Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/EwOqlSyGNPjHNufODqh85REFcqo.roa
File: EwOqlSyGNPjHNufODqh85REFcqo.roa (raw, json)
Hash identifier: OCCn2VmevyCbCfp596HHwYonvmX5sP4En4qN4vEMHdQ=
Subject key identifier: 13:03:AA:95:2C:86:34:F8:C7:36:E7:CE:0E:A8:7C:E5:11:05:72:AA
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01894AB8300097F00D73485A44C82233C5E6
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/EwOqlSyGNPjHNufODqh85REFcqo.roa
Signing time: Wed 12 Jul 2023 15:28:52 +0000
ROA not before: Wed 12 Jul 2023 15:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.56.208.0/21 maxlen: 24
213.170.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:b8:30:00:97:f0:0d:73:48:5a:44:c8:22:33:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 12 15:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1303aa952c8634f8c736e7ce0ea87ce5110572aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:1d:dc:c6:df:9d:98:69:5a:9a:58:22:28:
e9:52:bf:07:a4:29:2b:89:2a:d5:a9:35:ab:25:7f:
ca:1d:c2:46:c8:82:19:99:37:9c:6d:eb:8d:1d:ea:
87:c4:3c:7e:f1:44:5a:70:f9:20:da:f4:33:9b:d3:
8a:dd:db:34:83:f5:b5:1f:af:69:a8:6a:c6:57:e5:
e4:4a:0b:da:2a:b0:e9:75:6d:50:23:67:3d:c5:85:
1f:ef:79:7a:3b:84:f0:b3:8b:32:05:75:8a:46:40:
75:85:8a:2b:fe:fb:41:5f:ed:d6:eb:13:df:01:cb:
12:e0:9d:45:1f:76:10:49:e4:b6:4f:a9:9b:26:64:
f1:e3:4d:59:f2:9b:be:78:70:4a:8c:27:f1:3c:bf:
07:84:55:85:2a:f3:92:8c:56:83:9c:63:9e:2c:b4:
68:3d:a7:73:74:fb:c9:63:76:a3:1a:13:cb:06:01:
54:3a:81:05:ab:62:75:6b:3a:ba:67:44:b0:d6:24:
6b:c2:8a:21:ea:37:13:ec:ef:62:eb:81:10:ce:c5:
d6:99:b0:3c:31:c7:5b:ea:d5:c6:a8:64:67:d4:f6:
ff:39:b6:a5:41:f6:f1:67:1c:d7:f2:05:ed:2a:8f:
99:66:bc:f0:88:ad:20:f8:1c:1f:06:3f:93:90:69:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:AA:95:2C:86:34:F8:C7:36:E7:CE:0E:A8:7C:E5:11:05:72:AA
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/EwOqlSyGNPjHNufODqh85REFcqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
213.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3f:f4:8d:9c:ef:93:1e:a1:ba:5b:d6:c5:cc:28:02:30:12:
a5:2c:3f:71:f4:ff:d3:4c:b4:5d:1c:e3:25:ab:36:62:be:65:
6a:cb:2f:22:69:33:8c:3e:b2:4c:84:82:b6:7c:05:d8:e8:ff:
7d:a2:34:5e:88:03:a9:2a:c6:91:a4:14:89:39:62:d3:92:26:
36:ac:3a:76:92:3e:93:aa:c5:de:d1:9d:37:d5:85:2d:73:9a:
11:f0:a0:2d:54:f6:19:48:0a:d2:09:eb:c4:c6:34:e3:5b:cc:
25:82:74:0f:72:ca:53:83:aa:2f:6e:1c:2c:11:76:7b:f0:64:
e0:e2:7a:5d:37:a5:7a:87:58:82:ed:2d:1a:b3:a3:0e:18:af:
9f:0d:36:4d:d2:69:0b:37:bd:df:1c:95:de:5b:1c:07:ee:ca:
b8:61:a6:33:de:51:88:03:89:4f:cb:55:5c:63:20:c0:73:83:
2b:93:27:3f:2a:79:45:82:d7:be:75:39:64:8a:14:d1:04:64:
c5:c0:01:94:e8:50:6a:14:8b:86:5c:87:bb:ce:dc:35:0c:84:
21:19:e2:86:b7:9a:86:f9:b1:04:cc:33:c2:cb:71:00:2c:90:
bd:b6:bd:28:4e:68:29:a6:b9:39:56:0b:ab:f7:f7:af:3e:31:
c3:8e:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:21 2024 by rpki-client on console-fra.rpki-client.org