Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eq0jJoYTVqtpWua66I9mynO5uic.roa
File: eq0jJoYTVqtpWua66I9mynO5uic.roa (raw, json)
Hash identifier: lLDFC0KhDqtWGLtd1jU3RCFZEZfy3qB/+j79VqglKIE=
Subject key identifier: 7A:AD:23:26:86:13:56:AB:69:5A:E6:BA:E8:8F:66:CA:73:B9:BA:27
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0188C831744302BDD2D8D9063FBE4ECE75C9
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eq0jJoYTVqtpWua66I9mynO5uic.roa
Signing time: Sat 17 Jun 2023 07:11:04 +0000
ROA not before: Sat 17 Jun 2023 07:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6762
IP address blocks: 89.43.43.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 13:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:31:74:43:02:bd:d2:d8:d9:06:3f:be:4e:ce:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 17 07:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aad2326861356ab695ae6bae88f66ca73b9ba27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:fa:52:43:e5:95:b7:cc:4f:4d:fb:2b:26:
57:29:51:0b:63:6b:16:7c:1e:ec:a8:5b:ae:fd:4f:
17:09:89:c2:f5:63:9f:ef:dc:36:da:41:25:d5:8a:
24:d7:7e:be:91:63:3b:18:e4:64:17:d1:90:94:c9:
d3:e0:46:09:6f:ae:fd:91:13:fa:e6:5b:c8:4b:bf:
8b:2c:d0:c7:b3:d5:82:ce:b0:2f:a7:40:d2:c7:39:
dc:43:88:aa:67:e3:e3:9f:f0:11:90:96:7b:33:e8:
99:d5:a3:ef:69:54:37:bd:c9:b5:3b:f4:b1:f8:a3:
f8:e8:3f:a1:99:f7:48:cb:0c:31:bb:e9:39:22:07:
2f:91:f7:43:34:9f:c1:e6:de:b5:3c:12:e4:67:cf:
3b:32:11:8c:2c:97:82:1a:6b:e4:91:61:8a:5e:17:
ea:03:a2:c7:f1:6d:a9:ee:af:3b:af:3e:02:a6:2a:
c8:5b:39:85:a4:c6:32:1b:01:dc:bb:b2:1a:c6:17:
d6:d1:d2:a1:cb:ff:f4:09:9d:1e:1b:ea:c7:ea:4d:
ef:a1:23:2b:29:af:f8:15:59:0a:7f:b4:7f:f3:85:
d0:58:c0:1f:93:b1:55:2d:ed:3f:51:03:6d:d9:ff:
05:3d:45:96:c9:5e:f9:96:87:8e:c3:92:48:77:e0:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:23:26:86:13:56:AB:69:5A:E6:BA:E8:8F:66:CA:73:B9:BA:27
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eq0jJoYTVqtpWua66I9mynO5uic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
89.33.163.0/24
89.39.252.0/24
89.43.43.0/24
89.45.34.0/24
93.113.158.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:11:a0:36:7d:bd:8b:32:11:7a:4d:5a:69:dc:ea:9d:20:cd:
5a:ef:0e:45:1c:dd:8c:55:79:a7:7f:b3:19:9e:d0:a9:d2:17:
b5:5d:6c:5f:af:c4:ef:20:a4:82:f2:66:f4:c5:ca:1c:f0:37:
8e:61:c8:a5:89:3a:d5:00:c5:d2:12:ab:ad:aa:4b:3e:f7:9b:
0c:85:4c:6c:8b:76:3d:2f:83:65:4f:e8:33:9e:28:26:59:43:
c5:f2:5e:cc:15:83:1c:83:d5:33:e2:67:88:f8:88:ef:65:58:
33:cc:63:81:2f:ce:ac:47:80:d2:74:1f:27:59:31:0c:bf:88:
09:88:22:07:d1:ed:47:91:8d:a2:04:76:5e:2f:9e:26:2d:41:
ed:d4:3e:0d:62:94:79:85:74:df:ca:bd:16:9e:53:74:07:fe:
10:eb:b5:22:bd:24:99:3a:f4:16:06:24:25:2d:02:ec:18:11:
57:7b:b4:41:42:12:2b:c2:69:b0:7c:e9:89:f7:0c:84:34:d1:
f4:7f:aa:1c:08:54:c3:a2:79:a6:ec:92:cd:0a:7c:d7:89:8e:
92:a5:51:eb:93:b8:cb:c6:20:47:de:5a:c2:94:0e:e4:f7:99:
32:1c:82:71:e0:5a:6f:2c:e9:9d:56:83:6d:a4:7a:a6:9e:49:
35:32:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org