B:5F:61
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/eekkBODAEDDXCvUvHulRAUZ7X2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.218.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:94:97:3b:0f:8c:2b:63:df:f2:13:12:01:b9:5e:ce:f9:c6:
f7:ba:c9:18:65:18:c3:89:8c:83:85:ba:bf:84:d1:f5:43:3c:
30:95:3e:74:f8:bc:6e:d1:6d:fe:37:5f:e3:48:0a:6b:bd:f0:
c7:cb:4e:58:b2:72:77:df:db:21:12:99:6b:4d:4a:dd:48:57:
07:60:af:d7:4b:5a:ea:27:d2:51:1a:08:2f:91:57:70:f4:3f:
6a:9a:e0:70:0b:62:5c:4f:46:8b:7e:7c:98:8c:ad:00:ce:89:
2d:d7:a8:0f:0d:cc:d3:e6:bc:71:d2:e8:12:9c:0c:58:f0:98:
ae:a9:85:98:62:61:19:3e:f8:41:22:67:75:4b:d5:ae:89:29:
6a:3e:13:8c:63:c3:d8:00:bf:c2:c4:ee:b1:5f:93:36:08:87:
13:fa:6a:83:97:50:b0:44:27:c0:86:7f:a1:ab:1f:ba:0a:6d:
09:cd:7e:7c:b3:00:5b:4f:99:cf:6b:c8:06:a9:0a:89:2f:03:
b0:a3:66:f7:35:2f:22:46:ad:c7:f8:b7:11:03:2a:e5:7f:59:
30:21:98:cc:13:40:b1:7b:f1:9b:74:ea:3a:78:cb:44:a4:01:
01:62:4b:a7:ed:13:23:1a:20:ab:be:71:f3:6e:e3:a7:1e:d6:
f4:37:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:11 2024 by rpki-client on console-fra.rpki-client.org