Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/ELtYyFNgpTQpI3DpeKqMDmMdHFo.roa
File: ELtYyFNgpTQpI3DpeKqMDmMdHFo.roa (raw, json)
Hash identifier: Lf6HcGcWlLBG/zGwJR4rs50vHIWbmB7t30H4PyanQiE=
Subject key identifier: 10:BB:58:C8:53:60:A5:34:29:23:70:E9:78:AA:8C:0E:63:1D:1C:5A
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0188FD820AD65D02BE1C62BABB49BFB8CA14
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/ELtYyFNgpTQpI3DpeKqMDmMdHFo.roa
Signing time: Tue 27 Jun 2023 15:38:58 +0000
ROA not before: Tue 27 Jun 2023 15:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 94.137.75.0/24 maxlen: 24
94.137.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:82:0a:d6:5d:02:be:1c:62:ba:bb:49:bf:b8:ca:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jun 27 15:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10bb58c85360a534292370e978aa8c0e631d1c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:14:a3:45:10:f0:1c:90:71:4c:7e:23:30:
fb:bd:6e:ab:5d:a3:7a:68:15:d9:53:8b:d4:91:b2:
5f:fe:d1:ca:63:74:83:0a:0a:7e:a2:b5:e8:f4:7c:
64:2a:ce:4b:ce:a0:41:8e:b0:92:9d:69:cc:e2:05:
84:c6:f2:92:b2:32:b8:05:f9:4a:4e:12:f1:de:28:
e4:a2:4c:f9:4e:54:06:83:91:57:86:2c:b7:5e:b3:
20:4d:45:69:65:3e:8b:b4:dd:70:65:b2:83:d7:d1:
67:bb:32:2c:f6:fa:e3:cc:bf:ee:3f:a7:5d:59:26:
b6:b3:eb:e6:22:36:d6:17:90:2c:c7:1d:f1:e6:c6:
61:6a:96:70:f6:c1:6d:a8:96:b0:80:c5:76:9a:69:
cb:29:a2:f8:bf:66:c6:ac:dd:b8:e9:5f:ea:72:78:
fe:51:cb:9e:b3:af:44:ff:55:4f:de:26:ab:e8:ad:
77:3f:b0:c4:f1:0e:ff:f4:d8:9b:80:2b:73:06:9c:
50:78:5c:90:fe:0a:1c:01:28:95:45:d4:53:01:25:
e8:a6:ba:eb:98:3a:c0:e3:dc:a5:79:21:91:17:87:
41:4e:c1:75:81:78:1a:5d:ed:53:51:c3:55:c9:4b:
54:17:79:86:ac:c0:a8:a0:db:3e:bb:07:a0:fc:f3:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:58:C8:53:60:A5:34:29:23:70:E9:78:AA:8C:0E:63:1D:1C:5A
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/ELtYyFNgpTQpI3DpeKqMDmMdHFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.75.0/24
94.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
06:03:86:4e:1c:ff:de:3c:b2:ea:aa:fa:68:d5:d3:bd:66:4d:
91:3a:c5:f0:bb:32:5e:37:b9:e7:43:d3:40:8f:7f:63:0d:74:
c2:34:00:e9:85:55:af:d0:36:b0:91:78:db:f2:aa:cd:3d:18:
34:45:05:49:93:52:49:fa:0f:e6:3b:6d:b3:cf:1b:7d:f8:af:
45:17:2c:70:5b:80:30:6d:48:42:41:a0:8a:ec:fc:c9:eb:fc:
ed:d9:30:18:2f:07:6f:b6:2f:84:3c:18:29:d2:53:a8:aa:52:
a1:c2:14:72:41:83:4e:ad:a8:5d:8c:a0:f7:7f:09:71:0a:9e:
36:8d:a9:ff:ce:b6:f3:1e:56:7f:42:47:6c:c2:83:0e:ea:64:
99:7b:7b:8f:2f:bf:43:b3:0a:ac:1b:bb:59:ba:2e:d0:0c:95:
e0:c4:e2:dd:82:b9:ab:95:7a:ac:e1:76:9b:3d:a4:84:ca:9b:
51:76:3f:b5:f6:54:7e:89:fe:e0:4d:dd:0a:3e:97:3d:b9:09:
38:b0:13:18:55:8d:32:2e:28:81:27:3f:6d:a3:89:61:2e:97:
89:eb:a0:ee:7e:a1:bb:54:e9:40:9e:7b:9e:8a:fc:40:7d:3b:
57:05:da:c0:3c:ea:53:7a:34:3a:da:2f:c0:b5:bf:78:f1:38:
c0:f5:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:33 2024 by rpki-client on console-fra.rpki-client.org